Privacy Policy

Website: https://ikarolia.co.za
Company: iKarolia & Co (“we”, “us”, “our”)

1. Introduction

At iKarolia & Co, we respect your privacy and are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or interact with our website ikarolia.co.za.

By accessing or using this website, you agree to the terms outlined in this policy.

2. Information We Collect

We may collect and process personal information that you voluntarily provide or that is automatically collected when you interact with our website. This may include:

• Your name, surname, email address, and contact number.
• Billing and shipping addresses when placing an order.
• Payment-related information (e.g. transaction details – note: we do not store card details).
• Account login information, if you register on our site.
• Information provided through contact forms, reviews, or customer support.
• Technical data such as your IP address, browser type, device information, and site usage patterns collected via cookies and analytics tools.

3. How We Use Your Information

We process your personal information only for lawful purposes, including:

• To process and fulfill your orders and manage your account.
• To communicate with you about your purchases, deliveries, or support queries.
• To send you marketing communications and promotional offers (only with your consent).
• To improve our website, products, and customer experience.
• To comply with legal obligations and resolve disputes.
• To prevent fraud, misuse, or unauthorised access to our systems.

4. Lawful Basis for Processing

We process your personal information under one or more of the following legal bases:

• Your consent, where you have agreed to receive marketing or newsletters.
• The performance of a contract, when fulfilling an order or providing a requested service.
• Our legitimate interests, such as maintaining website functionality, security, and business operations.
• Compliance with legal obligations, such as tax or record-keeping requirements.

5. Sharing of Personal Information

We may share your personal information with trusted third parties where necessary, such as:

• Payment processors for secure online transactions.
• Courier and delivery partners to ship your orders.
• IT and website hosting providers who assist in operating our business.
• Professional service providers such as auditors, accountants, or legal advisors.
• Regulatory or law enforcement authorities, where required by law.

All third parties are required to comply with confidentiality and data protection obligations consistent with POPIA.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, store preferences, and analyze traffic.

You can choose to accept or decline cookies through your browser settings. Please note that disabling cookies may affect website functionality.

7. Data Retention

We retain your personal information only for as long as it is necessary to fulfill the purpose for which it was collected or to comply with legal, accounting, or reporting obligations.

Once the information is no longer required, it will be securely deleted or anonymized.

8. Security Safeguards

We take appropriate, reasonable technical and organisational measures to protect personal information against loss, theft, misuse, or unauthorised access.

These include:

• Secure servers and encryption protocols.
• Restricted access to personal information.
• Regular security monitoring and updates.

However, please note that no system is completely secure, and we cannot guarantee absolute data security.

9. Your Rights Under POPIA

As a data subject, you have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate or incomplete information.
• Object to the processing of your personal information.
• Withdraw consent for marketing communications at any time.
• Request deletion of your personal information, where legally permissible.
• Lodge a complaint with the Information Regulator if you believe your data has been misused.

To exercise any of these rights, please contact us using the details below.

10. Cross-Border Data Transfers

If your personal information is transferred outside South Africa (for example, through international payment gateways or hosting services), we ensure that appropriate safeguards are in place to protect your data in compliance with POPIA.

11. Children’s Privacy

Our website is not directed toward children under the age of 18, and we do not knowingly collect personal information from minors.

12. Updates to This Policy

We may amend or update this Privacy Policy from time to time. The latest version will always be available on our website and will reflect the date of the most recent update. Continued use of our website after changes means you accept the revised policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

iKarolia & Co
Email: customers@ikarolia.co.za
Phone: 011 425 0848

If you are unsatisfied with how we handle your personal information, you may contact:
The Information Regulator (South Africa)
Website: https://www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za