Privacy policy

Gift Inn Jewellers – Comprehensive Privacy Policy
Last Updated: 08/04/2025

1. Introduction

At Gift Inn Jewellers ("we", "us", "our"), we are committed to protecting your privacy in compliance with:

  • South Africa's Protection of Personal Information Act (POPIA)

  • EU General Data Protection Regulation (GDPR)

  • Other applicable data protection laws

This policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make purchases, or interact with us.

2. Information We Collect

Personal Information:

  • Contact details (name, email, phone, address)

  • Payment information (processed securely via PayFast/PayPal)

  • ID numbers (for credit applications or fraud prevention)

  • Demographic data (age, gender for product preferences)

Non-Personal Information:

  • Browser type, IP address, device information

  • Cookies and tracking data (see Section 7)

  • Purchase history and website interaction data

Special Categories (Only With Consent):

  • Religious affiliation (for custom ceremonial jewellery)

  • Biometric data (for custom fittings)

3. How We Use Your Information

Purpose Legal Basis
Process orders & deliveries Contractual necessity
Fraud prevention & security Legal obligation
Personalized marketing Consent (opt-in)
Product improvement Legitimate interest
Compliance with laws Legal obligation

4. Data Sharing & Third Parties

We only share data with:

  • Payment Processors: PayFast, PayPal (PCI-DSS compliant)

  • Logistics Partners: CourierIT, Aramex (delivery only)

  • IT Service Providers: Secure cloud storage (AWS/GDPR compliant)

  • Legal Authorities: When required by law (e.g., fraud investigations)

International Transfers:

  • Data may be transferred outside South Africa only to GDPR-compliant countries with adequate protection measures.

5. Data Security Measures

  • Encryption: SSL/TLS for all data transmissions

  • Access Controls: Role-based staff access to sensitive data

  • Regular Audits: Annual penetration testing

  • Breach Protocol: 72-hour notification to regulators if required

6. Your Rights (POPIA/GDPR)

You may:
✓ Request access to your personal data
✓ Correct inaccurate information
✓ Delete data (unless legally required to retain)
✓ Restrict processing
✓ Object to direct marketing
✓ Request data portability

Request Process:
Email info@giftinnjewellers.co.za with:

  • Proof of identity (RSA ID/passport)

  • Specific request details
    We respond within 10 business days.

7. Cookies & Tracking Technologies

Essential Cookies:

  • Shopping cart functionality

  • User login sessions

Analytical Cookies (Optional):

  • Google Analytics (anonymous usage data)

How to Manage:
Adjust browser settings or use our cookie consent banner.

8. Children's Privacy

We do not knowingly collect data from children under 18 without parental consent. Parents may request deletion of minors' data.

9. Data Retention Periods

Data Type Retention Period
Order records 5 years (tax compliance)
Marketing consents Until withdrawal
Website logs 12 months
Financial records 7 years

10. Direct Marketing

  • Opt-in required for emails/SMS promotions

  • Unsubscribe link in all communications

  • We never sell your data to third parties

11. Policy Updates

We will notify you of material changes via:

  • Website banners (30 days prior)

  • Email (for existing customers)

12. Contact Information

Information Officer: [Name]
📞 011 331 9462
✉️ info@giftinnjewellers.co.za
🏢 Carlton Centre, Johannesburg

Supervisory Authority:
South African Information Regulator
JD House, 27 Stiemens Street, Braamfontein

13. Dispute Resolution

  • First contact us to resolve issues

  • May lodge complaints with the Information Regulator (POPIA) or relevant EU authority (GDPR)