Privacy Policy

Grace & Glory ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). This policy explains what information we collect, why, and how we use it.

1. Information We Collect

Contact details: name, email address, phone number, delivery and billing address
Order information: items purchased, order history, payment status
Account information, if you create one
Technical information: IP address, browser type, and pages visited, via cookies and similar technologies

We do not store your full card details — card payments are processed securely by our payment partner, Yoco, who handle this information directly.

2. How We Use Your Information

To process and deliver your orders
To communicate with you about your order, account, or queries
To send you marketing communications, where you've opted in (you can unsubscribe at any time)
To improve our website and services
To comply with our legal and tax obligations

3. Sharing Your Information

We share personal information only where necessary — with couriers to deliver your order, with payment providers to process payment, and with service providers who help us run our website and send communications. We do not sell your personal information to third parties.

4. Cookies

We use cookies to keep your cart working, remember your preferences, and understand how our website is used. You can control cookies through your browser settings.

5. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law (for example, financial record-keeping).

6. Your Rights

Under POPIA, you have the right to:

Request access to the personal information we hold about you
Request correction or deletion of your personal information
Object to the processing of your personal information
Withdraw consent for marketing communications at any time
Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us.

7. Security

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, and misuse.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page.

Information Officer: You can contact our Information Officer regarding any privacy-related queries at contact@kardoshost.co.za.