Terms & Privacy

Who we are

This website is operated by Gallery Naidoo (Pty) Ltd, trading as Gallery Naidoo (“Gallery Naidoo”, “we”, “us” or “our”). We are the responsible party for personal information collected through https://gallerynaidoo.com.

Order information is stored in the website database. Yoco processes card payments and manages card details.

Personal information we collect

The information we collect depends on how you use the website. It may include:

• Contact and delivery details, such as your name, email address, telephone number and delivery address.
• Order information, such as products and sizes purchased, order history, payment status, delivery details and communications about an order.
• Account information, if you choose to create an account.
• Newsletter preferences and your email address, if you sign up for marketing.
• Technical information generated when you visit the website, such as your IP address, browser type and essential cookies used by WooCommerce to support the cart and checkout.
• Information you choose to send us when you contact us, for example a question, complaint or image.

Yoco processes payments and collects and manages your card details. Gallery Naidoo receives payment status and the transaction information needed to manage and reconcile your order. See Yoco Privacy Policy.

We do not ask you to provide information that is not needed for the purposes described in this policy. Please do not send sensitive personal information unless it is necessary to resolve a request.

How we use personal information

We use personal information to:

• take, confirm, fulfil and deliver orders;
• process payments, refunds and customer service requests;
• keep business, tax and transaction records and meet legal duties;
• maintain the security and operation of the website, prevent fraud and resolve disputes; and
• send Gallery Naidoo news and product updates where you have signed up or where applicable law otherwise permits it.

Depending on the purpose, we process information to perform a contract with you, meet a legal obligation, act on your consent, or pursue a legitimate interest permitted by the Protection of Personal Information Act, 2013 (POPIA). Where we rely on consent, you may withdraw it. Withdrawal does not affect processing that took place before you withdrew it.

If information is needed to complete an order or meet a legal obligation, not providing it may mean that we cannot complete that order or respond to your request.

When we share information

We share personal information only where it is needed for the purposes above, with:

• WooCommerce and Domains.co.za: WooCommerce stores order and customer details in the website database. Domains.co.za (a division of DiaMatrix cc) provides our website hosting. See the Domains.co.za Privacy Policy.
• Yoco: processes payments and card details. See Yoco Privacy Policy.
• Bob Go / Bob Group: receives the information needed to process fulfilment and delivery. See Bob Group Privacy Policy.
• Beehiiv: receives your email address and newsletter preferences if you subscribe, and sends Gallery Naidoo marketing emails. See Beehiiv Privacy Policy.
• professional advisers, auditors, regulators, law-enforcement bodies or courts, where disclosure is required or permitted by law.

The provider notices above explain how those companies handle information within their own services. WooCommerce is self-hosted software, so its core plugin does not replace the privacy notice for the website host. WooCommerce cookie documentation describes standard cookies used for store features.

Processing outside South Africa

Yoco, Bob Go and its delivery partners, Beehiiv, and Domains.co.za or its service providers may store or process personal information outside South Africa. The Domains.co.za Data Processing Agreement says many of its service providers and subprocessors are outside South Africa. It permits international transfers only when necessary to provide the services and allowed by applicable data-protection law, and requires contractual protections materially equivalent to those in the agreement and POPIA, including protections for onward transfers. The Hosting Service Terms also allow websites to be moved between servers and internet backbones within South Africa and internationally. Information handled through our hosting may therefore be processed or stored outside South Africa. These public terms do not confirm the current physical location of this website data. We will take the steps required by POPIA for cross-border transfers.

Marketing choices

If you subscribe to the Gallery Naidoo newsletter, we use Beehiiv to manage your subscription and send product news and updates. Beehiiv email tracking is enabled, so it may record delivery, open and click information for marketing emails. We use this information to understand engagement with our emails. You can unsubscribe using the link in any marketing email or by contacting admin@gallerynaidoo.com.

Order and service messages, such as receipts and delivery updates, are not marketing messages and may still be sent when needed to manage your order.

How long we keep information

We keep personal information only for as long as it is reasonably needed for the purposes in this policy, including to complete orders, provide support, meet record-keeping requirements, resolve disputes and protect the store. We then securely delete it or remove identifying details, unless the law requires or permits us to keep it longer.

Marketing information is kept until you unsubscribe or it is no longer needed.

Your choices and rights

Subject to the requirements and limits of POPIA, you may ask us to:

• confirm whether we hold personal information about you and provide access to it;
• correct or delete information that is inaccurate, excessive, out of date or no longer authorised to be kept;
• object to certain processing or withdraw consent where processing is based on consent; or
• stop direct marketing to you.

To make a request, email admin@gallerynaidoo.com and tell us what you need. We may ask for information to verify your identity and may need to retain some records where the law requires it.

If you are not satisfied with how we have handled a privacy request, you may lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za or POPIAComplaints@inforegulator.org.za.

Keeping information secure

We use reasonable technical and organisational safeguards to protect personal information against loss, unauthorised access, disclosure or misuse. No online service can guarantee absolute security. If a security incident affects your personal information, we will handle it as required by law.

Links to other websites

The store may link to third-party websites or services. Their privacy practices are governed by their own notices, so please review those notices before providing information to them.

Changes to this policy

We may update this policy when our business, services or legal requirements change. The current version and its effective date will appear on this page.

For privacy questions, customer service or marketing preferences, email admin@gallerynaidoo.com. For return requests, email returns@gallerynaidoo.com.