Privacy Policy

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1. Who is responsible for your information

The responsible party for the purposes of POPIA is:

Brandcore Media (Pty) Ltd, trading as Ziptique
Company registration number: 2025/755206/07
Address: 16 Beach Rd, Strand 7140.
Email: info@ziptique.store
Telephone: +27 71 227 6426

Information Officer: Benedict Shaun Little — benmel1999@gmail.com
Deputy Information Officer: Kayla Boonzaier — gigs.kaylittle@gmail.com

Any questions, requests or complaints about your personal information should be directed to the Information Officer at the address above.

2. What personal information we collect

When you place an order:

• your name and surname
• your email address
• your contact number
• your delivery address
• your order history and the contents of your order

When you pay:payment is processed by Payfast. We receive confirmation that a payment succeeded or failed, along with a transaction reference. We never receive, see or store your full card number, CVV or banking login details. Those are handled entirely within Payfast's secure environment.

When you browse the site: your IP address, device and browser type, the pages you viewed, how you arrived at our site, and how you interacted with it. This is collected through cookies and similar technologies, described in section 5.

When you contact us or sign up: your name, email address, contact number, and the contents of your message or enquiry.

If you leave a review or use an on-site tool: your name, email address, review content, any photographs you upload, and your answers to any quiz or survey we may run.

We do not collect special personal information as defined in POPIA, and we ask that you do not send us any.

3. Why we process your information

We process your personal information for the following purposes:

We will not use your personal information for a new purpose that is incompatible with the purposes above without telling you first.

4. Who we share your information with

We do not sell your personal information. We share it only with the service providers we need to run the business, and only to the extent necessary. These operators are contractually required to protect your information and to process it only on our instructions.

Always:

• Shopify– our e-commerce platform. Hosts our store and processes and stores order and customer data.
• Payfast– our payment gateway. Processes your payment.
• The Courier Guy– our delivery partner. Receives your name, delivery address and contact number so they can deliver your parcel and contact you about the delivery.
• Google Analytics– website analytics.
• Meta Platforms (Facebook and Instagram)– advertising and measurement through the Meta Pixel.
• Our email platform, which sends order notifications and marketing emails on our behalf.

We may also use, and will update this policy if we do:

• a product review platform
• an on-site chat or messaging widget
• a pop-up, quiz or email capture tool
• TikTok, through the TikTok Pixel, for advertising and measurement
• other analytics, marketing or customer support tools

We may also share your information where:

• we are required to do so by law, a court order, or a regulator;
• it is necessary to establish, exercise or defend a legal claim;
• it is necessary to investigate suspected fraud or a breach of our terms; or
• our business, or part of it, is sold or restructured, in which case your information may transfer to the acquiring party on the same terms as this policy.

5. Cookies and tracking

Cookies are small files placed on your device when you visit our site.

• Strictly necessary cookies keep the site working. They remember your cart, keep you logged in through checkout, and protect against fraud. The site cannot function without them.
• Analytics cookies tell us how many people visit, which pages they view, and where they drop off. We use Google Analytics for this.
• Advertising cookies allow us and platforms like Meta and TikTok to show you relevant ads and measure whether they worked. These are the cookies that cause you to see our products after visiting our site.

You can accept or decline non-essential cookies through the banner shown when you first visit. You can also block or delete cookies in your browser settings at any time, though this may affect how the site works.

6. Advertising audiences

We may share a hashed version of your email address or contact number with advertising platforms such as Meta and Google. Hashing converts the information into a scrambled code before it leaves our systems, and the platform uses it only to match you to an existing account.

We do this in order to show our ads to you, to stop showing you ads for something you have already bought, and to build “lookalike” audiences of people with similar characteristics to our existing customers.

If you would prefer we did not do this, email us at info@ziptique.store and we will exclude you.

7. Marketing

If you buy from us, or you sign up for our emails, we may send you marketing about our products.

Every marketing email we send includes an unsubscribe link. You can also email us at info@ziptique.store and ask us to stop at any time, and we will action it promptly and at no cost to you.

Order confirmations, dispatch notices, tracking updates and responses to your queries are not marketing. We will continue to send those regardless of your marketing preferences, because we need them to fulfil your order.

Section 69 of POPIA restricts unsolicited electronic direct marketing. We will only market to you where you have consented, or where you are an existing customer and the marketing relates to similar products, in which case you may opt out at any time.

8. Information sent outside South Africa

Some of our service providers, including Shopify, Google and Meta, store and process data on servers outside South Africa.

Section 72 of POPIA permits this where the recipient is subject to laws, binding rules or a contract that provide a level of protection substantially similar to POPIA, or where the transfer is necessary to perform our contract with you. We rely on the data processing terms these providers offer, which include recognised safeguards such as standard contractual clauses.

9. How long we keep your information

• Order and transaction records: at least 5 years from the end of the relevant tax year, as required by the Tax Administration Act and the Companies Act.
• Support and warranty correspondence: up to 3 years after the matter is resolved.
• Marketing contact details: until you unsubscribe or ask us to delete them, after which we keep a minimal suppression record so that we do not accidentally contact you again.
• Website analytics data: in line with the retention settings of the platform concerned, typically up to 26 months.

Where we no longer need your information and are not required to keep it, we delete it or de-identify it.

10. How we protect your information

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access and misuse. These include using reputable platforms that maintain their own security certifications, encrypted connections (HTTPS) across our site, restricting access to customer data to those who need it, and never storing card details ourselves.

No system is completely secure. If a security compromise occurs that creates a risk to your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.

11. Your rights

Under POPIA you have the right to:

• be told what personal information we hold about you, and to be given a copy of it;
• ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully;
• object to our processing of your information on legitimate interest grounds, on reasonable grounds relating to your particular situation;
• withdraw your consent at any time, where we rely on consent;
• opt out of direct marketing at any time;
• complain to the Information Regulator; and
• institute civil proceedings regarding an alleged interference with the protection of your personal information.

To exercise any of these rights, email the Information Officer at benmel1999@gmail.com

We will respond within a reasonable time, and normally within 30 days. We may need to verify your identity before we act on a request.

Formal access requests under the Promotion of Access to Information Act must be made on Form 2 and may attract the prescribed fee.

12. Complaints

If you are unhappy with how we have handled your personal information, please contact our Information Officer first so we can try to put it right.

You may also complain directly to:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Telephone: 010 023 5200
Email: complaints.IR@justice.gov.za
Website: www.inforegulator.org.za

13. Changes to this policy

We may update this policy from time to time, for example when we add a new tool or service provider. The current version is always the one published on this page, and the date at the top tells you when it was last revised. Where a change materially affects how we use your information, we will bring it to your attention.

14. Contact us

Brandcore Media (Pty) Ltd t/a Ziptique
16 Beach Road Strand 7140.
Email: info@ziptique.store
Information Officer: benmel1999@gmail.com