Little Luxury respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit or use littleluxury.co.za, purchase our products, create an account, contact us, subscribe to our communications or otherwise interact with Little Luxury.
This Privacy Policy has been prepared in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws relating to privacy and the protection of personal information.
POPIA establishes minimum requirements for the lawful processing of personal information and regulates, among other things, electronic direct marketing and transfers of personal information outside South Africa. (Government of South Africa)
Little Luxury is a brand operated by:
Responsible Party: Affordable Brands
Trading as: Little Luxury
Website: littleluxury.co.za
Email: info@littleluxury.co.za
Telephone: +27 11 784 4444
Physical/Business Address: 94 11th Street, Parkmore, Sandton 2196
For purposes of POPIA, the above entity is the Responsible Party in respect of personal information processed through this website and our South African business operations.
Our Information Officer is responsible for overseeing compliance with POPIA and dealing with enquiries and requests relating to personal information.
Information Officer: Little Luxury Customer Service
Email: info@littleluxury.co.za
Telephone: +27 11 784 4444
Questions concerning this Privacy Policy or the way in which we process personal information may be directed to our Information Officer.
Depending on how you interact with Little Luxury, we may collect and process information including:
Where payments are made through a third-party payment provider, payment information may be processed directly by that provider. We do not intentionally retain complete payment-card details unless necessary and lawfully permitted.
We will endeavour to collect only personal information that is adequate, relevant and reasonably necessary for the purpose for which it is processed.
We may collect personal information directly from you when you:
We may also collect certain information automatically when you use our website through cookies and similar technologies.
In appropriate circumstances, information may also be received from third parties such as service providers, payment providers, delivery providers, marketing platforms, analytics providers, retailers, social-media platforms or business partners.
Where POPIA requires information to be collected directly from you, we will do so unless an applicable exception permits collection from another source.
We may process your personal information to:
We will not process personal information for a purpose that is incompatible with the purpose for which it was originally collected unless such further processing is permitted by POPIA.
We process personal information only where permitted under POPIA and applicable law.
Depending on the circumstances, this may include processing where:
Where we rely on consent, you may withdraw that consent, subject to applicable law and any consequences of withdrawal.
When you purchase a product through our website, we process information necessary to complete the transaction, including your contact, billing, delivery and order information.
Payment transactions may be processed by third-party payment service providers. Those providers may process your information in accordance with their own privacy policies and applicable legal requirements.
We take reasonable steps to ensure that service providers processing personal information on our behalf implement appropriate safeguards.
We may send you marketing communications about Little Luxury products, promotions, offers or news where permitted by POPIA.
We will not automatically add every person who places an order or makes an enquiry to a general marketing list merely because we have obtained their email address.
Where required by POPIA, we will obtain consent before sending unsolicited electronic direct marketing.
Where you are an existing customer, POPIA may permit us to use contact details obtained in connection with the sale of a product or service to market our own similar products or services, provided the applicable requirements of POPIA are satisfied.
You will be provided with an opportunity to object to eligible direct marketing when your information is collected and in each subsequent marketing communication, as required by applicable law.
You may unsubscribe from marketing emails at any time by using the unsubscribe link contained in our marketing emails or by contacting us.
Unsubscribing from marketing communications will not prevent us from sending transactional or service communications that are necessary in connection with an order, account, warranty, customer service enquiry or other existing relationship.
The Information Regulator specifically identifies email, SMS, telephone calls and push notifications as forms of electronic communication to which POPIA’s direct-marketing provisions can apply. (Empowered Compliance)
This section is particularly important for your Mailchimp/WooCommerce setup. It replaces the current wording stating that customers may automatically be added to your marketing list after placing an order or making an enquiry. Your existing policy currently contains that wording.
Our website may use cookies and similar technologies to operate correctly, remember preferences, understand how visitors use the website, improve website performance and, where applicable, support advertising and marketing activities.
Cookies may collect information such as:
Some cookies are necessary for the website and online store to function. Other cookies may be used for analytics, functionality or advertising.
Where required, visitors will be provided with appropriate choices concerning non-essential cookies.
You can also control certain cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website.
We do not sell or rent your personal information to third parties for their own marketing purposes.
We may disclose personal information where reasonably necessary to:
Where a service provider processes personal information on our behalf as an operator, we take reasonable steps to ensure that appropriate privacy and security requirements apply.
Your existing policy already establishes the principle that service providers should only use customer information to provide their services.
Some of our service providers or technology platforms may process or store personal information outside South Africa.
Where personal information is transferred outside South Africa, we will do so in accordance with section 72 of POPIA.
This may include circumstances where:
The Information Regulator similarly recognises adequate protection, consent and certain contractual circumstances as grounds for cross-border transfers under section 72. (Empowered Compliance)
This replaces the current policy’s much broader statement that using the website constitutes consent to transfers to countries outside South Africa.
We take reasonable and appropriate technical and organisational measures to protect personal information against:
These safeguards may include appropriate access controls, secure systems, encryption and other reasonable security practices.
Although we take reasonable precautions, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Where we become aware of a security compromise involving personal information, we will take appropriate action and provide notifications to the Information Regulator and affected data subjects where required by POPIA.
The requirement to notify data subjects of applicable security compromises is expressly recognised by the Information Regulator. (Empowered Compliance)
We retain personal information only for as long as reasonably necessary to achieve the purpose for which it was collected or subsequently processed, unless:
When personal information is no longer required and we are not legally entitled or required to retain it, we will delete, destroy or de-identify it as appropriate.
This develops the retention principle already contained in your current policy.
Subject to applicable law, you have the right to:
These rights are reflected in POPIA and in the Information Regulator’s current privacy guidance. (Empowered Compliance)
If you have an online account, certain personal information may be viewed or updated through your account.
You may also contact our Information Officer to request:
We may need to verify your identity before acting on a request to protect your personal information from unauthorised disclosure or alteration.
Requests will be handled in accordance with POPIA, PAIA and other applicable law.
Our website and products are not intended to collect personal information from children without appropriate authorisation.
Where we knowingly process the personal information of a child, we will do so only where permitted by POPIA, including where the consent of a competent person has been obtained or another lawful basis applies.
If you believe that a child has provided personal information to us without appropriate authorisation, please contact our Information Officer.
Our website may contain links to websites, social-media platforms or services operated by third parties.
We do not control the privacy practices of independent third parties and recommend reviewing their privacy policies before providing personal information to them.
Where a third party processes information on our behalf as our operator, different obligations may apply under POPIA.
If you have concerns about the way Little Luxury processes your personal information, please contact our Information Officer first so that we can investigate and respond to your concern.
You also have the right to lodge a complaint with the Information Regulator (South Africa).
Information Regulator (South Africa)
Telephone: 010 023 5200
Email: enquiries@inforegulator.org.za
Information Regulator South Africa
The Information Regulator is the independent body established under section 39 of POPIA with jurisdiction throughout South Africa. (Empowered Compliance)
We may update this Privacy Policy from time to time to reflect changes to our business practices, technologies, services or legal and regulatory requirements.
The latest version will be published on this website and the Last Updated date at the top of this policy will be amended accordingly.
Where a change materially affects the way we process personal information, we will take reasonable steps to provide appropriate notice where required.
For questions about this Privacy Policy, POPIA or the personal information we hold about you, please contact:
Little Luxury
Responsible Party: Affordable Brands
Information Officer: Little Luxury Customer Service
Email: info@littleluxury.co.za
Telephone: +27 11 784 4444
Address: 94 11th Street, Parkmore, Sandton 2196
