Privacy Policy (POPIA)

Blast & Breeze handles your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

Responsible party

[ADD: registered company name], trading as Blast & Breeze, [ADD: physical address]. Information Officer: [ADD: name].

What we collect

Name, email address, phone number and delivery address.
What you bought, when, and how much you paid.
Payment confirmation from our payment providers. We never receive your full card number.
Device, browser and pages visited, through cookies.
Messages you send us.

Why we use it

To process, deliver and support your orders, including returns.
To send marketing emails, only if you signed up. Every email has an unsubscribe link.
To prevent fraud and keep the store secure.
To meet tax record-keeping duties.

Who we share it with

Only the providers who help run the store, and only what they need: Shopify, our payment providers, Aramex and our email provider. Some store data outside South Africa under safeguards that meet POPIA's cross-border rules. We never sell your personal information.

How long we keep it

Order records: 5 years, as tax law requires. Marketing data: until you unsubscribe.

Your rights

You may ask us to show, correct or delete your information, or object to marketing. We respond within 30 days. You may also complain to the Information Regulator at inforeg.org.za.