Privacy policy

Last updated: 27 October 2026

This policy explains how Beryl Clothing handles your personal information. It follows the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

The responsible party for your personal information is Nandi Beryl Clothing Shop (Pty) Ltd, trading as Beryl Clothing.
Registration number: 2025/822389/07
Address: 30 Crompton Street, Pinetown 3610
Website: berylclothing.co.za
Information Officer: Nandi Beryl Ndaba, hello@berylclothing.co.za

2. What personal information we collect

Identity and contact details: your name, email address and phone number.
Delivery details: your delivery address and billing address.
Order details: what you bought, the order value, your delivery choice, and any returns, exchanges or refunds.
Payment-related information: confirmation that your payment succeeded and the payment method used.
Your payment details are processed by secure payment providers. We do not see or store your full card details.
Account details: if you create an account, your login details and saved addresses.
Messages: anything you send us, for example by email, phone call or WhatsApp.
Device and cookie data: IP address, browser type, the pages you visit, and cookie identifiers.
Marketing preferences: whether you have agreed to receive marketing from us.

We do not ask for special personal information, such as health or religious information.

3. Why we use it and our lawful basis

Purpose	Lawful basis under POPIA
To process, deliver, return, exchange and refund your order	Needed to carry out our contract with you
To answer your questions and complaints	Needed for our contract with you, or our legitimate interest
To keep financial and tax records	Required by law
To prevent fraud and keep the website secure	Our legitimate interest
To understand how the website is used and improve it	Our legitimate interest, or your consent where needed
To send you marketing	Your consent (see section 6)

We only use your information for these purposes, or for purposes compatible with them.

4. Who we share it with

We share your information with service providers who help us run the store.

Some providers act only on our instructions. POPIA calls them "operators". They may use your information only for the service they provide to us, and they must keep it secure.
Other providers may also use information for their own purposes, under their own privacy policies. This may include payment providers, Google and Meta.

The providers we use include:

Shopify: our online store platform.
Payment providers: to process your payment.
Couriers: to deliver your order.
Email service providers: to send you order emails and, if you have opted in, marketing emails.
WhatsApp: if you message us on WhatsApp, your messages are handled through WhatsApp, under its own privacy policy.
Google: we may use Google sales channel and website tools, for example to show our products on Google or to understand how the website is used.
Meta (Facebook and Instagram): we may use Meta sales channel tools, for example to show our products on Facebook and Instagram.

We may also share information if the law requires it.

We do not sell your personal information.

5. Information sent outside South Africa

Some of our service providers, such as Shopify, may store or process your information outside South Africa.

We allow this only where POPIA (section 72) permits it. For example, the recipient is bound by an agreement or by laws that give protection comparable to POPIA, including rules on any further transfer.

6. Direct marketing (POPIA section 69)

We only send you electronic marketing (for example email or SMS) if you have opted in. The opt-in box is never ticked for you.
Every marketing message identifies us as the sender and includes a free and simple way to unsubscribe.
You can opt out at any time through the unsubscribe link in any message, or by emailing hello@berylclothing.co.za. Opting out is free.

7. Cookies

We use cookies and similar technologies to keep your cart and checkout working, remember your preferences, understand how the website is used and, if you agree, support marketing.
You can accept or decline non-essential cookies in the cookie banner.
You can also block or delete cookies in your browser settings. Some parts of the website may not work properly without them.

8. How long we keep it

We keep order and financial records for 5 years.
We keep other personal information only for as long as we need it for the purposes above, or for as long as the law requires.
After that, we delete, destroy or de-identify the information.

9. How we protect it

We take reasonable technical and organisational steps to protect your personal information.
For example, we limit access to the people who need it and use reputable service providers.
No system is completely secure, so we cannot guarantee security.

10. Data breaches

If we have reasonable grounds to believe your personal information has been accessed or obtained without authorisation: - we will notify the Information Regulator and you as soon as reasonably possible, as POPIA requires; - we will tell you what happened and what steps you can take to protect yourself.

11. Your rights

You have the right to: - ask whether we hold personal information about you, and ask for a copy; - ask us to correct information that is wrong, out of date or incomplete; - ask us to delete or destroy information we are no longer allowed to keep; - object to us using your information, including for direct marketing; - withdraw your consent at any time. This does not affect anything we did lawfully before you withdrew it; - complain to the Information Regulator.

To use these rights, email our Information Officer at hello@berylclothing.co.za. We may need to confirm your identity first.

Requests for access to records, including requests under the Promotion of Access to Information Act (PAIA), also go to hello@berylclothing.co.za. Some access requests may carry a fee allowed by law. We will tell you about any fee before we act.

12. Children

Our website is not directed at children under 18.
We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian. If you believe we have, email us and we will delete it.

13. How to complain

We encourage you to contact us first so we can try to fix the problem. You do not have to do this first. You may complain to the Information Regulator of South Africa at any time: - Complaint instructions: https://inforegulator.org.za/complaints/