Privacy Policy

Last updated: 20 October 2025

This Privacy Policy (“Policy”) sets out the manner in which Johanna van Zyl Jewellery, a sole proprietorship duly registered and operating under the laws of the Republic of South Africa (hereinafter referred to as “Johanna van Zyl Jewellery”, “we”, “us” or “our”), processes, stores, and protects Personal Information collected from individuals who access or use our website, services, or otherwise interact with us (“you”, “your”, or “the Data Subject”).

This Policy has been prepared in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”), and, where relevant, the Electronic Communications and Transactions Act, 25 of 2002 (“ECTA”) and other applicable laws of the Republic of South Africa.

By accessing our website or utilising our services, you acknowledge that you have read, understood, and consent to the terms of this Policy and to the lawful processing of your Personal Information as described herein.

1. Definitions

For purposes of this Policy, the following terms shall bear the meanings assigned to them below:

• “Account” means a unique account created by or for you to access our services or certain portions of our website.
  
  
• “Company” / “we” / “us” / “our” refers to Johanna van Zyl Jewellery.
  
  
• “Cookies” refers to small data files placed on your device by our website to enable certain functionality and record your browsing preferences.
  
  
• “Country” refers to the Republic of South Africa.
  
  
• “Device” means any device capable of accessing our website or services, including, but not limited to, a computer, mobile phone, or tablet.
  
  
• “Personal Information” (as defined under POPIA) means any information relating to an identifiable, living natural person or juristic person, including but not limited to contact details, identification number, online identifiers, and other data used to identify you directly or indirectly.
  
  
• “Processing” refers to any operation or activity concerning Personal Information, including its collection, receipt, recording, storage, updating, retrieval, dissemination, or destruction.
  
  
• “Responsible Party” means Johanna van Zyl Jewellery, as the party determining the purpose and means for processing Personal Information.
  
  
• “Service” means the website and any related services offered by Johanna van Zyl Jewellery.
  
  
• “Website” means our website accessible at https://johannavanzyl.co.za.
  
  
• “You” / “your” / “Data Subject” refers to any individual or juristic person whose Personal Information is processed by us.
  
  

2. Collection of Personal Information

2.1 We collect and process Personal Information necessary to provide our services and comply with our legal obligations. This may include, without limitation:

• Full name and surname;
  
  
• Email address;
  
  
• Telephone number;
  
  
• Physical and postal address;
  
  
• Payment or billing information; and
  
  
• Any correspondence or communication with us.
  
  

2.2 We may also collect Usage Data automatically when you interact with our website, including your IP address, browser type, access times, pages viewed, and device information.

2.3 Where we require Personal Information by law or contract, failure to provide such information may impede our ability to provide certain services.

3. Lawful Basis for Processing

3.1 We process Personal Information in accordance with the conditions for lawful processing as set out under Chapter 3 of POPIA, which include:

• Consent: where you have expressly agreed to such processing;
  
  
• Contractual necessity: where processing is required to conclude or perform under an agreement with you;
  
  
• Legal obligation: where required by South African law;
  
  
• Legitimate interest: where processing is necessary for our legitimate business purposes, balanced against your rights as a Data Subject.
  
  

3.2 By using our website or engaging our services, you consent to such processing in accordance with this Policy.

4. Purpose of Collection and Use

We process Personal Information for the following purposes:

• To provide, operate, and maintain our services and fulfil contractual obligations;
  
  
• To process orders and manage payments;
  
  
• To verify your identity and prevent fraud;
  
  
• To communicate with you regarding orders, updates, or relevant marketing where you have consented;
  
  
• To comply with legal and regulatory obligations;
  
  
• To analyse usage patterns to improve our services and website functionality; and
  
  
• For any other purpose directly related to the above, or otherwise authorised by you or by law.
  
  

5. Disclosure of Personal Information

5.1 We may share Personal Information with:

• Third-party service providers engaged to perform services on our behalf, such as courier companies, payment processors, or IT service providers;
  
  
• Business partners or affiliates, where necessary to deliver products or promotions; and
  
  
• Governmental or regulatory authorities, where disclosure is required by law, court order, or lawful request.
  
  

5.2 We will ensure that any such third party processes your Personal Information in accordance with the security and privacy standards required by section 21 of POPIA and under a valid data processing agreement.

5.3 We do not sell, rent, or trade Personal Information under any circumstances.

6. Cross-Border Transfer of Personal Information

6.1 Your Personal Information may be transferred to, and processed in, jurisdictions outside the Republic of South Africa.

6.2 Where such transfers occur, we shall ensure that the recipient is subject to a law, binding corporate rules, or binding agreement that provides an adequate level of protection as contemplated in section 72 of POPIA.

6.3 By submitting your Personal Information, you consent to the transfer and processing of your data outside South Africa, subject to the safeguards set out herein.

7. Retention and Destruction of Records

7.1 We retain Personal Information only for as long as is necessary to achieve the purposes set out herein, or as required by law.

7.2 Once the purpose for which the Personal Information was collected has been fulfilled, and no legal or contractual requirement to retain such information exists, it will be securely destroyed or de-identified in accordance with section 14 of POPIA.

8. Data Security

8.1 We implement appropriate, reasonable technical and organisational measures to prevent loss, unauthorised access, alteration, or destruction of Personal Information as required by section 19 of POPIA.

8.2 Notwithstanding the above, transmission of information via the Internet carries inherent risks, and we cannot guarantee absolute security.

9. Data Subject Rights

In accordance with Chapter 8 of POPIA, you have the following rights regarding your Personal Information:

• The right to access and request copies of your Personal Information;
  
  
• The right to request correction, updating, or deletion of inaccurate or outdated data;
  
  
• The right to object to processing on reasonable grounds;
  
  
• The right to withdraw consent at any time (where processing is based on consent); and
  
  
• The right to lodge a complaint with the Information Regulator if you believe your rights have been infringed.
  
  

The Information Regulator (South Africa) may be contacted at:
📧 Email: complaints.IR@justice.gov.za
🌐 Website: https://www.justice.gov.za/inforeg/

10. Use of Cookies and Tracking Technologies

10.1 Our website utilises cookies and similar tracking technologies to enhance user experience, analyse traffic, and personalise content.

10.2 You may configure your browser to refuse cookies; however, certain website functionalities may not operate as intended.

10.3 For further information, please refer to our Cookie Policy, which forms part of this Privacy Policy.

11. Children’s Privacy

11.1 Our website and services are not directed at children under the age of 18 (eighteen).

11.2 We do not knowingly process Personal Information of minors without the express consent of a parent or legal guardian, in accordance with section 35 of POPIA.

If you believe that a minor has provided us with Personal Information without proper consent, please contact us immediately.

12. Links to Third-Party Websites

Our website may contain links to external websites not operated or controlled by us.
We are not responsible for the content, data protection practices, or privacy policies of such third-party sites, and you are encouraged to review their policies before providing any Personal Information.

13. Amendments to this Policy

We reserve the right to amend or update this Policy from time to time to reflect legal, technical, or business developments.
Any such amendment shall be effective upon publication on our website, and the “Last updated” date shall be revised accordingly.
Your continued use of our website or services following such publication shall constitute acceptance of the updated Policy.

14. Contact Information

Should you have any questions, requests, or complaints regarding this Policy or our data processing practices, you may contact us at:

Johanna van Zyl Jewellery
📧 Email: jo@johannavanzyl.co.za
📍 Location: Pretoria, Republic of South Africa