Privacy policy

1. Overview & Commitment Glossy Goose ("we," "our," or "us") is committed to protecting the personal information and privacy of our customers and website visitors ("you"). This Privacy Policy explains how we collect, use, process, store, and safeguard your personal information when you visit or make a purchase from our website.

We operate in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) of the Republic of South Africa, as well as applicable international data privacy standards for cross-border transactions.

2. Personal Information We Collect To process orders and provide a seamless shopping experience, we collect only relevant and necessary data:

  • Order & Contact Data: Full name, billing address, physical shipping address, email address, and contact telephone numbers (required for order confirmation, delivery coordination, and customer support).

  • Payment Information: All transactions are processed securely through trusted, PCI-compliant third-party payment gateways (e.g., Payfast). Glossy Goose does not store, access, or process your full credit/debit card details or banking credentials.

  • Device & Usage Data: When you browse our website, we automatically collect information about your device, IP address, browser type, time zone, and interactions with our online store via cookies and tracking tags to ensure platform security and optimize site functionality.

3. Purpose & Legal Basis for Processing We process your personal information strictly for legitimate commercial purposes:

  • Fulfilling, packaging, and dispatching orders.

  • Communicating order confirmations, tracking numbers, and delivery updates.

  • Detecting and preventing fraud or unauthorised transactions.

  • Complying with statutory tax, accounting, and legal requirements.

  • Providing direct marketing, newsletters, or promotional updates (only where you have explicitly opted in, with the right to unsubscribe at any time).

4. Third-Party Disclosures & Data Sharing We do not sell, rent, or trade your personal information. To fulfill your orders and operate our e-commerce platform, we disclose necessary details exclusively to vetted third-party service providers:

  • E-Commerce Hosting & Infrastructure: Shopify Inc. (powers our secure online store).

  • Couriers & Logistics Partners: Physical address, recipient name, and contact numbers are provided to our courier partners (e.g., The Courier Guy) solely to complete door-to-door delivery.

  • Payment Gateways: Secure payment service providers for transaction processing.

  • Legal Compliance: When required by applicable law, court order, or regulatory authority.

5. Cross-Border Data Transfers Our e-commerce store is hosted on global infrastructure (such as Shopify's secure international servers). By using our website and placing an order, you consent to the secure transfer, hosting, and processing of your data outside of South Africa in accordance with Section 72 of POPIA, subject to adequate data security standards.

6. Data Security & Limitation of Liability We implement industry-standard administrative, physical, and technical security safeguards to protect your personal information from unauthorized access, loss, misuse, or alteration.

While we take all reasonable precautions to maintain bank-grade security on our website, transmission of information over the internet carries inherent risks. To the fullest extent permitted by South African law, Glossy Goose shall not be liable for unauthorized access, data intercepts, or cyber incidents beyond our reasonable operational control.

7. Data Retention We retain order history and personal data only for as long as necessary to fulfill the purposes outlined in this policy, manage warranties/customer service, and comply with South African tax and financial record-keeping laws (typically up to 5 years under SARS regulations).

8. Your Rights Under POPIA As a data subject, you have the right to:

  • Request confirmation of whether we hold personal information about you.

  • Request access to the specific personal data we hold.

  • Request the correction, update, or deletion of inaccurate or outdated information.

  • Object to direct marketing or withdraw consent for non-essential communications at any time.

9. Contact Details of the Information Officer For any privacy inquiries, data access requests, or POPIA compliance matters, contact our designated Information Officer:

  • Business Name: Glossy Goose

  • Attention: Information Officer

  • Email: [info@glossygoose.co.za]

  • Operating Location:  19 Cussonia Drive, Bassonia Estate, Alberton, Johannesburg, Gauteng, South Africa