Privacy policy

NEP + PLU PRIVACY POLICY

Last updated: April 2026

1. Hosting and Shopify

Our online store is hosted by Shopify Inc. When you place an order or interact with the Website, certain personal information is automatically shared with Shopify so that they can provide the hosting, payment processing support, and store functionality. Shopify processes this information in accordance with its own privacy policy, which is available at https://www.shopify.com/legal/privacy. You can also view Shopify’s consumer privacy portal at https://privacy.shopify.com/en.

2. Information We Collect

We collect:

  • Personal information you provide when placing an order (name, delivery address, email, phone number, payment details via Stitch Express)

  • Information from your email-list subscription (name and email address for promotional content and discounts)

  • Technical information (IP address, browser type, pages visited) collected automatically via the Website

3. Purpose of Collection and Processing

We process your personal information to:

  • Process and fulfil your orders

  • Arrange delivery via Courier Guy or other authorised couriers

  • Communicate with you about your order or account

  • Send you promotional emails and discounts only if you have expressly subscribed to our email list

  • Comply with legal obligations and protect our rights

4. Consent

By placing an order or subscribing to our email list you expressly consent to the processing of your personal information for the purposes set out above. You may withdraw consent at any time by unsubscribing or contacting us, but this may affect our ability to fulfil orders.

5. Sharing of Information

We may share your information with:

  • Stitch Express (for payment processing)

  • Courier Guy or other authorised couriers (for delivery – name, address and contact number only)

  • Professional advisers or as required by law

We do not sell your personal information to third parties.

6. Data Security

We take reasonable technical and organisational measures to protect your personal information. However, no system is completely secure and we cannot guarantee absolute security.

7. Your Rights (POPIA)

You have the right to:

  • Access your personal information

  • Correct or update your information

  • Object to processing

  • Request deletion (subject to legal obligations)

  • Lodge a complaint with the Information Regulator (South Africa)

To exercise any of these rights, please contact us via our contact form on our website.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law.

9. Cookies and Website Tracking

The Website may use cookies to improve user experience. You may disable cookies in your browser settings, but this may affect functionality.

10. Children

The Website and Products are intended for persons over the age of 18. We do not knowingly collect information from children under 18.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on the Website and will apply from the date of posting.

12. Contact Us

For any privacy-related questions or to exercise your rights, please contact us via our contact form on our website.