Last updated: 7 May 2026

In short: When you visit our site or place an order, we collect what we need to fulfil your purchase and improve your experience. We don’t sell your information. You have rights under the South African POPI Act — including the right to see, correct or delete your data — and you can exercise them via our contact form at any time.

1. Who we are

This Privacy Policy applies to https://www.twolovedesign.co.za, operated by Two Love Design, a sole-proprietor jewelry studio in Durbanville, Cape Town, South Africa (“we”, “us”, “our”). For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), we are the Responsible Party for personal information processed through this site.

2. What we collect

2.1 Information you provide

When you place an order, create an account or contact us, we collect:

  • Full name
  • Email address
  • Phone number (for order and shipping queries)
  • Billing and shipping addresses
  • The contents of any messages you send through the contact form
  • Account password (stored hashed; we never see it in plain text)

2.2 Information collected automatically

When you browse the site, we and our third-party services may collect:

  • IP address and approximate location
  • Browser type, operating system and device information
  • Pages visited, time spent and referring URL
  • Cookies and similar tracking identifiers (see section 7)

2.3 Payment information

If and when online payment is processed through this site, it will be handled by a regulated third-party payment service provider. We do not see, retain or store full card or bank details on our servers. This Policy will be updated to name the provider once one is in active use.

3. How we use your information

  • To fulfil and ship your order, including communicating with you about it
  • To answer enquiries you send through the contact form
  • To maintain your account and order history if you create one
  • To improve the site, fix bugs, and understand how visitors use it
  • To prevent fraud and abuse, and to keep the site secure
  • To comply with our legal obligations under South African law (for example, tax-record retention)

If we ever introduce a newsletter or marketing emails, we will only send them to people who have explicitly opted in at sign-up or checkout, and every such email will include a one-click unsubscribe link.

4. Lawful basis for processing

Under POPIA, we process your personal information on the following bases:

  • Performance of a contract — to fulfil orders you place
  • Consent — for any future marketing communications (you opt in, you can withdraw at any time)
  • Legitimate interest — to keep the site secure and to improve our service
  • Legal obligation — for example, transaction-record retention required by tax law

5. Who we share information with

We do not sell your personal information. We share it only with the third parties needed to run the site and fulfil your order. These currently include:

  • Our hosting provider — stores the website and database.
  • Email and contact-form delivery — to deliver your message to us when you use the contact form.
  • Couriers and shipping providers — to deliver your order to the address you provide.
  • Google — for fonts, reCAPTCHA spam protection on forms, and (where used) website analytics. Google’s services may transfer aggregated, non-identifying data outside South Africa under their own privacy terms.
  • Wordfence — for security and bot detection at the application layer.

If we add new processors (for example, a payment provider, or a newsletter platform such as Mailchimp), we will update this list before introducing them.

6. International transfers

Some of the third-party services above (such as Google) operate servers outside South Africa. Where this happens, those providers contractually commit to handling personal information in line with appropriate data-protection standards.

7. Cookies and similar technologies

We use cookies for the following purposes:

  • Essential cookies — required for the site to work, including the shopping cart and login session. These cannot be switched off without breaking parts of the site.
  • Functional cookies — to remember preferences such as recently viewed items.
  • Analytics cookies — to understand how visitors use the site, in aggregate.
  • Performance / cache — set by WP Fastest Cache to serve pages faster.

You can clear or block cookies in your browser at any time. Blocking essential cookies may break parts of the site such as checkout.

8. How long we keep information

  • Order and customer records — retained for at least 5 years after the last interaction, as required by the South African Tax Administration Act.
  • Account data — retained for as long as your account is active. You can request deletion at any time, subject to the retention obligation above for any orders linked to it.
  • Contact-form messages — retained for up to 24 months for follow-up purposes, then deleted.
  • Server logs and analytics — retained for up to 14 months in identifiable form.

9. Your rights under POPIA

You have the right to:

  • Access the personal information we hold about you
  • Correct information that is inaccurate or out of date
  • Delete your information, subject to our legal retention obligations
  • Object to certain processing or to direct marketing
  • Withdraw consent for any processing that relies on it
  • Portability — request a copy of the information you provided in a usable format
  • Lodge a complaint with the Information Regulator if you believe we have not handled your information lawfully

To exercise any of these rights, please use our contact form.

10. Security

We use industry-standard measures to protect your information, including HTTPS encryption, server-level firewalls, secured admin access and application-layer protection via Wordfence. No system is perfectly secure, but we take reasonable steps to keep your data safe.

11. Children

The site is not aimed at people under 18 and we do not knowingly collect information from children. If you believe a child has provided us with information, please contact us and we will delete it.

12. Information Officer

The Information Officer for Two Love Design can be reached via the contact form. Please mark your message “Information Officer / POPIA query” and we will respond within a reasonable period.

13. Complaints to the Information Regulator

If you believe we have not addressed your concern adequately, you may lodge a complaint with the Information Regulator of South Africa:

14. Changes to this Policy

We may update this Policy from time to time. Changes are reflected by an updated “Last updated” date at the top of the page. Material changes (such as adding new processors) will be communicated to active customers where appropriate.

15. Contact

For any questions about this Privacy Policy, please use our contact form.

This document is a starting point and is not legal advice. We recommend review by a qualified South African attorney before relying on it for any specific legal matter.