Privacy Policy

Beaded Affair is the "responsible party" for your personal information. As a small business, the owner acts as our Information Officer. For any privacy questions or requests, contact us at beaded.affair2026@gmail.com.

We only collect what we need to run the store and fulfil your order:

• Your name, email address and phone number;
• Your delivery address and any delivery notes;
• Your order history and gift messages;
• Account login details (managed securely by our sign-in provider);
• Your email address if you join our "new arrivals" list;
• Basic technical information needed to keep you signed in and to make the site work.

We do not ask for or store your card details or banking login - payment is made by EFT directly from your bank to ours.

• To process, fulfil and deliver your orders;
• To contact you about your order and payment;
• To manage your account;
• To send you new-arrival updates - only if you have signed up, and you can opt out at any time;
• To keep proper business records and to prevent fraud or misuse.

We never sell your information. We use a small number of trusted service providers ("operators") who process data on our behalf, strictly to provide their service:

• Clerk - secure account sign-in and authentication;
• Sanity - stores product, order and customer records;
• Resend - sends our order and marketing emails;
• Vercel - hosts the website.

Some of these providers may process or store information on servers outside South Africa. Where that happens, we rely on providers that offer an adequate level of protection comparable to POPIA. We may also share information where required by law.

We use only the essential cookies needed to keep you securely signed in and to operate the cart and checkout. We do not use cookies to track you across other websites for advertising.

We take reasonable measures to keep your information safe and work only with reputable providers. We keep order records for as long as needed to run the business and meet legal and accounting obligations, and we remove information we no longer need.

Under POPIA you have the right to:

• Ask what personal information we hold about you;
• Ask us to correct or update it;
• Ask us to delete it, where we are not legally required to keep it;
• Object to its use, or withdraw your consent (e.g. unsubscribe);
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email us at beaded.affair2026@gmail.com. You can also contact the Information Regulator at inforegulator.org.za.

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown above.