Privacy policy

Privacy Policy

Effective Date: 25 May 2025
Last Updated: 25 May 2025

This Privacy Policy outlines how Nomad & Grace (Pty) Ltd ("we", "us", or "our") collects, uses, and protects your personal information when you visit or shop via www.nomadandgrace.co.za (the “Site”).

1. Information We Collect

We collect different types of personal information to operate effectively and provide you with the best experience. This includes:

Device Information

  • Examples: Web browser, IP address, time zone, cookies, pages visited, search terms.

  • Purpose: To load the Site correctly and optimise user experience and analytics.

  • Collection Method: Automatically via cookies, log files, pixels, and similar technologies.

Order Information

  • Examples: Full name, billing and shipping addresses, email, phone number, payment details.

  • Purpose: To fulfil your order, process payments, arrange deliveries, provide support, and detect fraud.

  • Collection Method: Directly from you during checkout.

  • Shared With: Shopify (eCommerce platform), PayFast/PayGate (payment processors), Courier services.

Customer Support Data

  • Examples: Order details, contact information, communication history.

  • Purpose: To respond to queries and support requests.

  • Collection Method: Directly from you via email or our contact forms.

2. Minors

This site is not intended for children under the age of 18. We do not knowingly collect personal information from minors. If you're a parent or guardian and believe your child has shared personal data, please contact us to request deletion.

3. Sharing Your Information

We only share your personal data with trusted third parties necessary for running our business. These may include:

  • Shopify – our website and ecommerce provider.

  • Payment processors (e.g. PayFast, PayGate).

  • Courier partners for delivery.

  • Email marketing platforms, if you opt in.

We may also share data when required by South African law or in response to lawful requests such as subpoenas or court orders.

4. Behavioural Advertising & Analytics

We may use your data to serve personalised marketing or advertising via:

  • Google Analytics – to understand user behaviour (you can opt out here).

  • Meta (Facebook/Instagram) – to display relevant ads.

  • Cookies and Pixels – to track engagement across channels.

You can opt out of targeted advertising by visiting:

5. Use of Personal Information

We use your data to:

  • Process transactions and orders.

  • Communicate updates, confirmations, and promotions.

  • Monitor and improve our services.

  • Detect and prevent fraudulent activity.

  • Comply with legal and tax obligations.

6. POPIA Compliance

In accordance with South Africa’s Protection of Personal Information Act (POPIA), you have the right to:

  • Access your data.

  • Correct, delete, or update your personal information.

  • Object to processing for direct marketing purposes.

  • Lodge a complaint with the Information Regulator at https://www.justice.gov.za/inforeg/

To request access, correction or deletion, email us at privacy@nomadandgrace.co.za

7. Retention of Information

We retain your personal information only as long as necessary:

  • For legal, accounting or reporting requirements.

  • To complete orders and customer support.

  • Or until you request deletion (where permissible by law).

8. Cookies

Cookies are small text files used to enhance your browsing experience. Some are necessary for functionality; others help us analyse traffic or personalise content.

You can manage cookies via your browser settings or visit www.allaboutcookies.org for guidance.

9. Security

We implement strict measures to protect your personal information, including encrypted data storage and secure payment gateways. However, no internet transmission is 100% secure. You provide information at your own risk.

10. Do Not Track (DNT)

Currently, we do not respond to browser-based "Do Not Track" signals due to lack of industry standardisation.

11. International Data Transfers (if applicable)

If you are based outside South Africa (e.g., Europe or North America), please note your data may be transferred to and processed in South Africa or other jurisdictions.

If you are a European Union (EU)/EEA resident, we process your data in accordance with the General Data Protection Regulation (GDPR) and your legal rights under that regulation.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the new effective date. We encourage you to check it periodically.

13. Contact Us

If you have any questions about this Privacy Policy or would like to exercise your rights:

📧 privacy@nomadandgrace.co.za
📍 15 Sydney Carter Street, Franklin Roosevelt Park, Johannesburg, Gauteng, 2195, South Africa
📞 +27 (0)11 123 4567

Let me know if you'd like this formatted as a webpage, downloadable PDF, or included as a footer link with opt-in banners for cookie tracking.