Privacy Policy

Only what you type into the checkout, and only when you place an order:

• Your name and email address — required, because we cannot send a parcel or a receipt without them
• Your delivery address — street, any complex or unit, city, province and postal code
• Your phone number — optional. We ask because couriers ask for it, and you may leave it blank
• Anything you write in the note field — delivery instructions, a gift message. It is yours to fill in or leave empty
• What you bought — the items, the prices, the order number and its payment status

You do not create an account, and there is no password to lose. Browsing the shop and filling a cart takes no personal information at all.

We never see your card.Payment happens on PayFast’s own page. Your card number, expiry and CVV are entered there and never reach this website or our database. All we are told is whether the payment succeeded and a reference number for it.

This is unusually short for an online shop, and worth stating plainly because most policies bury the opposite:

• No tracking. There is no Google Analytics, no Meta or TikTok pixel, no advertising tag and no third-party script of any kind on this site.
• No cookies.Shopping here sets no cookie on your browser whatsoever. (Livia’s own admin sign-in uses one, but that is her, not you.)
• No fonts phoning home. The typefaces are served from this site itself, so your browser never makes a request to Google while you read a page.
• No profiling and no automated decisions. Nothing here scores, ranks or decides anything about you.

Your cartis kept in your own browser’s local storage, on your device. It is not a cookie, it is never sent to us, and clearing your browser data removes it. We only learn what is in your cart at the moment you ask us to price it or order it.

To take your order, take payment, deliver it, tell you what is happening, and keep the business records the law requires. Under section 11 of POPIA our grounds are that the processing is necessary to perform the contract you entered into when you bought something, and that it is required by law for the tax and accounting records a company must keep.

We do not send marketing email. If we ever start, it will be something you opt into, and every message will carry a way out.

We use five service providers, each acting as our operator under POPIA and each bound to process the information only on our instructions:

That is the complete list. We do not sell, rent or trade your information, and we do not share it for anybody’s marketing.

We may disclose information where the law compels us to — a court order, a tax audit, a fraud investigation.

As above, some of our providers are outside South Africa: Supabase stores data in Ireland, which is subject to the GDPR; Vercel and Resend are in the United States.

If you ask us to send a parcel outside South Africa, your name, delivery address and phone number necessarily leave the country with it — they go to the carrier handling it, and, where the destination requires a customs declaration, to that country’s customs authorities. That is not something we can do on your behalf without sending it, so placing an international order is how you ask us to.

Section 72 of POPIA permits this where the recipient is subject to a law, binding corporate rules or a binding agreement providing protection substantially similar to POPIA. Each of these providers is engaged under its standard data-processing agreement, which imposes those obligations.

Order records — including your name and delivery address — are kept for five years from the end of the financial year in which you ordered. That is not our preference; it is the retention period South African tax and company law require for a transaction record.

After that we delete them. If you ask us to delete your details sooner, we will remove everything we are not legally obliged to keep, and tell you exactly what had to stay and why.

• Everything travels over an encrypted connection (HTTPS), on every page.
• The database refuses all access by default. Nothing can be read from it without a server-side key that never reaches a browser.
• The admin — the only screen where your order can be seen — needs a password and a passkey held on a specific device, so a stolen password on its own opens nothing.
• Every change made in the admin is recorded, along with every attempt to sign in, and repeated failures raise an alert.
• We never store card numbers, because we never receive them.

If personal information in our care is ever accessed by somebody unauthorised, POPIA requires us to notify the Information Regulator and you. We will.

Under POPIA you may:

• Ask what personal information we hold about you, and get a copy of it
• Ask us to correct anything that is wrong or out of date
• Ask us to delete it, where we are not legally required to keep it
• Object to us processing it, where our ground for doing so is not the contract or the law
• Complain to the Information Regulator if you think we have handled it badly

To exercise any of these, use the form above. We will answer within a reasonable time and at no charge, unless a request is repetitive or excessive.

Our PAIA Manual sets out the formal route for requesting access to a record.

The shop is not aimed at children and we do not knowingly collect information about anyone under 18. POPIA treats a child’s information as needing a parent’s consent — if you believe a child has given us theirs, tell us and we will delete it.

You can use the form rather than email if you prefer — it reaches the same place, and it means the address does not have to sit on the page for a robot to collect.

Come to us first, using the form above. If you are not satisfied:

We may update this policy. The date at the top says when it last changed. If a change materially affects how we use information we already hold, we will say so rather than let the date carry the news.

Our Terms and Conditions of Sale cover delivery, cancellation and refunds — including your right to cancel within 21 days.