PRIVACY POLICY

Effective Date: 2026

This Privacy Policy describes OOLALA COLLECTION’s policies and procedures regarding the use and disclosure of your information when you use the Service, and explains your privacy rights and how the law protects you, including under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

We use your Personal Data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with an initial capital letter have meanings defined under the following conditions. These definitions apply whether the terms appear in the singular or the plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for you to access our Service or parts of our Service.
  • Company (referred to as “OOLALA COLLECTION”, “we”, “us” or “our” in this Agreement) refers to OOLALA COLLECTION.
  • Cookies are small files placed on your computer, mobile device or any other device by a website, containing details of your browsing history on that website, among other uses.
  • Country refers to: South Africa.
  • Device means any device that can access the Service, such as a computer, a cellphone or a digital tablet.
  • Personal Data (referred to as “Personal Information” under POPIA) means any information that relates to an identified or identifiable individual.
  • Service refers to the Website.
  • Service Provider means any natural or legal person who processes data on behalf of the Company. This includes third-party companies or individuals engaged to facilitate the Service, provide the Service on the Company’s behalf, perform services related to the Service, or assist the Company in analysing how the Service is used.
  • Usage Data refers to data collected automatically, either generated by use of the Service or from the Service’s infrastructure itself (for example, the duration of a page visit).
  • Website refers to OOLALA COLLECTION, accessible from https://oolalacollection.co.za.
  • You (or “Data Subject” under POPIA) means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

We take appropriate technical and organisational measures to protect your Personal Data. No transfer of your Personal Data will take place to another organisation or country unless adequate controls are in place, including safeguards for the security of your data and other personal information.

Our Legal Basis for Processing Your Personal Data

Under POPIA, we may only process your Personal Data where we have a valid legal basis to do so. Depending on the circumstances, we rely on one or more of the following:

  • Consent — where you have given clear permission, for example when opting in to marketing communications.
  • Performance of a contract — where processing is necessary to fulfil an order, deliver a product, or otherwise provide the Service you have requested.
  • Legal obligation — where we are required to process or retain data to comply with the law, such as tax and accounting requirements.
  • Legitimate interests — where processing is necessary for our legitimate business interests (for example, fraud prevention or improving our Service), provided this does not override your rights and interests.

Your Rights Under POPIA

As a data subject, you have the following rights in relation to your Personal Data, subject to certain legal conditions and exceptions:

  • The right to be notified that your Personal Data is being collected, and why.
  • The right to access the Personal Data we hold about you.
  • The right to request correction or updating of inaccurate, outdated, incomplete or misleading Personal Data.
  • The right to request the deletion or destruction of your Personal Data where we are no longer authorised to retain it.
  • The right to object to the processing of your Personal Data, including for direct marketing purposes.
  • The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
  • The right to lodge a complaint with the Information Regulator if you believe your rights under POPIA have been infringed (see “The Information Regulator” section below).

To exercise any of these rights, please contact us at info@oolalacollection.co.za. We will respond to legitimate requests within a reasonable time and in accordance with POPIA.

Marketing Communications and Opting Out

Where you have chosen to receive marketing messages from us, you may withdraw that consent and opt out at any time. You can do this by clicking the “unsubscribe” link included in any marketing email, or by contacting us directly at info@oolalacollection.co.za. Once you opt out, we will stop sending marketing communications, though we may still contact you regarding transactional matters such as order confirmations.

Disclosure of Your Personal Data

Business Transactions

If OOLALA COLLECTION is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, OOLALA COLLECTION may be required to disclose your Personal Data if required to do so by law, or in response to valid requests by public authorities (for example, a court or a government agency).

Other Legal Requirements

OOLALA COLLECTION may disclose your Personal Data in the good-faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of OOLALA COLLECTION
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of users of the Service or the public
  • Protect against legal liability

Security of Your Personal Data

The security of your Personal Data is important to us, but please remember that no method of transmission over the internet, and no method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Data Breach Notification

In the event of a security compromise that has, or may reasonably be believed to have, resulted in unauthorised access to or acquisition of your Personal Data, we will notify the Information Regulator and affected data subjects as soon as reasonably possible, in accordance with our obligations under POPIA. Where required, we will provide sufficient information to allow you to take protective measures against the potential consequences of the breach.

Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy take effect when they are posted on this page.

Who We Are

Our website address is: https://oolalacollection.co.za

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string, to help with spam detection.

Cookies

If you leave a comment on our site, you may opt in to saving your name, email address and website in cookies. These are for your convenience, so that you do not have to re-enter your details when you leave another comment. These cookies last for one year.

If you visit our login page, we set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we also set several cookies to save your login information and screen display choices. Login cookies last for two days, and screen option cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies are removed.

If you edit or publish an article, an additional cookie is saved in your browser. This cookie contains no personal data and simply indicates the post ID of the article you just edited. It expires after one day.

Embedded Content from Other Websites

Pages on this site may include embedded content (for example, videos, images or articles). Embedded content from other websites behaves in the same way as if you had visited that other website directly.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content — including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who We Share Your Data With

If you request a password reset, your IP address will be included in the reset email.

How Long We Retain Your Data

If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to recognise and automatically approve any follow-up comments, instead of holding them in a moderation queue.

For users who register on our website, we also store the personal information provided in their user profile. All users can view, edit or delete their personal information at any time (except that they cannot change their username). Website administrators can also view and edit that information.

We generally store your information for as long as we need it for the purposes for which it was collected, or for as long as we are legally required to retain it. Order information — including your name, email address, and billing and shipping addresses — is retained for 5 years from the date of the transaction, in line with SARS record-keeping requirements. [Please confirm this figure reflects your actual practice before publishing.]

We also retain any comments or reviews you choose to leave.

Where Your Data Is Sent

Visitor comments may be checked through an automated spam-detection service.

What We Collect and Store

While you visit our site, we track:

  • Products you’ve viewed — used, for example, to show you products you’ve recently viewed.
  • Location, IP address and browser type — used for purposes such as estimating taxes and shipping.
  • Shipping address — requested so we can estimate shipping before you place an order, and send you your order.

We also use cookies to keep track of cart contents while you are browsing our site.

When you purchase from us, we ask you to provide information including your name, billing address, shipping address, email address, phone number, and credit card or payment details, along with optional account information such as a username and password. We use this information to:

  • Send you information about your account and order
  • Respond to your requests, including refunds and complaints
  • Process payments and prevent fraud
  • Set up your account with our store
  • Comply with any legal obligations we have, such as calculating taxes
  • Improve our store offerings
  • Send you marketing messages, if you choose to receive them

If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

Who on Our Team Has Access

Members of our team have access to the information you provide us. For example, both administrators and shop managers can access:

  • Order information, such as what was purchased, when it was purchased, and where it should be sent
  • Customer information, such as your name, email address, and billing and shipping information

Our team members have access to this information to help fulfil orders, process refunds, and support you.

What We Share with Others

We share information with third parties who help us provide our orders and store services to you, for example:

Payments

We accept payments through PayFast. When processing payments, some of your data is passed to PayFast, including information required to process or support the payment, such as the purchase total and billing information.

Caching

This site uses caching to facilitate a faster response time and a better user experience. Caching may store a duplicate copy of every web page displayed on this site. All cache files are temporary and are never accessed by any third party, except as necessary to obtain technical support from the cache plugin vendor. Cache files expire on a schedule set by the site administrator, but may be purged by the administrator before their natural expiration, if necessary.

The Information Regulator

OOLALA COLLECTION is committed to complying with POPIA. If you believe we have not adequately addressed a concern about your Personal Data, or that your rights under POPIA have otherwise been infringed, you have the right to lodge a complaint with South Africa’s Information Regulator:

  • Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
  • Email: enquiries@inforegulator.org.za
  • Telephone: 010 023 5200 (Toll-free: 0800 017 160)
  • Website: https://inforegulator.org.za

Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights under POPIA, you can contact us at info@oolalacollection.co.za.