Privacy Policy

Last updated: 28 October 2025
Website: theivorypearl.co.za (“the Website”)
Brand: The Ivory Pearl Collective (“we”, “us”, “our”)

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your information when you browse, shop, or contact us through the Website, in line with the Protection of Personal Information Act, 2013 (“POPIA”). POPIA sets minimum requirements for how South African businesses handle personal information and gives you specific rights over your data. Termly+2DLA Piper Data Protection+2

By using the Website or providing us with your personal information, you agree to the terms of this Privacy Policy.


1. What personal information we collect

We may collect and process the following types of personal information:

1.1 Information you provide to us directly

  • Name and surname

  • Email address

  • Phone number

  • Billing address and delivery address

  • Order details (items purchased, size, style, etc.)

  • Payment confirmation info (e.g. that payment succeeded – we do not store your full card details; those are handled by our payment gateway)

  • Messages you send us, including via email or contact forms

1.2 Order / account / support information
If you contact us about an exchange, return, or sizing issue, we may ask for:

  • Order number

  • Photos or descriptions of an item (for example, to assess faults)

1.3 Website usage information (cookies, analytics)
When you browse the Website, we and/or our service providers may automatically collect certain technical information, such as:

  • IP address

  • Browser type and version

  • Device type

  • Pages viewed, time spent, clicks, how you reached the site

  • Cookies and similar tracking technologies

Under POPIA, information that can identify you or can be linked to you is considered “personal information,” and we must tell you when and why we collect it. Termly+1


2. Why we collect your information (purpose of processing)

We collect and use your personal information to:

  • Process, confirm, and deliver your order

  • Communicate with you about your purchase, delivery, exchanges, or stock availability

  • Verify and assist with exchange requests

  • Respond to questions, complaints, or support requests

  • Detect or investigate fraud or payment abuse

  • Improve the Website, user experience, and our product offering

  • Comply with legal and tax requirements

  • Send you marketing or updates (only if you’ve consented or where it’s otherwise allowed)

POPIA requires us to only process personal information for lawful, specific, and explicitly defined purposes. Termly+1


3. Is providing information mandatory?

  • If you’re just browsing, you don’t have to give us personal details, but cookies/analytics may still collect limited technical info.

  • If you’re placing an order or requesting an exchange, we need certain details (for example, name, email, delivery address). Without that, we can’t deliver goods or assist you.

We’ll tell you if any information we ask for is required for us to complete the request. Termly


4. How we store and protect your information

We take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction, as required by section 19 of POPIA. These measures include (for example): access controls, password protection, secure payment processing via trusted gateways, and ongoing review of security practices. DLA Piper Data Protection

We only keep personal information for as long as it is needed:

  • to provide our services to you,

  • for legitimate business purposes (like proof of purchase or tax records),

  • or as required by law.

After that, we securely delete or de-identify it.


5. Sharing your information

We do not sell your personal information.

We may share your personal information with:

  • Courier / delivery partners to deliver your order or manage an exchange

  • Payment processors / banks to take payment and prevent fraud

  • IT / hosting / analytics service providers who help us run the Website, email systems, or marketing systems

  • Professional advisers (for example, legal or accounting) if needed to protect our rights or meet legal obligations

  • Regulators or law enforcement if we are legally required to do so

When we share information with service providers, we expect them to handle it with the same level of care required under POPIA and use it only for the service they’re providing on our behalf. Termly+1


6. International transfers

Some of our service providers (for example, cloud hosting or email services) may store or process information in other countries.

If your personal information is transferred outside South Africa, we will take reasonable steps to ensure that the recipient is subject to privacy protections that are the same as, or substantially similar to, POPIA’s requirements, or that another lawful transfer mechanism applies. POPIA restricts cross-border transfers unless certain conditions are met, such as adequate protection or your consent. DLA Piper Data Protection+1


7. Your rights under POPIA

Under POPIA, you have the following rights (subject to certain lawful limits):

  • Right of access – You can ask us to confirm whether we hold personal information about you and request a copy of that information.

  • Right to correct / update – You can ask us to correct or update your personal information if it is inaccurate, incomplete, or out of date. popiact-compliance.co.za

  • Right to deletion / objection – In some cases, you may ask us to delete your information or stop processing it (for example, stop direct marketing).

  • Right to be informed – You have the right to know what we collect, why we collect it, and who we share it with. This Privacy Policy is part of meeting that duty. Termly

  • Right to complain – You may lodge a complaint with the Information Regulator of South Africa if you believe we are not handling your personal information lawfully. The Information Regulator is the authority that enforces POPIA. inforegulator.org.za

To exercise any of these rights, please contact us (see Section 10 below). We may need to verify your identity to protect you from unauthorised access to your information. popiact-compliance.co.za


8. Cookies and tracking technologies

We use cookies and similar technologies to:

  • keep your shopping cart working,

  • remember preferences (like size or currency where relevant),

  • understand how visitors use the Website,

  • improve performance and design,

  • and (if enabled) support analytics or marketing.

Under POPIA, because cookies can collect personal information, we must tell you that they exist and why. We may also present you with a cookie banner or consent prompt, especially for non-essential / marketing cookies. Termly+1

You can usually manage or block cookies through your browser settings. Please note: if you block essential cookies, parts of the Website may not function correctly (for example, checkout may not remember what’s in your cart).


9. Data breaches

If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify:

  • you, and

  • the Information Regulator of South Africa

as soon as is reasonably possible, along with steps you can take to protect yourself. This is required under section 22 of POPIA. DLA Piper Data Protection


10. Contact us

If you have questions about this Privacy Policy, want to access or correct your personal information, or want to raise a privacy concern, you can contact us at:

Email: hello@theivorypearlcollectiv.co.za
Website: theivorypearl.co.za

When you contact us, please include:

  • Your full name

  • Contact details

  • The nature of your request (for example “Please send me a copy of my personal info” or “Please correct my delivery address”)

If you’re not satisfied with how we handle your request, you have the right to complain to the Information Regulator (South Africa), which oversees and enforces POPIA compliance and can investigate privacy complaints. inforegulator.org.za


11. Updates to this Policy

We may change this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date at the top.

Your continued use of the Website after any updates will be treated as acceptance of the updated Policy, so please check back from time to time.


Plain language summary

  • We collect only what we need to take your order, deliver it, help you with exchanges, and run the Website.

  • We do not sell your data.

  • You can ask what we have about you, ask us to fix it, or complain if you’re not happy.

  • We take reasonable steps to protect it and we notify you if something goes wrong. Termly+2DLA Piper Data Protection+2

This Privacy Policy applies to theivorypearl.co.za and all interactions you have with The Ivory Pearl Collective through that Website.