Privacy Policy

Last updated: 25 June 2026

**1. INTRODUCTION AND RESPONSIBLE PARTY** This Privacy Policy describes how Hanlie Olivier & Elrese Fivaz, operating in an ordinary partnership trading as Hannah Reece ("we", "us", or "our"), collect, use, and protect your personal information in accordance with the Protection of Personal Information Act, No. 4 of 2013 (POPIA).

As an online store operating in South Africa, we are committed to protecting your privacy and ensuring that your personal information is collected and used properly, lawfully, and transparently.

**2. INFORMATION OFFICERS AND CONTACT DETAILS** For any queries, corrections, or requests regarding this Privacy Policy or your personal information, please contact our Information Officers:

* Information Officers: Elrese Fivaz & Hanlie Olivier * Email Address: info@hannahreece.co.za * Physical Address: 20 Wright Street, Camphersdrift, George 6529, Western Cape, South Africa

**3. THE PERSONAL INFORMATION WE COLLECT** We only collect the minimum amount of personal information necessary to process your orders and communicate with you. Because we do not offer client logins, customer portals, or user accounts, we collect this information on a per-transaction basis.

We collect: * Customer Order Details: Your full name, mobile number, email address, and physical shipping address. * Gift Voucher Recipient Details: If you purchase a gift voucher for someone else, we collect the recipient’s name and email address solely to deliver the digital voucher.

What We Do Not Collect or Track: * No Financial / Banking Details: We do not handle, collect, or store your credit card numbers, bank account details, or payment credentials. All payments are securely processed off-site by our independent payment gateway, PayFast. * No Cookies or Tracking: Our website does not utilise cookies unnecessarily, track your IP address, or monitor your browsing behaviour.

**4. PURPOSE AND LEGAL BASIS FOR PROCESSING DATA** We process your personal information strictly for the following reasons: * Fulfillment of Contract: To process your order, receive your payment, create your handmade items, and successfully deliver the products to your door. * Direct Marketing (Consent-Based): If you explicitly opt-in by ticking the "Email me with news and offers" checkbox at checkout, we will use your email address to send you updates about new limited runs and product drops. You can opt out of this at any time.

**5. SHARING YOUR INFORMATION WITH THIRD PARTIES** We do not sell, rent, or trade your personal information with third parties for marketing purposes. To fulfill your order, we only share your details with our trusted operational partners:

* The Courier Guy: We share the customer's name, mobile number, and shipping address so they can fulfill the physical delivery and send tracking notifications. * PayFast: Your transaction details are passed to PayFast to securely authorize and process your payment. * Email Marketing Platform: If you consent to receive marketing, your name and email address are securely processed by our newsletter system to distribute our updates.

**6. DATA SECURITY AND RETENTION** We implement strict administrative and technological security safeguards to protect your personal information from unauthorized access, loss, or misuse.

We only retain your personal information for as long as is legally required to comply with South African tax laws (regarding business transaction histories) or for as long as necessary to fulfill the specific purposes outlined in Section 4.

**7. YOUR LEGAL RIGHTS UNDER POPIA** You have the right to retain control over your personal data. At any time, you may email our Information Officers to: * Request confirmation of what personal information we hold about you. * Request that we correct or update any inaccurate or out-of-date personal information. * Object to the processing of your data or request that we completely delete your personal information from our databases. * Unsubscribe from marketing communications by clicking the "unsubscribe" link at the bottom of our emails or emailing us directly.

If you believe we have processed your personal information unlawfully, you have the right to lodge a complaint with the South African Information Regulator: * Website: inforegulator.org.za * Email: complaints.IR@inforegulator.org.za