De Haas and van den Berg (Pty) Ltd
Effective date: 31 August 2026

1. Who we are

This website, https://corinnedehaas.com, belongs to De Haas and van den Berg (Pty) Ltd, 14 Harbour Road, Kleinmond, 7195, South Africa.

Send all privacy questions and requests to privacy@corinnedehaas.com.

We process personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains what we collect, why we collect it, who receives it, and how long we keep it.

2. What we collect

When you place an order, we collect your name, your delivery address, your telephone number, your email address, the contents of your order, and any delivery instruction that you give us. We use these items to accept your order, to deliver it, and to invoice it. We cannot accept or deliver an order without them.

We do not offer customer accounts. You order as a guest.

Our payment provider processes all card payments on its own systems. We never see or store your card number. If you pay by EFT, we receive your payment reference and the proof of payment that you send us.

When you use the contact form, we collect your name, your email address, and the content of your message. We use them to answer you. The form also collects your IP address and your browser user agent string, and it uses these two items to detect spam. You do not have to use the form. You can send us an email instead.

When you visit any page, the web server writes a log entry. The log holds your IP address, the date and time, the page that you requested, your browser user agent string, and the page that sent you to us. We use the log to keep the site secure and to count visitors. The shop also records which products and pages a visitor looks at. This record stays on our own website.

3. Cookies

The shop sets cookies that hold the contents of your cart and link your browser to that cart. Two of these cookies end when you close your browser. A third cookie stays for two days, and it holds your cart after you close and open the browser again.

We set no advertising cookies. We use no tracking pixels. We run no third-party analytics scripts.

4. Who receives your data

We give your name, your delivery address and your telephone number to The Courier Guy. The courier needs these items to deliver your parcel.

Three other parties process data for us:

• Our payment provider processes card payments. It operates in South Africa.
• Our hosting company hosts the website, sends our email, and produces visitor statistics. It operates in South Africa.
• Akismet, a service of Automattic Inc., checks contact form messages for spam. It operates in the United States.

The map on our contact page comes from Google Maps, a service of Google LLC in the United States.

We sell no personal information. We share no personal information for marketing.

5. Data that leaves South Africa

Section 72 of POPIA requires us to tell you when personal information goes to another country. Two services process data outside South Africa.

Akismet receives the IP address and the content of a contact form message. It checks the message against a spam database.

Google receives your IP address when the map on our contact page loads. If you do not want this, do not open the contact page.

6. How long we keep your data

We keep orders, invoices and tax records for a minimum of five years. The Tax Administration Act and the Companies Act require this period.

We keep contact form messages for 12 months. These messages stay in our email mailbox.

The retention period of our hosting company applies to the server logs.

7. Security

We protect your information with the technical and organisational measures that section 19 of POPIA requires. No system is completely secure. If a breach affects your personal information, we will tell you and the Information Regulator.

8. Marketing

The website has no newsletter signup form. We use your email address to confirm your order, to send your invoice, and to tell you about the delivery.

9. Your rights

Under POPIA you can ask us to tell you what personal information we hold about you. You can ask us to correct information that is wrong, misleading or incomplete. You can ask us to delete information that we no longer need. You can also object to our processing of your information.

Send your request to privacy@corinnedehaas.com. We reply within five working days.

We cannot delete order records, invoices or tax records before the five-year period ends. The law requires us to keep them.

If our answer does not satisfy you, complain to the Information Regulator of South Africa. Write to complaints.IR@justice.gov.za, or visit https://inforegulator.org.za.

10. Changes to this policy

We can change this policy. The date at the top shows the last change.