Privacy Policy

1. Who is responsible

Portly is the responsible party for your personal information. Our details, including our physical address, are in section 1 of our Terms & Conditions.

Information Officer: Louis Duan Vorster, reachable at portly@gmail.com.

2. What we collect

We only collect what we actually need to sell you something and get it to your door.

When you place an order

• Your name
• Delivery address
• Email address and phone number
• What you ordered, and the amount paid

When you pay

Your card details are entered directly with our payment provider on their secure systems. We never see or store your full card number. We only receive confirmation that a payment succeeded or failed.

Automatically, when you browse

• Basic technical information such as browser type, device type and approximate location
• Which pages you viewed, so we can understand what people find useful

If you contact us

Whatever you choose to include in your message, so that we can help you.

We do not knowingly collect information from children, and we do not collect special personal information such as health, religion or political affiliation.

3. Why we use it

• To fulfil your order. Processing payment, arranging delivery, sending confirmations and handling returns. Without this information we cannot complete a sale.
• To support you. Answering questions and resolving delivery issues.
• To meet our legal obligations. Keeping records of sales as required by law.
• To improve the store. Understanding which products and pages perform well.
• To market to you, only if you agree. See section 8.

We do not sell your personal information to anyone, ever.

4. Who we share it with

We share your information only with parties who need it to deliver your order, and only as much as they need:

• Our supplier. Some orders are shipped to you directly by our supplier. Where that happens, they receive your name, delivery address and contact number so the parcel reaches you.
• Couriers. Your name, address and phone number, so they can deliver and contact you if needed.
• Our payment provider. To process your payment securely.
• Our website host and email provider. Who store the data on our behalf.
• Authorities. Only where the law requires it.

5. Information sent outside South Africa

Our website is hosted on servers outside South Africa, and some of the services we use to run the store operate internationally. This means your information may be processed in another country.

Where that happens, we only use providers that are bound by data protection standards comparable to POPIA, as section 72 of POPIA requires.

6. How we protect it

The site is served over an encrypted HTTPS connection. Payment details are handled entirely by our payment provider on their own secured systems, so card data never reaches us.

We keep access to order information limited to the people running Portly.

No system is perfectly secure. If a breach ever occurs that puts your personal information at risk, we will notify you and the Information Regulator as POPIA requires.

7. How long we keep it

We keep order and transaction records for as long as the law requires us to, which is generally five years. After that we delete them or strip out anything that identifies you.

If you asked to receive marketing, we keep your contact details until you unsubscribe.

8. Marketing

We will only send you marketing emails or messages if you have asked us to, or if you are an existing customer and we are telling you about similar products. Every message includes a way to unsubscribe, and we act on it immediately.

You can opt out at any time by emailing us. It costs you nothing and we will not ask you why.

9. Cookies and site data

This site stores your shopping cart in your own browser's local storage so that your cart is still there when you come back. That data stays on your device and is not sent to us.

We load fonts from Google Fonts, which means Google's servers receive a request from your browser when a page loads.

You can clear this data at any time through your browser settings. Clearing it will empty your cart.

[UPDATE THIS SECTION IF YOU ADD ANALYTICS OR AN AD PIXEL — for example Google Analytics or the Meta pixel. Those require disclosure and, in most readings of POPIA, a cookie consent banner.]

10. Your rights

Under POPIA you have the right to:

• Ask what personal information we hold about you
• Ask us to correct anything that is wrong
• Ask us to delete information we no longer have a lawful reason to keep
• Object to us using your information for a particular purpose
• Withdraw consent you previously gave, at any time
• Complain to the Information Regulator

To exercise any of these, email us at portly@gmail.com. We will respond within a reasonable time and will not charge you for a reasonable request.

11. Complaints

Please come to us first so we can put things right. If you are still unhappy, you may complain to:

The Information Regulator (South Africa)
Website: inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
Complaints: complaints.IR@inforegulator.org.za