Privacy notice

1. Who we are

Nalz (Pty) Ltd(“Nalz”, “we”, “us”) is the responsible party for personal information collected via https://www.nalz.co.za. You can reach our Information Officer at care@nalz.co.za.

2. What we collect

• · Contact details (name, email, phone, delivery address)
• · Order details (items, personalization, gift messages)
• · Payment confirmation (we do not store card data — processed by our PCI-DSS compliant gateway)
• · Usage information (cookies, device, anonymous analytics) — with your consent

3. Why we collect it

• · To process and fulfil your order
• · To send order updates via email and WhatsApp
• · To support you when you contact us
• · To send marketing emails (only if you opt in)
• · To meet legal obligations (e.g. tax, accounting)

4. Who we share it with

• · Shopify (e-commerce platform)
• · Payment gateways (PayFast, Yoco, Peach Payments)
• · Couriers (The Courier Guy, Aramex)
• · Email & WhatsApp providers (Klaviyo / Twilio)
• · Analytics providers (only if you have consented)

Each is contractually bound to handle your information securely and only for the purpose we've agreed.

5. How long we keep it

Order data: 7 years (tax law). Marketing consent: until you withdraw it. Anonymous analytics: up to 24 months.

6. Your rights under POPIA

You have the right to:

• · Access the personal information we hold about you
• · Correct or update inaccurate information
• · Object to processing or withdraw consent
• · Request deletion of your personal information
• · Lodge a complaint with the Information Regulator (inforegulator.org.za)

To exercise any of these rights, email care@nalz.co.za. We will respond within 30 days.

7. Cookies

We use a small number of cookies to keep the site running, remember your bag, and — only with your consent — to understand how the site is used. You can update your preferences at any time on our cookies page.

8. Changes

We'll post the date this notice was last updated at the top of the page. Material changes will be emailed to subscribers.