Privacy Policy

Our Commitment to Your Privacy

At Glow Cafe ZA, we are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or make a purchase from our online store at glowcafe.co.za.

By using our website and services, you consent to the collection and use of your information as described in this policy.

1. Who We Are (Responsible Party)

The responsible party for your personal information is:

Glow Cafe ZA
Website: glowcafe.co.za
Email: evanventer68@gmail.com
Information Officer: Evan Venter

2. What Personal Information We Collect

We may collect the following personal information from you:

  • Identity information: First name, last name
  • Contact information: Email address, phone number, physical/delivery address
  • Transaction information: Purchase history, order details, payment method type (we do not store full card details)
  • Technical information: IP address, browser type, device information, cookies and usage data
  • Marketing preferences: Whether you have opted in to receive marketing communications from us

3. Why We Collect Your Information (Purpose)

We collect and process your personal information for the following lawful purposes:

  • To process and fulfil your orders
  • To communicate with you about your orders, queries, or returns
  • To send you marketing emails or promotions (only if you have opted in)
  • To improve our website and customer experience
  • To comply with legal and regulatory obligations
  • To prevent fraud and ensure the security of our store

4. How We Store and Protect Your Information

Your personal information is stored securely on Shopify's platform, which is PCI DSS compliant and uses industry-standard encryption (SSL/TLS) to protect data in transit and at rest.

We take reasonable technical and organisational measures to prevent unauthorised access, loss, or misuse of your personal information. Access to your data is restricted to authorised personnel only.

5. Sharing Your Information

We do not sell your personal information to third parties. We may share your information with trusted service providers who assist us in operating our store, including:

  • Shopify — our e-commerce platform provider
  • Courier and logistics partners — to fulfil and deliver your orders
  • Payment processors — to securely process your payments
  • Email marketing tools — only if you have opted in to marketing

All third-party service providers are required to handle your information in accordance with applicable data protection laws.

6. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

  • Right to access: You may request a copy of the personal information we hold about you
  • Right to correction: You may request that we correct inaccurate or incomplete information
  • Right to deletion: You may request that we delete your personal information, subject to legal obligations
  • Right to object: You may object to the processing of your personal information for direct marketing purposes at any time
  • Right to lodge a complaint: You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated

To exercise any of these rights, please contact us at: evanventer68@gmail.com

7. Cookies

Our website uses cookies to enhance your browsing experience, analyse site traffic, and personalise content. You can control cookie settings through your browser. Please note that disabling cookies may affect the functionality of our website.

8. Marketing Communications

We will only send you marketing emails or promotional messages if you have explicitly opted in to receive them. You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

9. Retention of Information

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order and transaction records are typically retained for a minimum of 5 years for accounting and legal compliance purposes.

10. Contact the Information Regulator

If you are not satisfied with how we handle your personal information, you have the right to contact the Information Regulator of South Africa:

Information Regulator (South Africa)
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised date. We encourage you to review this policy periodically.

Last updated: April 2026