Privacy Policy

Effective date: 3 December 2025

This Privacy Policy explains how Detail Shack (“Detail Shack”, “we”, “us”) collects, uses, discloses, and protects personal information when you use www.detailshack.co.za (the “Site”), place an order, contact us, or interact with our marketing (including analytics and social media tracking). We comply with the Protection of Personal Information Act, 4 of 2013 (POPIA).

By using the Site, you consent to the practices described here. You can withdraw or adjust certain consents at any time via our cookie banner or by contacting us.

1) Who we are & how to contact us

• Responsible party: Detail Shack (South Africa)
• Website: https://www.detailshack.co.za
• Email (privacy): privacy@detailshack.co.za
• Contact form: https://www.detailshack.co.za/contact/

For POPIA requests (access, correction, deletion, objection) or questions about this notice, email privacy@detailshack.co.za with the subject “POPIA Request”.

2) What we collect

We collect the minimum personal information needed to provide our services and improve the Site.

Information you provide:

• Identification & contact: name, email, phone number, delivery/billing address.
• Order details: items purchased, order notes, returns information.
• Account data: login (hashed), preferences, saved addresses.
• Support messages: enquiries via email, WhatsApp or forms.

Information collected automatically:

• Device & usage: pages viewed, links clicked, time on page, approximate location (city level), browser & device identifiers.
• Cookies & similar tech: pixels, tags, local storage for analytics, personalisation and advertising (see Cookies & tracking).

Third-party sources (as applicable):

• Payment providers (e.g., PayFast, SnapScan) confirm payment status; we do not receive full card details.
• Couriers supply tracking and delivery status.

We do not knowingly collect special/sensitive categories (e.g., health). Please avoid sending such data in free-text fields.

3) Why we process your information (POPIA)

• Purchases & fulfilment: to take orders, process payments, ship products, and manage returns/warranty.
• Customer support: to respond to enquiries and provide after-sales assistance.
• Account & security: to create/manage accounts, prevent fraud and secure the Site.
• Analytics & improvement: to understand Site usage and improve performance and content.
• Marketing (with consent): to send emails, measure campaigns, and show relevant ads.
• Legal & compliance: to meet tax/accounting duties and respond to lawful requests.

4) Cookies & tracking technologies

We use cookies and similar technologies to run the Site and measure performance. You can manage consent at any time via the cookie banner (“Cookie Settings”).

Categories we use:

• Strictly Necessary (always on): core site functions (cart, checkout, security, consent storage).
• Analytics (consent-based): helps us understand traffic and improve the Site.
• Advertising/Marketing (consent-based): measures campaigns and shows relevant ads on third-party platforms.
• Functional (consent-based): remembers preferences.

Google Analytics 4 (GA4): we use GA4 to measure Site usage. GA4 does not log or store IP addresses. We do not use GA to identify individuals. You can opt out via the cookie banner at any time.

Social media pixels: we may use Meta (Facebook/Instagram) Pixel and similar tools to measure ad performance and build audiences. These run only with your consent via the cookie banner. Where enabled, these platforms may link your visit to your account with them according to their own privacy policies.

5) Payment, shipping and other processors

To deliver our services we share limited personal information with trusted providers. Each processes your data on our instructions and/or under their own lawful responsibilities.

• Payments: PayFast; SnapScan (processes your payment; we do not store card or bank details).
• Hosting & security: web host, content delivery and firewall services (to deliver the Site and protect it from abuse).
• Email & communications: email delivery and customer support tools.
• Couriers: for delivery and returns logistics.

We require all processors to protect your information appropriately and to only use it for the services they provide to us.

6) Sharing & disclosure

We do not sell your personal information. We share it only when necessary to: fulfil orders; provide support; comply with law; protect our rights, users or the public; or complete a business transfer (e.g., merger/acquisition).

7) Cross-border transfers

Some providers may process data in other countries. When we transfer personal information outside South Africa, we use appropriate safeguards (contractual and technical) so that the recipient protects the information to standards substantially similar to POPIA.

8) Retention

We keep personal information only as long as needed for the purposes above or to meet legal duties.

• Orders & tax records: kept for at least 5 years from the date of submission to comply with South African revenue laws; certain company records may be kept for up to 7 years where required by applicable legislation.
• Accounts: kept while your account is active; if you close it, we minimise and then delete after legal retention periods.
• Marketing consent: kept until you opt out or the purpose expires.

When data is no longer needed, we securely delete or anonymise it.

9) Your rights (POPIA)

You may exercise these rights, subject to lawful limits:

• Access: request confirmation of whether we hold your personal information and obtain a copy.
• Correction/Deletion: request correction of inaccurate data, or deletion where we are no longer authorised to retain it.
• Objection/Restriction: object to certain processing (including direct marketing) or request that we restrict processing.
• Withdraw consent: where processing is based on consent (e.g., analytics/marketing cookies), you may withdraw it at any time via the cookie banner or by contacting us.

To exercise your rights, email privacy@detailshack.co.za. We may require proof of identity and will respond within a reasonable time.

You also have the right to lodge a complaint with the Information Regulator (South Africa) at POPIAComplaints@inforegulator.org.za or via their website.

10) Direct marketing

We send marketing emails and SMS only with consent (or where otherwise permitted by law). You can opt out at any time using the Unsubscribe link or by contacting us. We do not use automated decision-making that produces legal or similarly significant effects.

11) Security

We implement administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit (HTTPS), hardened servers, access controls, and monitoring. While no method is 100% secure, we continually improve our defences and limit access to those who need it.

12) Children

Our Site is not targeted at children under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

13) Links to other sites

Our Site may link to third-party websites. Their privacy practices are not covered by this Policy. Please review their policies.

14) Changes to this Policy

We may update this Policy from time to time. If changes are material, we will notify you via the Site and update the Effective date above. Your continued use of the Site after changes take effect means you accept the revised Policy.

15) How to manage cookies

You can manage or withdraw consent for non-essential cookies at any time via the cookie banner (“Cookie Settings”). You can also adjust browser settings to block cookies, but essential features like cart and checkout may not work correctly.

Last updated: 3 December 2025