Hearth & Hue™
Shop now
Policies

Privacy policy

Last updated: 26 September 2026

Hearth & Hue™ ("we", "us", "our") respects your privacy. This policy explains what personal information we collect when you visit hearthandhue.co.za or buy from us, why we collect it, who we share it with, and your rights under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

Responsible party: Hearth & Hue™

Address: 2 Slovo Crescent, Blackheath, Cape Town, Western Cape, 7580, South Africa

Email: [email protected]

Phone / WhatsApp: +27 82 893 1222

Information Officer: the owner of Hearth & Hue™, reachable at the email above.

2. What we collect

  • Order and contact details: your name, delivery and billing address, email address and phone number.
  • Order history: what you bought, when, and the delivery and payment status.
  • Payment information: payments are processed by our payment providers (for example PayFast and Shopify Payments). We do not see or store your full card or bank details.
  • Account details, if you create a customer account.
  • Messages you send us by email (hosted by Zoho Mail), WhatsApp or the contact form.
  • Reviews and photos you choose to submit.
  • Device and usage data: your IP address, browser and device type, pages viewed and how you arrived at our site, collected through cookies and similar technologies.

3. How we use your information

  • To process, deliver and support your order, including sending order and shipping updates.
  • To take payment and prevent fraud.
  • To reply to your questions, complaints, returns and warranty claims.
  • To display genuine customer reviews, after we have approved them.
  • To keep our store secure, and to understand and improve how it is used.
  • To send marketing emails or messages, only if you have opted in. You can unsubscribe at any time.
  • To meet legal, tax and accounting obligations.

We only process your information where we have a lawful reason under POPIA: to perform our contract with you, to comply with the law, because you consented, or for our legitimate interests in running a secure and honest business.

4. Who we share it with

We do not sell your personal information. We share it only with service providers who help us run the store, and only what they need:

  • Shopify, which hosts our store, checkout and customer records.
  • Payment providers such as PayFast, to process your payment.
  • Courier and locker partners, so your parcel can be delivered (your name, delivery address, phone number and email).
  • Judge.me, which collects and displays product reviews.
  • Analytics, advertising and email tools we may use, such as Google, Meta or TikTok tools, to measure and improve our marketing. These only run where cookies allow.
  • Zoho Mail, which hosts our business email, so it processes the messages you send us and our replies.
  • Professional advisers, and authorities where the law requires it.

Some of these providers are based outside South Africa, so your information may be processed in other countries. Where this happens, we rely on providers that protect your information to a similar standard, as POPIA requires.

5. Cookies

We use cookies and similar technologies to keep your cart working, remember your preferences, keep the site secure and measure how the site is used. You can block or delete cookies in your browser settings, but parts of the store, such as the cart and checkout, may then not work properly.

6. How long we keep your information

We keep order and payment records for as long as the law requires for tax and accounting purposes (currently up to five years or more). We keep other information only as long as we need it for the purposes above, then delete or anonymise it. If you unsubscribe from marketing, we keep only enough information to make sure we do not contact you again.

7. How we protect it

We use reasonable technical and organisational safeguards, including the security of Shopify and our payment providers, to guard against loss, misuse and unauthorised access. No online system is completely secure, but we take this seriously. If a breach affects your information, we will notify you and the Information Regulator as POPIA requires.

8. Your rights

You have the right to:

  • ask what personal information we hold about you and get a copy;
  • ask us to correct or delete information that is inaccurate, outdated or no longer needed;
  • object to processing, or withdraw your consent, including for marketing;
  • lodge a complaint with the Information Regulator (South Africa): [email protected], https://inforegulator.org.za.

To use any of these rights, email [email protected]. We may ask you to confirm your identity first, and we will respond within a reasonable time.

9. Children

Our store is not aimed at children, and we do not knowingly collect information from anyone under 18 without a parent or guardian's consent.

10. Links to other sites

Our store may link to other websites. We are not responsible for their privacy practices.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed.

12. Contact us

Questions about this policy or your information? Email [email protected] or WhatsApp +27 82 893 1222 (Monday to Sunday, 08:00 to 14:00 SAST).

← Back to the Comfort Set