Privacy policy

INTRODUCTION

Africa Diamond House (Pty) Ltd t/a Kirsten Drew ("Kirsten Drew", "we", "us" or "our") is committed to protecting your privacy.

This Policy sets out how any personal information we collect from you, or that you provide us, will be processed in accordance with the requirements of the Protection of Personal Information Act No. 4 of 2013 (“POPIA”).  Please read this Policy carefully to understand our views and practices regarding your personal information and how we will treat it.  By visiting www.kirstendrew.com you are accepting and consenting to the practices described in this Policy.

This Policy applies to any online and mobile website, application and digital service (collectively "the Services"). We collect, use and are responsible for certain personal information about you.

“Personal information” means data that can be used to identify a person (natural or legal entity) including but not limited to names, identity/registration numbers, age, gender, language, email addresses, telephone numbers, addresses, religion etc.

For the purpose of POPIA, the ‘responsible party’ is Kirsten Drew.

We ask that you read this Policy carefully as it contains important information on:

I.  who we are;

II. how and why we collect, store, use and share personal information;

III.  your rights; and

IV.  how to contact us and the Information Regulator in the event you have a complaint.

If we make changes to this Policy that we consider to be important, we will let you know by placing a notice on our website, so you may check our updated Policy.

Any personal information we collect is held with due care and security. Your visit to our website and your use of any of the services we provide is also subject to our website Terms of Service

WHAT INFORMATION DO WE COLLECT?

The following categories of personal information will be collected and processed about you in connection with your interaction with us and use of our Services, including but not limited to, when you purchase products on our Services, you complete forms on our Services, submit user-generated reviews or ratings, engage in any social media functions on our Services or when you correspond with us by phone, email or otherwise.

Information you give us

I.  personal identification information such as, your name, date of birth and gender;

II.  contact information such as, email address and telephone number;

III.  demographic information: such as, postal address;

IV.  financial information: such as, credit/debit card numbers;

V.  your purchase history;

VI.  if you have completed a survey or entered a competition with us;

VII.  if you contact us by phone, email or otherwise, we will keep a record of that correspondence; and

VIII.  your marketing preferences, including any consents you have given us when you subscribe to our newsletter or set up an online account.

Information we collect automatically

The following information belonging to you is automatically collected when you visit our website:

I. information related to the browser, device or operating system you use to access our Services; and

II. your IP address, the website you came from, information on actions taken on our Services including but not limited to pages viewed, dated and times of visits, time spent on each page, products viewed, clicked on, added to your basket and purchased.

HOW DO WE USE THIS INFORMATION, AND WHAT IS THE LEGAL BASIS FOR THIS USE?

We will process your personal information only for the purpose for which it was collected and agreed with you, including:

To fulfill a contract, or take steps linked to a contract including fulfilling any orders your place. This includes:

We will take all reasonable steps to destroy or erase from our systems, all personal information that is no longer required.

WHO WILL WE SHARE THIS INFORMATION WITH, WHERE AND WHEN?

With your consent (where required), we may share your personal information with any member of our group of companies, trusted third-party service providers, suppliers, affiliates, divisions, partners, sponsors, agents and representatives we have engaged to perform business-related functions on our behalf. For example, to: (i) conduct research and analytics; (ii) create content; (iii) provide customer support services; (iv) maintain databases (v) fulfil orders; (vi) handle payments; (vii) host Services; (viii) administer contests; (ix) with service providers that conduct or support marketing including service providers send postal marketing on our behalf and (x) third party providers who may send you direct mail. 

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

In all cases, the third party is acting on Kirsten Drew’s instructions and in accordance with this Policy, POPIA, confidentiality, and levels of security.

INTERNATIONAL TRANSFERS

As we are an international business, we may transfer your personal information to recipients outside the Republic of South Africa (where we are based) in accordance with section 72 of POPIA..

Where third party providers are used, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

In these circumstances, we will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, organisational, contractual or other lawful means.  Please contact us if you would like more information about how your personal information may be transferred at privacy@kirstendrew.com

SHOPIFY

Our site is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify's data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

PAYMENT

If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card information. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

For more insight, you may also want to read Shopify's Terms of Service or Privacy Statement.

HOW LONG WILL YOU RETAIN MY INFORMATION?

Where we process personal information for marketing purposes or with your consent, we shall process the information for as long as it is required in order to provide the products and/or services to you or until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your information indefinitely so that we can respect your request in future.

Where we process personal information in connection with performing a contract or for a competition, we keep the information for 6 years.

Where we process registration data, excluding in the circumstances outlined above, we retain your data for 6 years.

WHAT RIGHTS DO I HAVE?

You have the right to ask us for a copy of your personal information we hold about you; to correct, delete or restrict (stop any active) processing of your personal information; and to obtain the personal information you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this information to another responsible party.

You can object to the processing of your personal information in some circumstances (in particular, where we don’t have to process the information to meet a contractual or other legal requirement, or where we are using the information for direct marketing).

These rights may be limited, for example if fulfilling your request would reveal personal information about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of relevant exemptions we rely upon when responding to any request you make.

To exercise any of these rights, or to obtain other information, kindly contact privacy@kirstendrew.com and specify what information you require. Please ensure in include a copy of your identity document to confirm your identity.

Where we require your personal information to comply with legal or contractual obligations, then provision of such information is mandatory: if such information is not provided, then we will not be able to manage our contractual relationship with you, or to meet obligations placed on us.

WITHDRAWING CONSENT OR OTHERWISE OBJECTING TO DIRECT MARKETING

Wherever we rely on your consent to send you marketing communications (for instance, where you have signed up to our newsletter, or have provided us with your consent to receive marketing communications at the point of checkout or when setting up an account), you will always be able to withdraw that consent, although we may have other legal grounds for processing your information for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests (for instance, where you are already a customer).

In any case, you can unsubscribe from receiving our marketing emails by clicking on the unsubscribe link at the bottom of our emails, or by contacting us using the details set out below. You can also update your marketing preferences in your customer account on  privacy@kirstendrew.com at any time. 

You also have an absolute right to opt-out of all data processing that we carry out for marketing purposes (this includes receiving marketing emails, and profiling whereby we tailor the content, adverts and marketing communications that you receive about our products and services), at any time, by contacting privacy@kirstendrew.com

COOKIES

Our website uses cookies to distinguish you from other users of our website.  This helps us to provide you with a good experience when you browse our website and also allows us to improve our website.

SECURITY NOTICE

We are committed to protecting the security of your personal information.  We shall take all reasonable steps to help protect your personal information from unauthorised access, use or disclosure.

We have put in place physical, electronic, and managerial procedures designed to help prevent unauthorised access, to maintain data security, and to use correctly the personal information we collect online.

These safeguards vary based on the sensitivity of the personal information that we collect and store.

Unfortunately, the transmission of information via the internet is not completely secure. Although we take appropriate measures to safeguard against unauthorised disclosures of personal information, we cannot assure you that your personal information will never be disclosed, altered or destroyed in a manner that is inconsistent with this Policy.

We will immediately notify you and the Information Regulator if we become aware of any security breach or unauthorized or unlawful processing of your personal information and will attend to remedy the issue as soon as reasonably practicable.

We will ensure that any third party to whom we pass your personal information to, agrees to treat your personal information with the same level of protection as we are obliged to in terms of POPIA.

HOW DO I GET IN TOUCH WITH YOU?

We hope that we can satisfy queries you may have about the way we process your information. If you would like to get in touch for any clarifications please do so at privacy@kirstendrew.com

CHANGES TO THIS POLICY

From time to time, we may update this Policy. We will notify you about any upcoming material changes by either sending you an email to the email address you most recently provided to us or by prominently posting a notice on our Services. We encourage you to periodically check back and review this Policy so that you know what personal information we collect, how we use it, and with whom we share it.

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to or to privacy@kirstendrew.com: