Privacy policy

Privacy Policy

Last updated: 22 September 2026

ShapeHaus ("we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This Privacy Policy explains what personal information we collect, why, how we use and protect it, and the rights you have.

1. Who we are

ShapeHaus is a sole proprietor trading as "ShapeHaus", with its registered address at P.O. Box 1235, Kakamas, Northern Cape, 8874, South Africa.

2. Information Officer

In terms of POPIA, our Information Officer is the store owner. Any requests, questions or complaints about how we handle your personal information should be directed to fouriespn@gmail.com.

3. Personal information we collect

Name, surname and contact details (email address, phone number)
Billing and delivery address
Order history and purchase details
Shipping and delivery information
Payment information processed by our payment provider(s) (PayPal, PayFast) — we do not store your full card details ourselves
Marketing preferences, if you sign up for our newsletter or promotions

4. Why we process your information

We only process personal information where we have a lawful basis to do so under POPIA — because it is necessary to perform a contract with you (e.g. fulfilling your order), because you have consented, or because we have a legitimate business interest that does not override your rights.

To process and fulfil your orders, including payment, shipping and delivery, and customer support
To communicate with you about your orders, account or enquiries
To comply with our legal, tax and accounting obligations
To detect and prevent fraud and protect the security of our website
To send you marketing communications, where you have opted in — you may withdraw this consent at any time

5. Who we share your information with

We do not sell your personal information. We share it only where necessary, with the following categories of third parties:

Payment processors (PayPal, PayFast), to process your payment securely
Courier and logistics partners and our fulfillment/dropshipping suppliers, to deliver your order
Our e-commerce and hosting platform (Shopify), to operate this store
Professional advisors and regulators, where required by law

6. Cross-border transfers

Some of the third parties listed above (including PayPal, our fulfillment/dropshipping suppliers, and our hosting and platform providers) may process personal information on servers located outside South Africa. Where this occurs, we take reasonable steps to ensure the recipient is subject to a law, binding agreement, or binding corporate rules that provide an adequate level of protection substantially similar to POPIA, in line with section 72 of POPIA.

7. Cookies and tracking

We do not currently use third-party analytics or advertising cookies (such as Google Analytics or Meta/Facebook Pixel) on this website. If we introduce these in future, we will update this Privacy Policy to describe them before they go live.

8. Your rights

Subject to POPIA, you have the right to:

Request access to the personal information we hold about you
Request that we correct or update inaccurate or incomplete information
Request that we delete or destroy personal information we no longer have a lawful basis to keep
Object to the processing of your personal information, including for direct marketing purposes
Withdraw any consent you have given, at any time
Lodge a complaint with the Information Regulator (South Africa) if you believe we have not complied with POPIA

9. Security

We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration or disclosure. While we take these obligations seriously, no method of transmission or storage is completely secure.

10. Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law (for example, tax and accounting records).

11. Children's information

Our services are not directed at children, and we do not knowingly collect personal information from children without the consent of a parent or guardian, as required by POPIA.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest revision. Continued use of our website after changes take effect constitutes acceptance of the updated policy.