Privacy Policy

Introduction

This Privacy Policy explains how The Golden Tales ("we," "us," or "our") collects, uses, and protects personal information in accordance with the Protection of Personal Information Act (POPIA), the General Data Protection Regulation (GDPR), and other applicable laws. Our commitment is to protect your privacy and maintain the security of all personal information we process.

This Privacy Policy should be read together with our Terms and Conditions, Refund Policy, and Shipping Policy.

Summary of Key Points

Who is responsible? The Golden Tales is the responsible party for the data you provide when purchasing books or visiting our store.
What data do we process? We process customer contact details, delivery addresses, and transaction history.
Children's Data: We sell children's books, but we only collect data from parents or guardians. We do not knowingly collect data directly from children without parental consent.
Who can see your data? Only authorized staff and essential service providers (like couriers and payment processors) have access to your information.
Your Rights: You may access, correct, or request deletion of your personal information at any time.

Information Collection and Processing

We collect information necessary to fulfill your orders and provide a personalized shopping experience.

1. Customer Information

Includes your name, email address, phone number, and physical address for delivery. This is mandatory for processing purchases.

2. Transaction Data

Includes records of the books you have purchased, payment confirmations, and communication history regarding your orders.

3. Marketing Data

If you opt-in, we collect your preferences to send you book recommendations or event invites.

Special Personal Information and Children

The Golden Tales recognizes the sensitive nature of information regarding minors.

We do not intentionally collect personal information from children under the age of 18 without the involvement and consent of a parent or guardian.
Any information regarding a child (e.g., for a personalized gift or book club) must be provided by a "competent person" (parent/legal guardian).
We do not process "Special Personal Information" (like health or religious data) unless it is voluntarily provided by you for a specific service (e.g., dietary requirements for an in-store book launch).

Legal Basis for Processing

We process your information based on:

Contract Performance: To deliver the books you bought.
Legal Obligation: For tax records and financial reporting.
Consent: When you sign up for our newsletter.
Legitimate Interest: To improve our store layout and stock selection.

Third-Party Service Providers

We share necessary data with trusted partners to run our business and improve your experience. This includes:

Payment Gateways: To process credit card and EFT payments securely. We do not store your full card details.
Courier Services: To deliver your books to your doorstep.
Marketing & Analytics (Meta Pixel): We use the Meta Pixel (a tracking code) on our website to measure the effectiveness of our advertising and understand how you interact with our store. This helps us show you relevant book recommendations on Facebook and Instagram.
- Note: This involves sharing certain hashed (encrypted) identifiers and browsing activity with Meta Platforms, Inc.
Email Services: To send you order updates and newsletters.

International Data Transfers

Some of our service providers (like Meta, Google, or cloud storage providers) are located outside of South Africa. We only transfer your personal information to countries that provide an adequate level of data protection or where we have signed agreements ensuring your data remains secure, in line with POPIA and GDPR requirements.

Cookies and Tracking Technologies

To provide a seamless shopping experience, we use "cookies" and similar technologies:

Essential Cookies: Required for the website to function (e.g., keeping items in your cart).
Performance & Analytics: We use tools like the Meta Pixel and Google Analytics to see which pages are popular and to track "conversions" (when a visitor becomes a customer).
Your Choices: You can manage or disable cookies through your browser settings. To specifically opt-out of Meta’s interest-based advertising, you can visit your Facebook Ad Settings.

Data Storage and Security

We implement industry-standard security protocols to protect your data, including:

Encrypted data transmissions for online checkouts.
Restricted access to physical and digital records.
Regular reviews of our service providers' security standards.

Data is primarily stored in South Africa or on secure cloud servers that comply with high-level data protection frameworks (like the GDPR).

Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention criteria include:

Transaction Records: We retain your purchase history and contact details for 5 to 7 years to comply with South African tax and accounting laws (e.g., the Income Tax Act and VAT Act).
Marketing Data: We keep your information for marketing purposes until you withdraw your consent or opt-out.
Customer Support: We retain records of correspondence for as long as necessary to resolve any outstanding queries or potential disputes.

Once the retention period has expired, or if you request the deletion of your data (subject to our legal obligations), we will securely delete, destroy, or de-identify your personal information to ensure it can no longer be linked to you.

Your Rights

Under POPIA, you have the right to:

Access: Request a copy of the data we hold about you.
Correct: Update any out-of-date or incorrect information.
Delete: Ask us to remove your data (subject to legal record-keeping requirements).
Object: Opt-out of marketing communications at any time.

Contact Information

For any privacy-related queries or to exercise your rights, please contact us:

The Golden Tales Information Officer: [Insert Name] Email: [Insert Email Address] Physical Address: [Insert Store Address]

Lodging a Complaint: If you are unsatisfied with how we handle your data, you may contact the South African Information Regulator:

Website: https://inforegulator.org.za
Email: POPIAComplaints@inforegulator.org.za