Effective Date: 2025

R&C Trading Online Store (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the lawful processing of your personal information in compliance with the Protection of Personal Information Act (POPIA) and, where applicable, the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, purchase our products, or interact with us.

1. Personal Information We Collect

We collect the following types of personal information:

  • Identity & Contact Details: Name, email address, phone number, billing and delivery addresses.
  • Order & Product Details: Measurements, customisation requests, and purchase history.
  • Payment Information: Payment card details (processed securely via third-party providers).
  • Technical Information: IP address, browser type, device data, and website usage (via cookies).

We collect this information directly from you or automatically through our website.

2. Purpose of Processing

In line with POPIA and GDPR, we only process your personal information for specific, explicitly defined, and lawful purposes, including:

  • Fulfilling your orders and delivering products.
  • Communicating with you about your orders, queries, or support requests.
  • Providing tailored products (including your measurements).
  • Improving our website, services, and user experience.
  • Marketing and promotional activities (only with your consent).
  • Compliance with legal and regulatory obligations.

We will only use your personal information for the purposes it was collected, unless otherwise required or permitted by law.

3. Legal Basis for Processing (GDPR & POPIA)

We process your personal information based on:

  • Your consent (e.g., marketing subscriptions).
  • Contractual necessity (to fulfil and deliver your order).
  • Legal obligations (compliance with tax and record-keeping laws).
  • Our legitimate interests (e.g., improving services, fraud prevention).

4. Your Rights Under POPIA & GDPR

You have the following rights:

  • Access: Request a copy of your personal information.
  • Correction: Update or correct your personal information.
  • Deletion: Request deletion of your personal information (where legally allowed).
  • Restriction: Request limitation of processing in certain cases.
  • Objection: Object to processing for marketing purposes.
  • Data Portability (GDPR): Request transfer of your data to another service provider.
  • Withdraw Consent: At any time, without affecting prior lawful processing.

You may exercise these rights by contacting us at [[email protected]]. We will respond within the timelines required by law.

5. Disclosure of Personal Information

We will not sell, rent, or trade your personal information. We may share it only with:

  • Service Providers: Payment gateways, couriers, and IT providers who process your data strictly under our instructions.
  • Legal Authorities: Where required to comply with legal obligations or court orders.
  • Professional Advisors: Auditors or legal advisors bound by confidentiality obligations.

All third parties are contractually required to comply with POPIA and GDPR standards of data protection.

6. Cross-Border Transfers

If we transfer your personal information outside South Africa or the EU, we ensure adequate protection as required by POPIA and GDPR, including contractual safeguards or transferring only to jurisdictions with equivalent protections.

7. Retention of Personal Information

We will only retain your personal information for as long as necessary to fulfil the purposes it was collected for, or as required by law. After this period, your data will be securely deleted or anonymised.

8. Cookies and Tracking

We use cookies and similar technologies to improve your browsing experience, remember your preferences, and analyse traffic. You can manage or disable cookies in your browser settings.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information from loss, misuse, unauthorised access, alteration, or disclosure. However, no system is completely secure.

10. Children’s Privacy

Our website and services are intended for individuals aged 18 or older. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with an updated “Effective Date.”

12. Contact Information

If you have questions or concerns about how we process your personal information, or wish to exercise your rights under POPIA or GDPR, please contact us:

Email: [email protected]
Phone: 011 867 3367
Address: 80 Hennie Alberts Street Brackenhurst, Alberton. 1448.

If you believe we have not handled your personal information properly, you may lodge a complaint with the Information Regulator (South Africa) or your local data protection authority.