PRIVACY

POLICY

Privacy Policy for Peony Perfect

Last updated: June 23, 2026

This Privacy Policy describes how Peony Perfect (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from https://peonyperfect.co.za (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the data subject—whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

1. Compliance with POPIA

We are fully committed to protecting your privacy and ensuring that your personal information is collected and processed lawfully, fairly, and transparently in strict accordance with South Africa's Protection of Personal Information Act (POPIA).

2. What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with our Site and use our Services.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

  • Basic contact details: including your name, physical address, phone number, and email address.

  • Order information: including your name, billing address, shipping address, payment confirmation, email address, and phone number.

  • Account information: including your username, password, and security questions if you register an account on our platform.

  • Shopping information: including the products you’ve viewed, items you put in your cart, or items added to your wishlist.

  • Newsletter & Marketing Data: including your email address and communication preferences when you explicitly opt-in to receive our newsletters or promotional updates.

  • Customer support & Contact Forms: including any information you choose to include in communications with us, such as messages sent through our website contact forms. Contact form submissions are kept for customer service purposes, but we do not use this specific data for marketing purposes.

Information Collected via Community Features

  • Comments: When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to assist in spam detection. An anonymized string created from your email address (a hash) may be provided to the Gravatar service to check if you use it. After your comment is approved, your profile picture is visible to the public alongside your comment.

  • Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included, as visitors to the website can potentially download and extract this data.

3. Cookies and Tracking Technologies

Our website uses Cookies to improve your user experience, track cart contents while you browse, and optimize site performance.

WordPress & WooCommerce Cookies

  • Comment Cookies: If you leave a comment, you may opt-in to saving your name, email address, and website in cookies for your convenience. These last for one year.

  • Login Cookies: If you visit our login page, a temporary cookie is set to determine if your browser accepts cookies (discarded when you close your browser). When logging in, cookies are set to save your login info (lasts 2 days) and screen display choices (lasts 1 year). Selecting "Remember Me" extends login persistence to two weeks.

MailPoet Newsletter Cookies

If you interact with our newsletter system, MailPoet may utilize the following cookies:

  • mailpoet_page_view: Tracks the last time a subscriber viewed any page on the site (lasts 3,650 days).

  • mailpoet_revenue_tracking: Tracks which newsletter acquired a click-through and a subsequent purchase in our store (lasts 14 days).

  • mailpoet_subscriber: Tracks subscriber engagement for logged-in or confirmed subscribers (lasts 3,650 days).

  • popup_form_dismissed_{$formId}: Prevents a popup form from re-displaying if you have previously dismissed it.

Most browsers automatically accept Cookies by default, but you can choose to remove or reject Cookies through your browser controls. Please keep in mind that blocking Cookies can negatively impact your shopping experience.

4. How We Use Your Personal Information

We process your personal information for the following specific purposes:

  • Providing Products and Services: To process payments, fulfill orders, estimate taxes and shipping fees, send transactional notices (order updates, invoices), manage your account, and facilitate returns.

  • Communicating with You: To provide customer support, respond to complaints or refund requests, and maintain our business relationship.

  • Newsletters and Direct Marketing: To send you promotional updates via MailPoet. In strict compliance with POPIA, we will only add you to our newsletter list if you have provided explicit, positive opt-in consent, or if you are an existing customer receiving updates about similar products. You have the right to opt-out at any time by clicking the "Unsubscribe" link at the bottom of our emails.

  • Security and Fraud Prevention: To monitor, detect, investigate, or prevent potential fraudulent, illegal, or malicious activity.

5. Who Has Access and Who We Share Data With

Our website is developed on WordPress/WooCommerce and securely hosted by Xneelo within South Africa.

Internal Team Access

Members of our internal team (specifically Administrators and Shop Managers) have access to your order information (what was purchased, when, and where to send it) and customer information (name, email, billing/shipping details) in order to fulfill your orders and support you.

Third-Party Sharing

We do not sell your personal data. We only share information with trusted third parties who help us provide our store services to you:

  • Yoco: We accept payments through Yoco. When processing payments, data required to support or process the transaction (such as purchase totals and billing information) will be securely passed to Yoco.

  • Couriers: Your shipping details are shared with our logistics partners to deliver your physical orders.

  • Google Analytics: We use Google Analytics to understand site traffic. Your anonymized data may be stored and shared with this external service for analytics purposes.

  • Automated Spam Detection: Visitor comments may be checked through an automated spam detection service.

6. Security and Retention of Your Information

We implement technical and organizational security protocols to protect your personal information. However, no digital system is entirely impenetrable.

Data Retention Periods

  • Store Orders: We store your order information (name, email, billing, and shipping addresses) for 5 years to comply with South African statutory tax and financial record-keeping laws (SARS).

  • Comments: If you leave a comment, the comment and its metadata are retained indefinitely.

  • User Accounts: For users that register on our website, we store the personal information provided in their user profile indefinitely. Users can see, edit, or delete their personal information at any time (except their username).

7. Your Legal Rights under POPIA

As a data subject in South Africa, you have the right to:

  • Request access to the personal information we hold about you.

  • Request that we correct, update, or delete inaccurate or outdated personal information.

  • Object to the processing of your personal information for direct marketing.

  • Withdraw your consent for data processing at any time.

  • Lodge a complaint with the South African Information Regulator.

8. Contact Details and Information Officer

For any inquiries, requests to exercise your legal rights, or questions regarding this Privacy Policy, please directly contact our designated Information Officer:

  • Information Officer: Belinda Mclintock

  • Email Contact: belinda@peonyperfect.co.za

  • Physical Address: Peony Perfect, Mzuri Farm, Himeville, 3256

South African Information Regulator Details

If you feel your privacy concerns have not been adequately addressed by us, you have the right to contact the national regulator:

  • Website: https://inforegulator.org.za/

  • General Enquiries: enquiries@inforegulator.org.za

  • POPIA Complaints: POPIAComplaints@inforegulator.org.za