The purpose of this Privacy Policy is to explain how, why, and when Tulip Couture uses your Personal Information in compliance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). It’s important to read this Privacy Policy along with our other terms and conditions, privacy notices, or policies we may provide when we collect or use your Personal Information. Please pay special attention to the clauses that appear in bold, as they may:
- Limit the risk or liability of Tulip Couture or a third party;
- Create risk or liability for the user;
- Compel the user to indemnify Tulip Couture or a third party;
- Serve as an acknowledgment by the user of a fact.
We respect your privacy and take the protection of Personal Information seriously. We strive to deliver excellent service whenever you shop with us, and to do this, we need to use some of your Personal Information. This Privacy Policy describes how we handle the Personal Information we collect from you. By using our Platforms, you agree to the processing of your Personal Information as outlined in this Privacy Policy.
In this Privacy Policy, the terms “Personal Information” and “process/processing” bear the same meanings as set out in POPIA. “We,” “us,” or “our” refers to Tulip Couture. “You” and “your” refer to every person who accesses or uses our Platforms, also referred to as a user. “Registered user(s)” refers to anyone registered on our Platforms who has provided us with a unique username and password, as well as other Personal Information, to order goods on our Platforms.
IF YOU ARE BELOW THE AGE OF 18
If you are under 18, you must always get permission from your parent or guardian before using our Platforms or providing us with your Personal Information. We may check that your parent or guardian has given you permission by asking for their contact details to verify. If we cannot verify such permission or if a parent or guardian confirms you do not have their permission, you may not use our Platforms.
WHAT PERSONAL INFORMATION WE COLLECT AND PROCESS
Tulip Couture processes Personal Information in a manner that is reasonable, adequate, relevant, non-excessive, and purpose-specific. To access and use our Platforms, we collect and process some Personal Information. When you register to use our Platforms, we may collect the following Personal Information:
- Name and surname
- Email address
- Physical address
- Billing address
- Gender
- Mobile phone number
- Online identifiers
- Date of birth
- Identification number
Should your Personal Information change or you wish to amend and/or correct it, you can update your registered user information in your account profile. You warrant that the information you provide is accurate, current, true, and correct and that it does not impersonate or misrepresent any person or entity or falsely state or otherwise misrepresent your affiliation with anyone or anything.
INFORMATION FROM USING OUR PLATFORMS
When you access our Platforms, whether or not you are a registered user of Tulip Couture, we process some of your Personal Information. Depending on how you access and use our Platforms, we may receive:
- Log information, including information on how, when, and for how long you use our Platforms, the content you view, and search queries you submit.
- Information about the equipment you use to access our Platforms, including the type of device, browser, operating system, and IP address.
- Geographic location from which you accessed our Platforms, including your device’s GPS signal and information about nearby Wi-Fi networks and cell towers when you use location-enabled services.
- Other information about you from third parties, such as social media.
WHY DO WE PROCESS YOUR PERSONAL INFORMATION?
We process the Personal Information we collect and receive to:
- Identify you;
- Verify your identity;
- Create a user account for you;
- Enter into a contract with you.
As a registered user, we also process your Personal Information to:
- Fulfill our contractual obligations to you when you have ordered goods, enabling us to deliver those goods and process returns.
- Provide you with information, products, or services you request from us.
- Communicate with you regarding our Platforms and provide customer support, resolve complaints, and ensure quality control.
- Notify you about changes to our Platforms, services and products, terms and conditions, privacy policy or notices, and any other changes that impact our Platforms, services, and products.
- Send you information about competitions, products, or services that may interest you (unless you have opted out of receiving such information).
- Get feedback from you to develop our products and services and grow our business.
- Comply with any legal or regulatory obligations such as tax or financial laws.
- Undertake research and statistical purposes. The research and statistics we gather do not include your Personal Information and cannot be linked to you.
RETENTION AND RESTRICTION OF RECORDS
We keep your Personal Information for as long as:
- We need it to provide our Platforms, products, or services to you.
- It is required or allowed by law and is in line with our internal retention policies.
- It is necessary to uphold the contract between you and us.
- You have agreed to us keeping your Personal Information, subject to your request for us to stop processing it.
We will retain your Personal Information for as long as necessary to achieve the purpose for which it was collected or subsequently processed. If your Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires but will stop using it for the purpose with a shorter period once that period expires.
By accessing and using the Platform, you consent to us retaining records of your Personal Information for no longer than necessary to achieve the purpose for which it was initially collected or subsequently processed.
USER TRACKING AND COOKIES
When you access and use our Platforms, we may use various technological tools to improve your experience through the use of cookies and/or user tracking.
Cookies are small text files placed on the device you use to access our Platforms. These files do not contain your Personal Information but allow us to associate you with a particular device. Many websites use cookies, and we use cookies to:
- Make our Platforms more user-friendly.
- Personalize your interactions with our Platforms, tailor our services to your interests and needs, and ensure they work on your device.
- Provide advertising relevant to you, limit the number of times you see the same advertisement, and measure the effectiveness of the advertisements based on your online activities, such as the websites and apps you use or content you view.
- Send opt-in marketing communications if you are not a registered user.
We will not use your Personal Information for any other purpose without your permission. By accessing and using the Platform, you consent to our use of cookies.
OPT OUT FROM DIRECT MARKETING
You have the right to request us not to contact you for direct marketing purposes by any form of electronic communication such as email and/or SMS notifications by “opting out” of any direct marketing communications we may send to you.
WHO ELSE GETS TO PROCESS YOUR PERSONAL INFORMATION
We do not sell your personal information to third parties for their marketing or any other purposes. We may provide or make your Personal Information available to:
- Our employees, staff of companies in our group, and/or third-party service providers to assist us in interacting with you via our Platforms for marketing, ordering, or delivery of goods.
- Law enforcement, government officials, fraud detection agencies, or other third parties when the disclosure of Personal Information is necessary or appropriate in connection with an investigation of fraud, intellectual property infringements, or other illegal activities that may expose us to legal liability or financial loss, to report or support the investigation into suspected illegal activity.
- Third parties (such as potential purchasers and their professional advisors) in the event of any reorganization, merger, consolidation, sale, joint venture, or other disposition of any or all of our assets.
- Our service providers (under contract with us) who help with parts of our business operations (fraud prevention, marketing, public relations, technology services, etc.). However, our contracts dictate that these service providers may only use your Personal Information in connection with the services they perform for us and not for their own benefit or any other purpose and must treat such information as confidential.
- Our suppliers to liaise directly with you regarding any goods you have purchased or for any other purpose that may require their involvement.
SENDING YOUR PERSONAL INFORMATION OUTSIDE SOUTH AFRICA
We may transfer certain Personal Information outside the geographic borders of South Africa to service providers for purposes set out above, including for data storage and backup purposes to ensure the integrity of our systems. When we transfer your Personal Information outside of South Africa, we will ensure it is done in accordance with the requirements for lawful transfer outside of South Africa as set out in POPIA. By accessing and using our Platforms, you consent to us transferring your Personal Information outside of South Africa as set out in POPIA.
SECURING YOUR PERSONAL INFORMATION
We secure the integrity and confidentiality of your Personal Information in our possession or under our control by taking appropriate, reasonable technical and organizational measures to prevent loss of, damage to, or unauthorized destruction of Personal Information and unlawful access to or processing of Personal Information.
To implement and maintain such measures, we have in place policies, controls, and related processes, which are reviewed and updated regularly. Our policies, controls, and procedures cover:
- Physical, technical, and network security;
- Access controls and monitoring of access;
- Secure storage, destruction, and encryption of records of Personal Information;
- Personal Information breach reporting and remediation; and
- Imposing security and confidentiality obligations on third parties (based within or outside South Africa) who process Personal Information as part of rendering services.
Should you disclose your Personal Information to any third party other than Tulip Couture, Tulip Couture shall not be liable for any loss or damage arising or suffered by you as a result of the disclosure of such Personal Information to any third party. We do not regulate or control how that third party uses your Personal Information, and you should always ensure that you read the privacy policy of any third party.
KNOW YOUR RIGHTS
Having provided adequate proof of your identity, you have the right to:
- View, correct, and/or amend your Personal Information we process. As a registered user, you can do this through your user account.
- Request a record or description of your Personal Information. Tulip Couture may charge a fee to provide this record. If requests to access and amend your Personal Information are unfounded, excessive, or repetitive, Tulip Couture may charge an additional administrative fee or refuse the request.
- Request to have your Personal Information corrected, destroyed, or deleted. You can stop being a registered user by canceling your account. In this instance, Tulip Couture will retain your Personal Information subject to any legislative requirement and/or our internal retention policy.
- Expect us to comply with your requests upon receipt unless we have a credible reason why we cannot comply.
- Expect us to indicate where, if we cannot agree whether to correct or delete your Personal Information as requested, that a correction or deletion was requested but not made.
- Be informed if reasonably practicable, should we change your Personal Information and this impacts decisions about you.
- Be notified of the action taken by us because of your request.
- Be notified of unauthorized access to your Personal Information.
- Be provided with reasonable evidence of our compliance with our obligations under this policy on reasonable notice and request.
- Submit a complaint to the Information Regulator.
As a registered user, you can exercise all your rights set out above in terms of POPIA by navigating to the profile section of your account on the web, where you will be required to confirm your identity via email verification. As any other user, you can exercise all your rights as set out above by referring to our process set out here.
HOW TO LODGE A COMPLAINT WITH THE INFORMATION REGULATOR
If you have any complaints about this Privacy Policy or our compliance with this Privacy Policy, you can lodge a complaint with the Information Regulator. The contact details of the Information Regulator are available on its website at: https://justice.gov.za/inforeg/
This version of the Privacy Policy replaces any preceding privacy policy provisions on our website. We may occasionally update this Privacy Policy. When you use our Platforms, the version of the Privacy Policy posted on this page applies to you.
