Woven Bliss Privacy Policy

Last updated: 24 November 2025

1. Who We Are

This Privacy Policy describes how Woven Bliss (“Woven Bliss”, “we”, “us” or “our”) collects, uses, shares and protects your personal information when you visit our website, interact with us, or purchase our products and services.

For the purposes of the Protection of Personal Information Act, 2013 (POPIA), we are the “responsible party” in respect of your personal information.

2. Scope of This Policy

This Privacy Policy applies when you:

browse or use our website;
create an account or place an order with us;
contact us via email, phone, WhatsApp, social media or website forms; or
subscribe to our newsletters or marketing communications.

By using our website or providing your personal information, you acknowledge that you have read and understood this Privacy Policy.

3. Personal Information We Collect

We may collect and process the following categories of personal information:

3.1 Identity and Contact Information

Name and surname
Email address
Phone number
Billing and delivery address

3.2 Account and Transactional Information

Account login details (such as username and, in encrypted form, password)
Order history and details of products and services you have purchased
Payment-related information (processed via secure third-party payment providers – we do not store your full card details)

3.3 Technical Information

IP address
Browser type and version
Time zone setting and location (approximate)
Browser plug-in types and versions
Operating system and platform
Device identifiers and similar technical data

3.4 Usage Information

Pages you view and links you click
Time spent on pages and navigation paths
Products and categories you browse
Referring website or campaign links

3.5 Marketing and Communications Information

Your preferences in receiving marketing from us
Your communication preferences and engagement with our emails or ads (e.g. opens, clicks)

3.6 Communications and Support Information

Messages you send to us via email, contact forms, WhatsApp, social media or other channels
Records of customer service queries, feedback, complaints and responses

3.7 Social Media and Third-Party Data

Information you make publicly available on social media platforms when you interact with our accounts
Limited information we receive from third-party tools such as Google Analytics, Facebook/Meta Pixel, or email marketing platforms, as permitted by their terms and your settings

We do not intentionally collect special categories of personal information (such as health, religious beliefs or political opinions) and we do not knowingly collect information from children under 18.

4. How We Collect Your Personal Information

We collect personal information in the following ways:

Directly from you when you:
- create an account or place an order;
- fill in forms on our website;
- sign up for our newsletters;
- contact us via email, WhatsApp, social media or by phone.
Automatically, through cookies and similar technologies, when you:
- browse or interact with our website;
- open our marketing emails (e.g. tracking of opens, clicks and unsubscribes).
From third parties, such as:
- analytics, advertising and social media partners (for example Google Analytics and Facebook/Meta);
- payment service providers (for example PayFast) and delivery partners;
- email marketing platforms (for example Mailchimp), where you have subscribed to our mailers.

5. How We Use Your Personal Information

We use your personal information for the following purposes:

5.1 To Provide Our Products and Services

Processing and fulfilling your orders
Managing payments, fees and charges
Delivering products to you and communicating delivery updates
Providing customer support and responding to your queries

5.2 To Operate and Improve Our Website

Administering and protecting our website (troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting)
Understanding how visitors use our website to improve design, user experience and product offerings

5.3 To Communicate With You

Sending order confirmations, invoices and other transactional emails
Responding to enquiries and support requests
Notifying you about changes to our terms, policies or services

5.4 For Marketing and Promotions

Sending you newsletters, product updates, special offers and promotions where permitted by law or with your consent
Customising marketing messages and adverts based on your interests and browsing behaviour (including via third-party platforms such as Meta/Facebook and Google, where applicable)

5.5 To Comply With Legal and Regulatory Obligations

Meeting our tax, accounting and record-keeping obligations
Responding to lawful requests from authorities
Exercising or defending legal claims

5.6 For Security and Fraud Prevention

Protecting our website, systems and customers from fraud, abuse and unauthorised access
Monitoring, detecting and investigating suspicious or harmful activity

6. Legal Grounds for Processing (POPIA)

We process your personal information on one or more of the following legal grounds under POPIA:

Performance of a contract – where processing is necessary to enter into or perform a contract with you (for example, to process and deliver your order).
Compliance with legal obligations – where we must comply with laws and regulations (for example, maintaining tax and financial records).
Legitimate interests – where processing is necessary for our legitimate business interests, and your interests and fundamental rights do not override those interests (for example, improving our website, preventing fraud, securing our systems, or conducting limited direct marketing to existing customers).
Consent – where you have given us your consent (for example, to receive newsletters or certain forms of marketing). You may withdraw your consent at any time.

7. Sharing Your Personal Information

We do not sell your personal information. We may share it with:

7.1 Service Providers and Operators

Trusted third parties who process personal information on our behalf, in line with our instructions and appropriate safeguards, including:

Website hosting, security and CDN providers
Payment processors (e.g. PayFast)
Courier and logistics providers
Analytics and performance monitoring tools (e.g. Google Analytics)
Marketing and email platforms (e.g. Mailchimp)
IT support and maintenance providers

7.2 Business and Corporate Transactions

If we undergo a merger, acquisition, restructuring or sale of all or part of our business or assets, your personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

7.3 Legal Obligations and Protection of Rights

We may disclose your personal information to third parties where required by law, court order, or regulatory requirements, or where we reasonably believe that disclosure is necessary to:

protect our rights, property or safety;
protect the rights, property or safety of our customers or others; or
detect, prevent or otherwise address fraud, security or technical issues.

8. Cross-Border Transfers

Some of our service providers and partners may be located outside South Africa. Where we transfer your personal information to a country that does not offer the same level of data protection as POPIA, we will take reasonable steps to ensure that the recipient is subject to laws, binding corporate rules or binding agreements which provide an adequate level of protection for your personal information, as required by POPIA.

9. Direct Marketing and Your Choices

We may use your personal information to send you marketing communications about our products, services, promotions and news, by email or other channels:

We will only send you marketing where permitted by law (for example, where you are an existing customer or where you have given us consent).
You can opt out of marketing at any time by:
- clicking the “unsubscribe” link in our marketing emails; or
- contacting us at [email protected].

If you opt out of marketing, we may still send you non-marketing communications that are necessary for our relationship with you (such as order confirmations, delivery updates or important service notices).

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

enable core website functions (for example, keeping items in your cart and allowing you to stay logged in);
remember your preferences and improve your browsing experience;
analyse website traffic and usage (for example via Google Analytics);
support marketing and advertising activities, including retargeting on third-party platforms where applicable.

You can set your browser to refuse some or all cookies or to alert you when cookies are used. If you disable or refuse cookies, some parts of our website may not function properly.

Where required by law, we will request your consent before placing non-essential cookies (such as analytics and marketing cookies).

11. Data Security

We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures include, for example:

access controls and restricted access to personal information;
secure server environments and backups;
encryption where appropriate; and
regular monitoring of our systems for vulnerabilities and security issues.

While we take reasonable steps to safeguard your personal information, no system is completely secure. You are responsible for keeping your account login details and passwords confidential.

12. Data Retention

We will retain your personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected and to comply with applicable legal, accounting or reporting requirements.

By way of example:

We generally retain order and invoice records for at least the period required by tax and financial laws.
We retain marketing information until you withdraw your consent or object to receiving marketing, after which your details will be suppressed in our marketing lists.

When we no longer need your personal information for the purposes for which it was collected, we will take reasonable steps to delete, destroy or de-identify it.

13. Your Rights Under POPIA

Under POPIA, you have the right to:

Access – request confirmation of whether we hold personal information about you and request access to that information.
Correction – request that we correct or update personal information that is inaccurate, incomplete, or outdated.
Deletion – request deletion or destruction of your personal information in certain circumstances, subject to legal and contractual restrictions.
Objection – object to the processing of your personal information where we rely on legitimate interests (including for direct marketing).
Data Portability (where applicable) – request that we provide your personal information in a structured, commonly used and machine-readable format to you or another responsible party.
Withdrawal of consent – where processing is based on consent, you may withdraw your consent at any time.

How to exercise your rights

To exercise any of your rights, please contact us using the details in section 17 below. We may need to request specific information from you to help us verify your identity and ensure your right to access your personal information (or to exercise any of your other rights).

Nothing in this Privacy Policy limits your rights under POPIA.

14. Third-Party Websites

Our website may contain links to third-party websites, plug-ins or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policies of every website you visit.

15. Children’s Privacy

Our website and services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe that a child under 18 has provided us with personal information, please contact us so that we can take appropriate steps to delete such information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors. When we do so, we will post the updated policy on our website with a revised “Last updated” date.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal information.

17. Contact Us

If you have any questions, requests or concerns regarding this Privacy Policy or our data protection practices, please contact us at:

Woven Bliss
Email: [email protected]

If you are not satisfied with our response, you may have the right to lodge a complaint with the Information Regulator (South Africa). Details are available on the Information Regulator’s official website.