01Who we are
KAYSO, of 18 Example Lane, Studio 4, Cape Town, 8001, South Africa, is the responsible party for the personal information described in this policy. We process personal information in line with the Protection of Personal Information Act 4 of 2013 (“POPIA”).
Our Information Officer can be reached at hello@kayso.co or +27 (0)21 555 0142.
02What we collect
Information you give us
- Name, email address, phone or WhatsApp number
- Delivery and billing address
- Order details, product preferences and messages you send us
- Proof of payment for EFT orders
Information collected automatically
- Device and browser type, IP address and approximate location
- Pages viewed and how you arrived at our website
- Cookie data, as set out in our Cookie Policy
We do not collect or store your full card details. Card payments are handled by our payment provider.
03How and why we use it
We only process personal information for a lawful purpose, namely to:
- process, deliver and support your order (performance of a contract),
- reply to questions and warranty claims (performance of a contract),
- keep accounting and tax records (legal obligation),
- prevent fraud and secure our website (legitimate interest),
- improve our website and products using aggregated data (legitimate interest), and
- send you news and offers, only if you have opted in (consent).
04Direct marketing
In line with section 69 of POPIA, we only send marketing messages if you have opted in, or if you are an existing customer and the message is about similar products. Every message includes a simple way to opt out, and you can also email us at any time to unsubscribe.
06Cross-border transfers
Some of our service providers store data outside South Africa. Where this happens, we make sure the recipient is subject to laws, binding rules or an agreement that offers protection substantially similar to POPIA, as required by section 72.
07Security and retention
We use reasonable technical and organisational measures to protect your information, including encrypted connections, access controls and regular reviews. If we become aware of a security compromise affecting your information, we will notify you and the Information Regulator as required by section 22 of POPIA.
We keep order and invoice records for 5 years to meet tax law. Other information is kept only as long as needed for the purpose it was collected for, then deleted or anonymised.
08Your rights
Under POPIA you have the right to:
- ask whether we hold your personal information and request a copy,
- ask us to correct or delete inaccurate or outdated information,
- object to processing based on legitimate interest,
- withdraw consent and opt out of direct marketing at any time, and
- lodge a complaint with the Information Regulator.
To exercise any of these rights, email hello@kayso.co. We will respond within 30 days.
09Information Regulator
If you are not satisfied with how we handle your information, you may complain to the Information Regulator (South Africa) at inforegulator.org.za or by email to POPIAComplaints@inforegulator.org.za.
10Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top.