PRIVACY POLICY

Arcan Kaleidoscope
arcankaleidoscope@gmail.com
Last updated: 14/01/2026

Arcan Kaleidoscope (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This policy explains what information we collect, how we use it, who we share it with, and your rights in terms of POPIA (Protection of Personal Information Act of South Africa), as well as relevant international data-protection standards.
By using this website, you agree to the terms of this Privacy Policy.

1. Information We Collect
Information you provide
We collect information directly from you when you place an order, contact us, or enter custom order details. This may include:
- Your name
- Email address
- Phone number
- Shipping and billing address
- Order details
- Custom order information (such as ring sizes, engraving instructions or reference images you choose to send us)
- Information required for returns, exchanges, or repairs

Information collected automatically
When you browse our website, basic technical data may be collected automatically, such as:
- IP address
- Browser type
- Pages viewed
- Time spent on the site
- Basic cookies used for site functionality
At this time we do not use advanced analytics tools, marketing pixels, or tracking software. If this changes, this policy will be updated before such tools are activated.

2. Legal Basis for Processing (GDPR-aligned)
For customers located in the European Union or United Kingdom, we process personal information under one or more of the following legal bases:
- Contractual necessity: To process and deliver your order.
- Consent: When you subscribe to newsletters or marketing.
- Legitimate interest: For fraud prevention, security, and basic website functioning.
- Legal obligation: To comply with tax, customs, or record-keeping requirements.
This section does not change how we operate but ensures compliance with international standards.

3. Payment Information
Payments are processed securely through PayFast. We do not collect, store, or access your credit card details. All payment data is handled by PayFast according to industry-standard security protocols. For further details on how PayFast manages personal data, please refer to their privacy statement.

4. Delivery Information
To fulfil orders, we provide necessary delivery details to our shipping partner, The Courier Guy. They receive only the information required to deliver your order, which includes:
- Name
- Delivery address
- Contact number
- Tracking details
This information is used solely for order delivery and related communication.

5. How Your Information Is Used
We use personal information for the following purposes:
- Processing and delivering orders
- Communicating with you regarding orders, returns, or repairs
- Responding to customer enquiries
- Preparing customs documentation for international shipments
- Improving our customer service and site experience
- Fulfilling legal or tax record-keeping requirements
- Sending marketing communication, but only if you have given explicit permission
We do not sell, lease, trade, or otherwise monetise personal information under any circumstances.

6. Marketing and Newsletters
You will only receive marketing emails if you actively subscribe or give consent.
You may unsubscribe at any time using the link in any email or by contacting us directly.
If we begin using an email marketing platform (such as Mailchimp or Klaviyo), this policy will be updated to explain how subscriber data is stored and managed.

7. Sharing of Information
Your personal information may be shared with:
- PayFast (payment processing)
- The Courier Guy (order delivery)
- Email service providers (order confirmation emails)
- Law enforcement or regulatory bodies if required by law
We do not share information with advertisers or unrelated third-party services.

8. Data Storage and Security
We take reasonable organisational and technical measures to protect your personal information against loss, unauthorised access, misuse, or disclosure. Data is stored on secure, password-protected systems and accessed only when required to fulfil orders or provide support.
No security system is entirely foolproof, but we follow industry-standard measures to reduce risk.

9. International Shipping and Data Transfer
If you place an order for delivery outside South Africa, we may need to provide certain information to international shipping partners and customs authorities. Only the minimum required information (name, address and parcel details) is shared.

10. Data Retention
Personal information is retained only for as long as required to:
- Process and deliver your order
- Comply with legal and tax obligations
- Maintain order and warranty records
- Respond to customer support enquiries
Once no longer needed, information is securely deleted or anonymised where appropriate.

11. Cookies and Consent
Our website uses essential cookies required for:
- Security
- Checkout functionality
- Basic site operations

If non-essential cookies (such as analytics, advertising pixels, or tracking tools) are introduced in the future, we will:
- Update this Privacy Policy
- Display a cookie-consent banner
- Allow users to accept or decline non-essential cookies
You will always have the right to withdraw or change cookie preferences.

12. Your Rights Under POPIA
Under POPIA, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or outdated information
- Request deletion of your information (where legally permitted)
- Withdraw consent for marketing
- Object to the processing of your data in certain circumstances
To exercise any of these rights, contact us using the details provided below.

13. Children’s Privacy
This website is not intended for individuals under the age of 18. We do not knowingly collect information from minors.

14. Changes to This Privacy Policy
We may update or amend this Privacy Policy from time to time to reflect legal requirements, changes in our services, or improvements in how we handle personal information. Any updated version will be posted on this page with a revised date.

15. Contact Information
If you have questions about this policy, or wish to make a data-related request, you may contact us at:
Arcan Kaleidoscope
arcankaleidoscope@gmail.com
Johannesburg, South Africa