Privacy policy

Privacy Policy

Trapsuutjie Linen (Pty) Ltd (Registration Number 2026/463518/07) ("Trapsuutjie", "we", "us", "our")

Last updated: 23 August 2026

1. Introduction

1.1 Trapsuutjie operates this website and online store, including all related content, features, tools, products and services (the "Services").

1.2 This Privacy Policy sets out the manner in which Trapsuutjie collects, processes, discloses and retains personal information in the course of providing the Services, and is issued in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

1.3 Trapsuutjie is the responsible party in respect of the personal information described in this Policy.

1.4 The Services are hosted on the Shopify platform. Shopify processes personal information both as an operator on our behalf and, in respect of certain platform functions, as a responsible party in its own right.

1.5 Where this Policy conflicts with our Terms of Service, this Policy prevails in respect of the collection, processing and disclosure of personal information.

1.6 By accessing or using the Services, the data subject acknowledges having read and understood this Policy.

2. Categories of personal information processed

2.1 Trapsuutjie may collect and process the following categories of personal information, depending on the nature of the data subject's interaction with the Services:

(a) Contact details — name, residential address, billing address, delivery address, telephone number and email address;

(b) Financial information — payment card details, financial account information, transaction records, method of payment and payment confirmations;

(d) Transaction information — items viewed, added to cart, purchased, returned, exchanged or cancelled, and transaction history;

(e) Measurements and fit information — where voluntarily supplied by the data subject in connection with a made-to-order garment or an alteration request;

(f) Correspondence — the content of communications directed to us, including enquiries relating to sizing, orders and returns;

(g) Device information — device type, browser, network connection, IP address and other unique identifiers;

(h) Usage information — records of interaction with and navigation of the Services.

2.2 Trapsuutjie does not knowingly collect special personal information as contemplated in section 26 of POPIA.

3. Sources of personal information

Personal information is collected:

(a) directly from the data subject, including on account creation, order placement and correspondence;

(b) automatically through the Services, including by means of cookies and similar technologies;

(d) from payment processors, couriers and other third parties engaged in the fulfilment of orders.

4. Purpose of processing

4.1 Trapsuutjie processes personal information for the following purposes:

(a) Performance of the contract of sale — including the processing of payment, the manufacture and fulfilment of orders, arrangement of carriage, administration of returns, exchanges and alterations, and the maintenance of customer accounts;

(b) Marketing and communications — the delivery of marketing and promotional communications by electronic mail, where lawfully permitted, and the presentation of advertisements relating to our products;

(c) Security and prevention of fraud — authentication of accounts, provision of a secure payment environment, and the detection, investigation and prevention of unlawful or fraudulent activity;

(d) Customer service — responding to enquiries, providing support and maintaining the customer relationship;

(e) Legal compliance — compliance with applicable law, response to lawful process, and the establishment, exercise or defence of legal claims.

4.2 Direct marketing by electronic communication is undertaken only where the data subject has consented, or where the data subject is an existing customer and the communication relates to similar goods, in accordance with section 69 of POPIA and section 45 of the Electronic Communications and Transactions Act 25 of 2002.

4.3 Every direct marketing communication contains a facility by which the data subject may object to further communications at no cost.

5. Disclosure of personal information

5.1 Trapsuutjie may disclose personal information:

(a) to Shopify and to operators and service providers engaged in the provision of the Services, including payment processing, information technology services, data analytics, cloud storage, manufacture and fulfilment, and carriage;

(b) to marketing partners, who process such information in accordance with their own privacy notices;

(d) in connection with a merger, acquisition, business rescue or insolvency;

(e) where required to comply with applicable law, to respond to lawful process, or to establish, exercise or defend legal claims.

5.2 Trapsuutjie does not sell personal information.

6. Relationship with Shopify

6.1 The Services are hosted by Shopify. Information submitted through the Services is transmitted to and stored by Shopify and may be processed in jurisdictions other than the Republic of South Africa.

6.2 Trapsuutjie makes use of certain enhanced Shopify features which incorporate data derived from the data subject's interactions with this store, with other merchants using the Shopify platform, and with Shopify itself. In respect of such processing, Shopify acts as responsible party and is accountable for responding to requests concerning that processing.

6.3 Further information regarding Shopify's processing of personal information is available in the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and through the Shopify privacy portal at https://privacy.shopify.com/en.

7. Cookies and similar technologies

7.1 The Services make use of cookies and similar technologies for the operation of the store, the retention of preferences, the analysis of usage and the delivery of advertising.

7.2 The data subject may configure their browser to refuse or delete cookies. Certain functions of the Services may not operate correctly where cookies are disabled.

8. Third party websites

The Services may contain links to websites operated by third parties. Trapsuutjie does not control and is not responsible for the privacy practices, security or content of such websites. The inclusion of a link does not constitute endorsement.

9. Children

9.1 The Services are not directed at children. Trapsuutjie does not knowingly collect personal information relating to any person under the age of 18 years.

9.2 Where a competent person becomes aware that a child has supplied personal information to Trapsuutjie, that person may request its deletion using the contact details in clause 14.

10. Security and retention

10.1 Trapsuutjie maintains appropriate, reasonable technical and organisational measures to safeguard personal information against loss, damage, unlawful access and unauthorised destruction, as required by section 19 of POPIA.

10.2 No method of transmission or storage is entirely secure and Trapsuutjie cannot guarantee absolute security. Data subjects are advised not to transmit sensitive information by unsecured means.

10.3 Personal information is retained only for so long as is necessary to fulfil the purpose for which it was collected, or for such longer period as is required or permitted by law, including for the retention of accounting records in terms of the Companies Act 71 of 2008 and applicable tax legislation.

10.4 Where a security compromise occurs, Trapsuutjie shall notify the Information Regulator and affected data subjects in accordance with section 22 of POPIA.

11. Rights of data subjects

11.1 In terms of POPIA, a data subject has the right:

(a) to be notified that personal information is being collected, and of any security compromise;

(b) to request confirmation, free of charge, whether Trapsuutjie holds personal information about them, and to request a record or description of such information;

(c) to request the correction, destruction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;

(d) to object, on reasonable grounds, to the processing of their personal information;

(e) to object to processing for purposes of direct marketing;

(f) not to be subject to a decision based solely on automated processing which results in legal consequences;

(g) to submit a complaint to the Information Regulator;

(h) to institute civil proceedings in respect of an alleged breach of POPIA.

11.2 Requests under clause 11.1 must be submitted in writing to the Information Officer using the contact details in clause 14, on the prescribed form where applicable. Trapsuutjie may require verification of identity before giving effect to a request.

11.3 Trapsuutjie will respond to requests within a reasonable time and within any period prescribed by law.

11.4 Trapsuutjie will not subject a data subject to any detriment for exercising a right under this clause.

12. Transborder transfers

12.1 Personal information may be transferred to, stored in and processed in jurisdictions outside the Republic of South Africa, including by Shopify and by payment processors, carriers and other service providers.

12.2 Such transfers are effected in accordance with section 72 of POPIA, on the basis that the recipient is subject to a law, binding corporate rules or a binding agreement providing an adequate level of protection, or with the consent of the data subject, or where the transfer is necessary for the performance of a contract with the data subject.

12.3 Where personal information is transferred from the European Economic Area or the United Kingdom, Trapsuutjie relies on recognised transfer mechanisms, including the European Commission's Standard Contractual Clauses or equivalent instruments issued by the competent United Kingdom authority, save where the transfer is to a jurisdiction determined to afford an adequate level of protection.

13. Amendment

Trapsuutjie may amend this Policy from time to time to reflect changes in practice or for operational, legal or regulatory reasons. The amended Policy will be published on this website and the "Last updated" date revised. Continued use of the Services following publication constitutes acceptance of the amended Policy.

14. Contact and Information Officer

Enquiries, requests and complaints relating to this Policy or to the processing of personal information may be directed to:

Information Officer
Trapsuutjie Linen (Pty) Ltd
Registration Number 2026/463518/07
steven.trapsuutjie.linen@gmail.com

A telephone number is available on request.

A data subject may also lodge a complaint with the Information Regulator (South Africa):
Email: complaints.IR@justice.gov.za
Website: https://inforegulator.org.za