Privacy Policy
Who We Are
Tileables is a South African brand specialising in magnetic toys. Our website address is www.tileables.co.za.
POPIA Compliance
We comply with the Protection of Personal Information Act (POPIA) of South Africa. As the responsible party for processing your personal information, we are committed to:
- Processing your information lawfully and transparently
- Collecting information for specific, valid purposes
- Ensuring information quality and accuracy
- Maintaining appropriate security safeguards
- Respecting your rights as a data subject
You have the right to object to the processing of your personal information and to lodge a complaint with the Information Regulator if you believe we have violated POPIA requirements.
Personal Data Collection
Orders and Customer Accounts
When you place an order on our website, we collect necessary personal information. This information is essential for processing and fulfilling your orders, communicating order status updates, and providing customer support.
Marketing Communications
If you opt in to our mailing list, we collect your email address and share it with our mailing list provider to send you periodic updates about our products and promotions. You can unsubscribe from these communications at any time using the link provided in each email.
Contact Forms
When you use our contact form, we collect your name, email address, and any message content you provide to respond to your inquiries.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your shopping experience and improve our services:
- Essential cookies for website functionality and processing orders
- Marketing cookies for advertising purposes
- Analytics cookies to understand website usage patterns
Payment Information
When processing payments, we use secure third-party payment processors (Payfast and Yoco). We do not store your payment card details on our servers. All payment transactions are encrypted and processed through our payment partners’ secure systems.
Advertising and Analytics
We use advertising and analytics tools to understand website usage and improve our services. These tools collect anonymous, aggregate information about browsing patterns and website interactions. No personal information is shared with these services.
How long we retain your data
We retain order information and customer accounts for legal and tax purposes. Marketing communication preferences are retained until you unsubscribe. You can request deletion of your personal information at any time, subject to our legal obligations to retain certain transaction records.
Where we send your data
Your personal data is processed within South Africa. We only share your personal information where necessary to provide our services:
- Payment processors (Payfast and Yoco) receive order details to process your payments
- Email service providers receive your email address if you’ve subscribed to marketing communications
We do not share your personal information with advertising or analytics services – they only receive anonymous, aggregate data about website usage.
How we protect your data
We implement appropriate security measures to protect your personal information:
- Secure SSL encryption for all data transmission
- Limited employee access to customer data on a need-to-know basis
- Regular security updates and monitoring
- Secure third-party integrations
Data breach procedures
In the event of a data breach, we will:
- Investigate and contain the breach immediately
- Notify affected customers and relevant authorities as required by law
- Take necessary steps to prevent future breaches
How we protect your data
We implement appropriate security measures to protect your personal information:
- Secure SSL encryption for all data transmission
- Limited employee access to customer data on a need-to-know basis
- Regular security updates and monitoring
- Secure third-party integrations
Our contact information
Changes to this policy
We may update this privacy policy from time to time. Significant changes will be communicated through our website.
Updated 22 January 2025
