Privacy policy

Effective Date: August 31, 2026

At Casa Maria, we are committed to protecting your privacy and ensuring that your personal information is handled safely, transparently, and in accordance with South Africa’s Protection of Personal Information Act (POPIA).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or make a purchase from our online store.

1. Information We Collect

We collect personal information that you voluntarily provide to us, as well as information automatically generated when you browse our site.

• Personal Details: Full name, phone number, email address, and physical/delivery address.

• Order & Billing Details: Items purchased, transaction history, and billing address. (Note: Payment card details are processed directly by our secure payment gateways and are never stored on Casa Maria’s servers.)

• Technical & Usage Data: IP address, browser type, device information, pages viewed, and browsing activity collected via cookies and tracking technologies.

2. How We Use Your Information

We collect and process your personal information strictly for legitimate business purposes, including to:

• Fulfill, ship, and track your orders.

• Process payment transactions securely.

• Communicate with you regarding order updates, customer service inquiries, or store policy changes.

• Prevent fraudulent transactions and enhance website security.

• Comply with legal obligations under South African law.

3. Legal Basis for Processing (POPIA Compliance)

Under POPIA, we process your personal information based on the following grounds:

• Contractual Necessity: To perform our contract with you (processing and delivering your order).

• Legal Obligation: To comply with tax, financial, and regulatory obligations in South Africa.

• Consent: Where you have explicitly opted in to receive promotional marketing or newsletters (you may opt out at any time).

• Legitimate Interest: To maintain, secure, and improve our website and services.

4. Sharing Your Information

We respect your privacy and will never sell or rent your personal data to third parties. We only share necessary information with trusted service providers who help us operate our business:

• Couriers & Logistics Partners: Name, delivery address, and phone number to fulfill and deliver your purchases.

• Payment Gateways: Secure third-party payment processors to verify and process transactions.

• IT & Analytics Services: Website hosting providers, security systems, and analytics partners (such as Google Analytics) to ensure performance and fraud prevention.

All third-party service providers are obligated to protect your information in accordance with POPIA.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to remember your shopping cart items, optimize your browsing experience, and analyze site traffic.

• You can manage or disable cookies directly through your browser settings. However, disabling cookies may limit your access to certain functional features of our website.

6. Data Security & Storage

We implement strict administrative, technical, and physical security measures to protect your personal information from unauthorized access, loss, misuse, or alteration. All transaction data is encrypted using standard Secure Socket Layer (SSL) technology.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting obligations under South African law.

8. Your Rights Under POPIA

As a user in South Africa, you have the right to:

• Access: Request a copy of the personal information we hold about you.

• Correction: Request that we correct or update any inaccurate or incomplete information.

• Deletion: Request that we erase your personal data, subject to operational or legal retention requirements.

• Object: Object to the processing of your personal information for direct marketing purposes.

To exercise any of these rights, please contact our Information Officer at info@casamaria.co.za.

9. Contact Details

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us:

• Business Name: Casa Maria

• Telephone: 087 721 5957

• Email: info@casamaria.co.za

• Physical Address: 1 Desmond Rd, Kramerville, Sandton, 2090, South Africa