Privacy
policy
What we collect, why we collect it, and what you can tell us to do with it. Written to comply with South Africa’s POPI Act.
What we collect
We only collect what we need to run the shop:
| Information | When we get it |
|---|---|
| Name, email address, phone number | When you order, create an account or contact us |
| Delivery and billing address | When you place an order |
| Order history | When you buy from us |
| Website usage data (pages viewed, device, approximate location) | Automatically, via cookies |
We never see your card details. Card payments are handled entirely by Yoco on their own secure systems. Your card number never reaches our website or our servers.
Why we use it
- To process, pack and deliver your order
- To send you order confirmations and delivery updates
- To answer your questions and handle returns
- To send you marketing emails — only if you’ve opted in, and you can unsubscribe from any email
- To keep the website working properly and improve it
- To meet our legal and tax obligations
Who we share it with
We don’t sell your information to anyone. We share it only with the businesses that help us run the shop:
- Yoco — to process card payments securely
- Our courier — your name, address and phone number, so they can deliver your parcel
- Our website host and email provider — to store and send data on our behalf
- SARS or law enforcement — where we’re legally required to
Cookies
Cookies are small files a website stores on your device. We use them to:
- Keep the items in your cart while you shop (essential — the shop won’t work without these)
- Remember you if you’re logged in
- Understand which pages people visit, so we can improve the site
You can block or delete cookies in your browser settings, but the cart and checkout may stop working if you block the essential ones.
How long we keep it
Order and invoice records are kept for five years, as South African tax law requires. Marketing contact details are kept until you unsubscribe. Anything we no longer need, we delete.
Keeping it safe
Our site runs over an encrypted HTTPS connection, access to customer data is limited to the people who need it, and payment data never touches our systems. No system is perfectly secure, but we take reasonable steps to protect what you give us — and if a breach ever affects your data, we’ll notify you and the Information Regulator as the POPI Act requires.
Your rights
Under the Protection of Personal Information Act, 2013 you may:
- Ask what personal information we hold about you
- Ask us to correct anything that’s wrong
- Ask us to delete your information, where we’re not legally required to keep it
- Object to us using your information for marketing
- Complain to the Information Regulator of South Africa
Email us and we’ll respond within 30 days. There’s no charge.
Contact us
Puzzle Pieces
Email: hello@puzzlepieces.co.za
Website: www.puzzlepieces.co.za
Information Regulator (South Africa): inforegulator.org.za
Last updated 3 August 2026.