Privacy Policy
This Privacy Policy explains how Yehuda Solutions (trading as Yehuda Store) collects, uses, and shares personal information when you use the Store. We process information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who is responsible
The responsible party is Yehuda Solutions, trading as Yehuda Store, operating from Gauteng, South Africa.
Information Officer contact: tshiamom@yehudasolutions.com.
2. Personal information we collect
Depending on how you use the Store, we may process:
- Identity and contact: name, email address, phone number, billing and shipping address.
- Account: login email, password (stored as a hash, not in plain text), order history, newsletter preference.
- Orders: products, quantities, amounts, payment status, delivery notes. We do not store full card numbers.
- Support: messages you send to store@yehudasolutions.com, orders@shop.yehudasolutions.com, or returns@shop.yehudasolutions.com, or via WhatsApp if you use it.
- Marketing: newsletter email address and confirmation status (we use double opt-in).
- Shopping behaviour on our site: cart contents, including snapshots used to remind you about an unfinished checkout if we have your email.
- Site analytics (optional): if you accept analytics, a random visitor id (not your name), pages and products you view, searches, cart and checkout steps, and campaign tags from the link you followed. We do not store your IP address for this.
- Reviews and alerts: review text and the email used for back-in-stock notices.
- Technical: IP address, browser type, device, and cookies or similar storage needed for sessions, login, and checkout.
3. How we collect it
- Directly from you — account, checkout, newsletter, reviews, support.
- Automatically — cookies and server logs when you browse, add to cart, or check out.
- From service providers — payment confirmation from PayFast; delivery scans from couriers.
4. Why we use it (and on what basis)
| Purpose | POPIA / contractual basis |
|---|---|
| Create and manage your account, take orders, deliver goods, handle returns, send order emails | To perform our contract with you, and as required to run the sale |
| Take payment and prevent fraud | Contract, and our legitimate interest in protecting the Store and customers |
| Tax, accounting, and consumer-law records | Legal obligation |
| Abandoned-cart reminders and service messages about an order you started | Legitimate interest in completing a purchase you began, in a way that is reasonable and not excessive |
| Newsletter and marketing emails | Consent (double opt-in). You can unsubscribe at any time |
| Product reviews and stock alerts you request | Consent and/or steps you ask us to take |
| Keep the website secure and working (login, cart, checkout) | Legitimate interest in operating a secure store |
| First-party analytics so we can see where shoppers drop off | Consent. Nothing is stored until you accept. You can decline or withdraw at any time |
| Meta, TikTok, and Google advertising measurement | Consent (marketing cookies). These run only after you accept marketing |
We do not sell personal information.
5. Who we share it with
We share information only as needed to run the Store:
- PayFast — to process card and Instant EFT payments. PayFast is the payment operator and has its own privacy notice.
- Courier partners — name, phone, and delivery address so they can deliver your order.
- Email delivery provider — to send account, order, newsletter, and support mail.
- Hosting and security providers — to host the website and protect it.
- Meta Platforms (Facebook / Instagram) — advertising measurement via the Meta Pixel, only if you accept marketing cookies. Meta processes this information under its own terms and may process it outside South Africa.
- TikTok — advertising measurement via the TikTok Pixel and Events API, only if you accept marketing cookies. TikTok processes this information under its own terms and may process it outside South Africa.
- Professional advisers or authorities — where the law requires it, or to protect our legal rights.
These parties act as operators (processors) or, in PayFast’s case for payment data, as a responsible party for the information they collect to complete the payment. We require operators to use the information only for the agreed purpose.
6. Cookies and similar technologies
Some cookies are required for the Store to work. These are not optional:
- session and cart cookies so items stay in your basket;
- account login and security cookies;
- checkout cookies so we can complete your order.
If you choose Accept analytics, we set a first-party cookie with a random id and measure visits, product views, searches, add-to-cart, checkout starts, and orders, including campaign tags (for example Instagram or a reel) on the link you opened. We keep this detail for up to 13 months and then delete it. We do not store your IP address for analytics, and we do not use it to identify you. We link an email address only when you have already typed it at checkout or in a cart reminder. You can decline, and you can change your mind from Cookie & privacy settings in the footer.
If you also allow marketing cookies, we load the Meta Pixel (Facebook / Instagram), the TikTok Pixel, and Google Ads / Google for WooCommerce measurement tags where connected. They measure visits, product views, add-to-cart, checkout starts, and purchases, and they help us show ads. The Google Customer Reviews floating widget also loads only after marketing consent. If you decline, those tags do not run. A Global Privacy Control or Do Not Track signal is treated as a decline until you choose otherwise.
7. Marketing
We only send marketing newsletters after you confirm your email (double opt-in). Every newsletter includes an unsubscribe link. Transactional messages — order confirmation, shipping, password reset, return updates — are not marketing and are sent because they are part of the service.
8. How long we keep information
- Orders, invoices, and tax records: for as long as South African tax and company law require (generally at least five years).
- Accounts: while the account is open, and for a reasonable period afterwards if needed for records or disputes.
- Newsletter: until you unsubscribe or we delete inactive lists.
- Abandoned carts: for a limited period so we can send a reminder, then they are removed or anonymised.
- Analytics events: up to 13 months, then deleted. Combined daily totals may be kept after that without a visitor id.
- Consent choices: the choice and time, without your IP address, so we can show what was agreed.
- Support mail: for as long as needed to resolve the query and keep a record of what was agreed.
9. Security
We use HTTPS, hashed passwords, role-limited staff access, and a PCI-oriented payment flow through PayFast so that card details are not stored on our servers. No online store can guarantee absolute security; please use a strong unique password.
10. Cross-border processing
Some operators (for example email or hosting) may process information outside South Africa. Where that happens we take reasonable steps so the information remains protected, as POPIA requires.
11. Children
The Store is intended for adults. We do not knowingly collect personal information from children. If you believe we have, email us and we will delete it where we are not legally required to keep it.
12. Your rights
Subject to POPIA and other law, you may:
- ask whether we hold personal information about you, and request a copy;
- ask us to correct or update inaccurate information;
- object to processing that is based on legitimate interests, including some marketing;
- withdraw consent for the newsletter (unsubscribe);
- ask us to delete information we no longer need — we may keep what the law requires, such as invoices.
To use these rights, email tshiamom@yehudasolutions.com. We may need to verify that the request comes from you.
You may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.
13. Changes
We may update this policy. The effective date at the top shows the current version. Material changes will be published on this page.
14. Related documents
How we sell and deliver goods is described in the Platform Terms. Returns are described in the Returns Policy.
15. Contact
Privacy questions: tshiamom@yehudasolutions.com.
Order queries: orders@shop.yehudasolutions.com. Returns queries: returns@shop.yehudasolutions.com.