Privacy Policy

1. Commitment to Data Protection (POPIA)

BLANFORD™ ("we", "us", or "our") respects your privacy and is committed to protecting your personal information in compliance with the Protection of Personal Information Act No. 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act No. 25 of 2002 (ECTA).

This Policy explains what personal information we collect, why we collect it, how it is secured, and your legal rights regarding your information.

2. Information We Collect

• Order & Delivery Details: Full name, contact telephone number, email address, physical delivery street address, suburb, city, province, and postal code (or selected Pargo pickup location).
• Sizing & Preferences: Garment size selections, colorway choices, and custom embroidery preferences.
• Social Handles: Instagram, TikTok, or X handles voluntarily supplied for community features or the Community Vault.
• Technical Information: Best-effort pseudonymous client hashes for API rate limiting and security safeguards. We do not store raw IP addresses in permanent databases.

3. Purpose of Processing

We process your personal information strictly for the following operational reasons:

• To manufacture, customize, package, and fulfill your ordered garments.
• To dispatch parcels through registered South African couriers (The Courier Guy, Pargo) and send tracking notifications.
• To communicate essential order status updates via email and WhatsApp.
• To comply with South African tax, accounting, and consumer protection regulations.
• With your explicit opt-in consent, to notify you of future limited-edition Batch drops.

4. Third-Party Service Providers (Operators)

In accordance with Section 20 and 21 of POPIA, we only share data with authorized operators who are bound by written confidentiality agreements:

• Payment Gateway: Stitch Express (Stitch Payments Pty Ltd, South Africa).
• Courier Partners: The Courier Guy / Pargo (name, phone, delivery destination).
• Database Infrastructure: Neon / Vercel (encrypted PostgreSQL with strict parameterised access).
• Transactional Email: Resend (order confirmations and dispatch notes).

5. Data Retention & Security Safeguards

We implement bank-standard physical, technical, and administrative controls: TLS 1.3 encryption in transit, strict Content Security Policies, parameterized database queries, and role-based access. Order records are retained for the statutory period required by South African tax legislation (5 years) and subsequently deleted or anonymized.

6. Your Statutory Rights

Under POPIA, you have the right to:

• Request confirmation of whether we hold personal information about you.
• Request access to or a copy of your personal data record.
• Request the correction, updating, or deletion of inaccurate or obsolete data.
• Object to the processing of your personal information for direct marketing at any time.

7. Information Officer Contact