Privacy Policy

Your privacy matters to us. This policy explains how All Things Us collects, uses and protects your personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

Last updated: 20 October 2026

Who we are

All Things Us is the responsible party for the personal information described here. Contact us at info@allthingsus.co.za.

Information we collect

• Account details: name, email address, phone number and password (stored securely, never in plain text).
• Order details: delivery address, items ordered, order history, returns and enquiries.
• Payment status: card and Instant EFT payments are processed by PayFast on their own secure pages. We never see or store your card or bank login details.
• Rewards activity: petals, badges, vouchers and visit streaks.
• Technical information: cookies and basic device information needed to run the site securely.
• Sign-in with Google or Facebook: the name and email address those services share with us.

Why we use it

• To process and deliver your orders and handle returns and refunds.
• To manage your account, rewards and vouchers.
• To answer your questions and provide support.
• To keep the website secure and prevent fraud.
• To send you deals and news, but only if you choose to receive them (you can opt out at any time).
• To meet our legal and tax obligations.

Who we share it with

Only with people who need it to serve you: our payment provider (PayFast), our courier (The Courier Guy), our email and hosting providers, and authorities where the law requires. We do not sell your personal information.

Cookies

We use essential cookies to keep you signed in, remember your cart and keep the site secure. Other cookies are only used with your permission, and you can change your choice at any time using Cookie settings in the footer.

How long we keep it

We keep information only as long as needed for the purposes above or as the law requires (for example, tax records for five years).

Security

We use encryption (HTTPS), access controls and secure payment providers, and we take reasonable steps to protect your information. No system is completely secure, and we will notify you and the Information Regulator if a breach affects your information, as the law requires.

Your rights

You may ask to access, correct or delete your personal information, object to its processing, or withdraw your consent, by emailing info@allthingsus.co.za. You may also complain to the Information Regulator at inforegulator.org.za.

Children

Our website is not intended for children under 18, and we do not knowingly collect their information.

Changes

We may update this policy from time to time. The version on this page is the current one.