Privacy
Die Hekelpennetjie – Handmade with love, care and attention to detail.
Last updated: 24 October 2026
Die Hekelpennetjie respects the privacy of all customers and handles personal information with care. This policy explains what personal information we collect, why we use it, who we share it with, how long we keep it and what rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who is responsible for your information
The responsible party is the seller, a sole trader trading as Die Hekelpennetjie:
- Seller: Christi Tredoux, trading as Die Hekelpennetjie (sole trader)
- Physical address: Plaas Nuwejaarskraal, Prieska 8940, Northern Cape, South Africa
- Phone and WhatsApp: +27 79 081 9910
- Email: christistorm99@gmail.com
- Website: https://diehekelpennetjie.co.za
2. Information officer
The owner, Christi Tredoux, is also the information officer. Contact her at christistorm99@gmail.com or +27 79 081 9910 with any question or request about your personal information.
3. What information we collect
- When you order: your first name and surname, email address, mobile number, delivery address or chosen PUDO parcel locker, the products and options you order, the amount, the language you shopped in, and the payment status we receive from PayFast. We do not receive your full card details.
- When you contact us: your name, contact details and the content of your message, by email, phone or WhatsApp.
- When you subscribe to the newsletter: your email address and the date and time you gave consent.
- When you visit the website: our host (Cloudflare) automatically processes technical information, such as your IP address, browser type and the pages requested, to deliver and secure the website.
We do not collect special personal information (such as information about health or religion).
4. What we use your information for
| Purpose | Lawful basis (POPIA section 11) |
|---|---|
| To process, make and deliver your order | Necessary to perform our agreement with you |
| To confirm payments and make refunds | Necessary to perform our agreement with you |
| To send order confirmations, updates and production photos | Necessary to perform our agreement with you |
| To answer your questions | Necessary to perform our agreement, or our legitimate interest in responding to enquiries |
| To keep tax and accounting records | Legal obligation |
| To send the newsletter | Your consent (see section 5) |
| To keep the website secure and working | Our legitimate interest |
We do not use your information for any other purpose, and we do not sell it.
5. Newsletter and direct marketing
- We only send you marketing emails (such as a newsletter) if you have subscribed. At checkout and on the website there is a newsletter box that is not ticked in advance. You do not need to subscribe to place an order.
- Every newsletter contains a link you can use to unsubscribe easily. You can also ask us at any time to remove you from the list.
- Order confirmations and other messages about your order are not marketing, and are sent whether or not you have subscribed.
- We handle direct marketing in accordance with section 69 of POPIA. If we later use an external service to send the newsletter, we will update this policy.
6. Who we share your information with
Customers’ personal information is not shared unnecessarily with other people. We only share the information that is needed with the following service providers (operators), who process it on our behalf:
- PayFast – to process your payment. PayFast handles the payment details you enter on its payment page under its own privacy policy.
- Cloudflare, Inc. – website hosting, database and media storage, and sending order emails.
- PUDO and its courier service – your name, mobile number, email address and delivery address or parcel locker, to deliver your parcel.
- Our web developer – who builds and maintains the website, and has access to the system for technical support only.
If you contact us by email or WhatsApp, your message is also processed by those services (Google Gmail and WhatsApp) under their own privacy policies. We may also disclose information where the law requires it. Our operators may only use your information for the purpose for which we provide it, and must keep it secure.
7. Transfer of information outside South Africa
Cloudflare’s servers are located around the world, so your information may be processed or stored outside South Africa. We only allow this where the recipient is bound by law, binding corporate rules or an agreement that provides a level of protection substantially similar to POPIA, or where the transfer is necessary to perform our agreement with you (section 72 of POPIA).
8. Payment security
Payments are made on PayFast’s secure payment page. Die Hekelpennetjie never sees or stores your full card details.
9. Cookies
Our website only uses cookies and similar local storage that are strictly necessary for the website to work, for example to remember the contents of your cart and to protect the website against abuse (Cloudflare may set a security cookie for this). We do not use advertising or tracking cookies or website analytics. If this changes, we will update this policy and ask for your consent where required.
10. How long we keep your information
- Order and payment records: as long as the law requires, usually 5 years for tax and accounting records.
- Newsletter list: until you unsubscribe. After that we only keep a record that you unsubscribed, so we do not accidentally email you again.
- Enquiries: as long as needed to deal with your question, unless they form part of an order record.
- Technical logs: for a short period, according to our host’s standard settings.
After that, we delete the information or make it anonymous.
11. How we protect your information
We take reasonable technical and organisational measures to protect your information, such as a secure (HTTPS) connection, a password-protected admin system that only the owner and the web developer can access, and payments that stay with PayFast. If we have reason to believe that your personal information has been accessed by an unauthorised person, we will notify you and the Information Regulator as soon as reasonably possible.
12. Your rights
Under POPIA you have the right to:
- ask whether we hold personal information about you, and get a copy of it;
- ask us to correct inaccurate, incomplete or out-of-date information;
- ask us to delete your information if we are no longer allowed or required to keep it;
- object to the processing of your information, and withdraw your consent for the newsletter at any time;
- lodge a complaint with the Information Regulator (see section 14).
Send your request to the information officer (section 2). We may ask you to confirm your identity, and we will respond within a reasonable time. Please note: we cannot delete order records that we are legally required to keep before the end of the retention period.
13. Children
Our products are for babies and children, but the website is intended for adults buying on their behalf. We do not knowingly collect personal information from children.
14. Complaints to the Information Regulator
Please contact us first so that we can try to help. You do, however, have the right to lodge a complaint with the Information Regulator:
- Website: inforegulator.org.za
- Complaints (POPIA Form 5): POPIAComplaints@inforegulator.org.za
- General enquiries: enquiries@inforegulator.org.za
- Phone: 010 023 5200 or toll-free 0800 017 160
- Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
15. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last updated.
16. Contact details
- Seller: Christi Tredoux, trading as Die Hekelpennetjie (sole trader)
- Physical address: Plaas Nuwejaarskraal, Prieska 8940, Northern Cape, South Africa
- Phone and WhatsApp: +27 79 081 9910
- Email: christistorm99@gmail.com
- Website: https://diehekelpennetjie.co.za
Die Hekelpennetjie – handmade with love, care and attention to detail.