Privacy policy

1. Who we are

TSHIIMOO is a brand of Sunrae Lifestyle Group (Pty) Ltd, ("TSHIIMOO", "we", "us", "our"). We sell early learning workbooks, play kits and kitchenware for families through tshiimoo.co.za, our customer account pages and in person.

We are committed to protecting your personal information and meeting the data protection obligations under the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains what we collect, why, who we share it with, and the rights you have.

By using our website or buying from us, you acknowledge that you have read this policy. If our Terms of Service and this policy conflict on how personal information is handled, this policy applies.

2. Information we collect

We only collect what we need to sell to you, deliver your order and look after you as a customer.

Type	Examples
Contact details	Name, email address, phone number, delivery and billing address
Order information	Products you buy, return or cancel, order notes, delivery preferences
Account information	Login email, saved addresses, order history, preferences
Payment details	Payment method and confirmation. Card and bank details are entered directly with our payment providers; we never see or store your full card number
Communications	Messages you send us by email, WhatsApp, social media or our contact form
Device and usage information	IP address, browser, device type, pages viewed and how you use our website, collected through cookies and similar technologies

Where it comes from: directly from you when you shop, create an account or contact us; automatically from your device when you use our website; and from service providers who process it for us, such as our payment and delivery partners.

3. Why we use your information

We use your personal information to:

• process, pay for and deliver your order, including local deliveries and courier bookings
• manage your customer account and send order, delivery and account notifications
• handle returns, refunds and customer queries
• keep our website, payments and accounts secure and prevent fraud
• improve our website, products and service
• send you marketing, but only if you have agreed to it (see section 4)
• meet our legal, tax and accounting obligations

Is providing it compulsory? Your name, contact details, delivery address and payment confirmation are needed to complete an order. If you don't provide them, we can't process or deliver it. Everything else, such as creating an account or joining our mailing list, is your choice.

4. Marketing

We only send you marketing, such as play ideas, new releases and offers, if you have opted in, for example by ticking the box at checkout or signing up to our mailing list.

You can unsubscribe at any time using the link in any of our emails, or by emailing hello@tshiimoo.co.za. We'll still send you messages about orders you've placed, as these aren't marketing.

We may use cookies and similar technologies to show you relevant ads on other websites and social media. You can manage this through the cookie settings on our website and your browser.

5. Who we share it with

We never sell or rent your personal information. We share it only with the service providers we need to run our business, and only what they need to do their job.

Service provider	What they do for us
Shopify	Hosts our online store, checkout and customer accounts
Payfast	Processes online card, EFT and buy-now-pay-later payments
Yoco	Processes card payments at in-person sales
Bob Go and its partner couriers	Book and deliver courier orders
Google Workspace	Our business email
Xero	Our accounting and invoicing

We may also share information when the law requires it, to protect our rights or prevent fraud, or if our business is sold or restructured.

Information stored outside South Africa: some of these providers, including Shopify and Google, store information on servers outside South Africa. We only use providers that are bound by laws or agreements giving your information a level of protection similar to POPIA, as section 72 of POPIA requires.

Shopify also processes some information for its own purposes, such as fraud prevention. You can read how in the Shopify Consumer Privacy Policy.

6. Children, security and how long we keep it

Children: our products are made for young children, but our website and services are for parents and caregivers. We don't knowingly collect personal information from children. If you mention your child in an order note or message, such as a name for a gift, we use it only for that order. If you believe a child has given us their information, email hello@tshiimoo.co.za and we'll delete it.

Security: we take reasonable technical and organisational steps to protect your information against loss, misuse and unauthorised access, and we use trusted providers with secure, encrypted payment processing. No system is completely secure, so please don't send sensitive information such as card details by email or message. If we become aware of a security breach that affects your information, we will notify you and the Information Regulator as POPIA requires.

How long we keep it: we keep your information only as long as we need it for the purposes in this policy. Order and payment records are kept for at least five years to meet tax and accounting laws. Marketing information is kept until you unsubscribe.

7. Conclusion

Changes to this policy: we may update this policy from time to time. We'll post the new version here and update the date at the top.

Contact: questions about this policy or your information can be sent to hello@tshiimoo.co.za or alternatively call 067 388 8602