Privacy notice

Privacy notice

Last updated date

This notice explains what personal information I collect through jacquesgroblerphoto.com, why, who else sees it, how long I keep it and what you can ask me to do about it. It covers the email list and orders from the shop.

Who I am

In this notice "I" and "me" means Park Studios CC, a close corporation registered in South Africa, registration number 2010/104393/23, trading as Jacques Grobler Photography. Jacques Grobler runs it.

Email: [email protected]

Park Studios CC is registered with the Information Regulator (registration number 2026-036832). The Information Officer is Jacques Grobler, at the same email address.

What I collect, and where it comes from

If you join the email list: your email address, and a record of your consent: the exact words you agreed to, the date and time, and the page you signed up on. If you unsubscribe, the date and time of that too.

If you buy a print: your name, email address, phone number and delivery address, what you ordered, the price, and the date. Payment goes through Payfast, not through me. Payfast tells me whether the payment went through, the amount and a reference number. I never see or store your card or bank details.

If you write to me: your email and whatever you put in it. For a faulty or damaged print, that includes the photos you send.

From the couriers: whether your parcel has been collected and delivered.

All of this comes from you, except the payment result (from Payfast) and the delivery updates (from the courier).

Why I collect it

• To make and deliver your order, keep you updated on it and sort out any problem with it.
• To keep the records the tax law requires of a business.
• To email you about the shop, but only if you asked for it. More on that below.

I won't sell your information, swap it or use it for anything else.

Do you have to give it?

Joining the list is entirely up to you. To place an order you need to give your name, email, phone number and delivery address. Without them I can't make the print, deliver it or reach you if something goes wrong, so I can't take the order. The courier needs the phone number to deliver.

Who else handles it

Each of these gets only what it needs to do its part.

• Orms Print Room, Cape Town, prints, frames and packs your order. They get your name, phone number, email, delivery address and what you ordered. They work under a written agreement with me, may use your details only for your order and must keep them secure.
• Payfast, a South African payment service, processes your payment on its own secure page.
• The Courier Guy delivers orders inside South Africa. They get your name, phone number and delivery address.
• TUNL, a South African shipping service, books international deliveries with its carriers (such as FedEx or UPS). They and the customs authorities in your country get your name, phone number, delivery address and a description and value of the parcel. Sending your details abroad is part of delivering your order there.
• Cloudflare, Inc. hosts this website and stores the email list and order records in its database service. Cloudflare is based in the United States, so your information may be stored or processed outside South Africa. Cloudflare commits by contract to protecting it.
• email service, company and country sends order emails and list emails for me. If outside South Africa: "Your email address may be processed outside South Africa. Name commits by contract to protecting it."
• My accountant sees order and payment records when the books are done each year.

If the law requires it, I may also have to give information to a court or a government body such as SARS.

Emails from me

I only send emails about the shop to people who asked for them: a few around the opening, then only when there's something new. Every email says who it is from and has an unsubscribe link at the bottom. You can also reply and ask to come off the list.

If you buy a print, you're only added to the list if you tick the box for it at checkout.

Order emails (your confirmation, dispatch and tracking) are part of the sale and are sent whether or not you're on the list.

Cookies and tracking

This site uses no advertising or tracking cookies and no analytics. If the shop needs to remember your cart: "Your basket is kept in your own browser so it's still there if you leave the page. That stays on your device and isn't used to track you." If that ever changes, this notice changes first, and I'll ask before anything that tracks you is switched on.

How long I keep it

• Order and payment records: five years, because the tax law requires it.
• Your phone number and delivery address: removed from my systems, and Orms's, six months after delivery, unless there's an open problem with your order. The six months matches the time you have to report a faulty print.
• Photos of a faulty or damaged print: deleted once the problem is sorted.
• The email list: until you unsubscribe. After that your address is kept only as unsubscribed, so you're never emailed again, together with the consent record, as proof of what you agreed to and when you withdrew. Ask and I'll delete both.

How I keep it safe

The website runs over an encrypted connection. The list and order records sit in a private database that only I can open. Payments happen on Payfast's own secure page, so card details never reach me. Orms and the couriers only get what they need for your order, and Orms is bound by a written agreement to keep it secure. If your information is ever accessed by someone who shouldn't have it, I will tell you and the Information Regulator as soon as I reasonably can.

Your rights

Under the Protection of Personal Information Act (POPIA) you can:

• ask what information I hold about you, and get a copy;
• ask me to correct it or delete it;
• object to me using it, and in particular stop all marketing emails at any time.

Email [email protected] for any of these. I'll answer within 10 working days. My PAIA manual explains how to request other records.

If you're not happy with how I've handled your information, you can complain to the Information Regulator: inforegulator.org.za, [email protected], 010 023 5200, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.

Changes

If this notice changes, the new version goes on this page with a new date. If a change affects how I use information you've already given me, I'll tell you by email first.