Your information matters
Privacy Policy
Effective date: 9 November 2026
Important: This is a starter policy based on the public website features reviewed. It is not legal advice and must be completed by the business and reviewed by a South African privacy lawyer before launch.
1. Who we are
Elaine’s Jewellery Box (“we”, “us”, “our”) is a South African jewellery and creative-restoration business. Contact: bruweranna2@gmail.com. Legal business name: [confirm registered/legal name]. Business address: [insert address]. Information Officer: [insert name and contact details].
2. Information we collect
When you use our forms, we may collect your name, email address, optional phone number, design preferences, requested item, budget range, enquiry message, review rating and text, customer-care category and message, and email subscription preferences. Do not submit payment-card details, identity documents or sensitive personal information through general enquiry forms.
3. Why we use it
- To respond to jewellery, custom-design and Second Life Studio enquiries.
- To handle customer-care messages and complaints.
- To moderate reviews before publication.
- To send occasional new-arrival emails where you have opted in, and to process unsubscribes.
- To prevent spam, protect the website and maintain its operation.
4. Service providers and disclosures
Website form submissions are sent to a backend service hosted with Supabase, which processes information on our behalf. We do not intentionally sell personal information. Information may be disclosed where required by law or to service providers needed to operate the website. The business must confirm the current provider configuration, processing locations and any other recipients before publication.
5. Cookies and device storage
The public website includes a service worker that caches website files on your device for loading and offline access. Referral links may include a referral query parameter. No advertising or analytics SDK was identified in the public website source reviewed for this draft. Hosting and service providers may process technical logs. If non-essential cookies, analytics or advertising are added, this notice and any required consent controls must be updated.
6. Security and retention
We use a server-side form endpoint and a hosted service provider. No internet service can guarantee absolute security. We keep records only for as long as reasonably needed for the purpose collected, customer service, dispute handling and legal obligations. The business must set and publish documented retention periods: [insert retention periods for enquiries, reviews, complaints and subscriptions]. A minimal unsubscribe suppression record may be retained to respect your choice.
7. Your rights under POPIA
Subject to applicable law, you may ask to access or correct your personal information, object to certain processing, withdraw consent where processing is based on consent, or request deletion where legally appropriate. You may lodge a complaint with South Africa’s Information Regulator. Contact bruweranna2@gmail.com to make a privacy request. We may need to verify your identity.
8. Children
This shop is not intended to collect personal information from children without appropriate parent or guardian involvement. Contact us if you believe a child has submitted information inappropriately.
9. Changes and contact
We may update this policy when our services or legal obligations change. The latest version will appear here with a revised effective date. Privacy questions: bruweranna2@gmail.com.
Before launch: complete the legal identity, address and Information Officer details; verify Supabase and hosting arrangements; set retention periods; and obtain POPIA legal review.