1. Responsible party
Bang Bang Creative Co (Pty) Ltd, registration number 2019/079159/07, trading as Toastee, is the responsible party for personal information processed through Toastee.
Address: 2 Bentonite Street, Alrode, Alberton, South Africa
Information Officer: hello@toastee.co.za (monitored)
Telephone: 078 747 4044
This policy applies to customers, prospective customers, website visitors, account holders, support contacts and people who submit reviews or marketing preferences. It does not govern the separate creator relationship or creator dashboard.
2. Information we collect
Depending on how you use Toastee, we may collect:
- Identity and contact information: name, surname, email, telephone number, billing address, delivery address and account identifier.
- Order and transaction information: products, variations, quantities, order number, value, payment status, transaction reference, courier and tracking details, returns, exchanges and refunds.
- Account information: account details, securely processed credentials, order history, saved addresses and preferences.
- Technical and usage information: IP address, browser, device, operating system, pages viewed, referring source, cart and checkout identifiers, cookie choices, security information and optional analytics or advertising events.
- Communications and content: contact forms, support messages, reviews, ratings, images, marketing choices and responses to promotions or surveys.
We do not intentionally request special personal information unless it is genuinely necessary and legally permitted.
3. How information is collected
We collect information directly from you, automatically through essential website and security technologies, through optional Google Analytics and Meta Pixel technologies where enabled, from payment providers, from couriers, from Brevo regarding email delivery and marketing choices, and through lawful fraud-prevention and technical processes.
4. Purposes and lawful grounds
We process personal information to create and manage accounts; process payments and orders; produce and deliver products; provide tracking; handle returns, exchanges and refunds; respond to support; send transactional communications; prevent fraud and abuse; maintain and improve the website; keep accounting, tax and operational records; comply with law; establish or defend legal claims; display and moderate reviews; measure website activity where Analytics is enabled; improve advertising where Marketing is enabled; and send marketing where legally permitted.
Depending on the purpose, processing may be necessary to perform a contract, comply with a legal obligation, protect a legitimate interest, pursue a legitimate interest responsibly, or may be based on consent.
5. Required and optional information
Information required to process and deliver an order is mandatory for that purpose. If it is not provided, we may be unable to process or fulfil the order. Marketing information and optional tracking choices are voluntary. Refusing optional cookies or marketing does not prevent normal browsing, cart use or checkout.
6. Payments
Payments may be processed through Payfast, Yoco, Payflex, PayJustNow or another provider shown at checkout. These providers process information under their own privacy notices and security systems.
Toastee ordinarily receives payment status, amount, method and a transaction or order reference. We do not ordinarily receive or store a complete card number, CVV or online-banking credentials.
7. Delivery
We share necessary delivery information with The Courier Guy and any replacement or supporting delivery provider. This may include recipient name, address, telephone number, email, parcel information, locker or collection details and delivery instructions. Couriers may contact customers directly about delivery.
8. Service providers and recipients
We may disclose necessary personal information to WordPress and WooCommerce infrastructure; Cloudways and hosting providers; payment providers; The Courier Guy and delivery providers; Brevo for transactional email and consented marketing; Google Analytics where Analytics is enabled; Meta Pixel and Meta advertising services where Marketing is enabled; cybersecurity and technical providers; accountants, auditors, lawyers, insurers and professional advisers; regulators, law-enforcement authorities or courts where lawfully required; and a lawful purchaser or successor of the business.
Service providers are expected to process information only for authorised purposes and to use appropriate safeguards. We do not sell customer personal information to advertisers.
9. International processing
Some hosting, analytics, advertising, payment or email providers may store or process information outside South Africa. Where information is transferred across borders, we take reasonable steps required by POPIA to ensure an appropriate legal basis and safeguards.
10. Security
We use reasonable technical and organisational safeguards appropriate to the information and risks involved, including encrypted connections, restricted administrative access, secure authentication, HTTP-only session cookies where appropriate, specialist payment providers, access controls, software updates, monitoring and backups. No internet system can be guaranteed completely secure.
Where a qualifying security compromise occurs, we will follow applicable response and notification obligations.
11. Retention
We keep personal information only for as long as reasonably needed for orders, customer service, returns, warranties, account operation, fraud prevention, accounting, tax and legal obligations, resolving disputes, enforcing agreements and purposes for which valid consent was provided.
When information is no longer required, we will delete, destroy, anonymise or securely restrict it where reasonably possible, unless continued retention is required or permitted by law.
12. Essential cookies and storage
Toastee uses essential cookies and similar storage technologies required for cart contents, WooCommerce and Toastee sessions, checkout recovery, customer login, creator and administrator authentication, security, payment continuity, website preferences and recording privacy choices. These remain active because disabling them may prevent the website, account, cart or checkout from functioning.
13. Optional analytics
Where Analytics is enabled, Google Analytics may help us understand pages visited, product views, add-to-cart activity, checkout activity, purchases, device and browser information, approximate location and website performance. We do not intentionally send names, email addresses, telephone numbers, physical addresses or payment credentials to Google Analytics.
14. Optional marketing
Where Marketing is enabled, Meta Pixel may measure advertising performance, understand whether advertising contributed to a visit or purchase, build or measure audiences, and record events such as product views, cart activity, checkout and purchases. We do not intentionally include names, physical addresses, order notes or payment credentials in standard browser Pixel events.
15. Cookie choices
On a first visit, Toastee displays a compact cookie notice. Allow enables optional Analytics and Marketing. Manage allows those categories to be controlled separately. Closing the notice continues with essential technologies only. Continuing to browse or closing the notice is not treated as consent to optional tracking.
Once the notice has been interacted with, it will not ordinarily appear again until the stored choice expires, the policy changes materially or browser storage is removed. The Cookie settings control in the website footer can be used to review or change the choice later.
16. Direct marketing
We may send promotional email, abandoned-cart email, SMS or WhatsApp marketing where the required consent has been given or communication is otherwise permitted by law. Customers can withdraw using an unsubscribe link, the opt-out instruction in a message, or by emailing hello@toastee.co.za.
Withdrawing from marketing will not stop necessary order, payment, delivery, security or support communications.
17. Reviews and public content
A review, rating, display name or image submitted for public display may be visible to others. Customers should not include addresses, telephone numbers, payment information, private order information, another person’s information or sensitive information in a public review. We may moderate content to protect privacy, prevent abuse and enforce our Terms.
18. Children
Toastee is not directed at children who can independently enter into transactions. A person under 18 should use the website only with a parent or legal guardian’s involvement. If we learn that a child’s information was supplied without appropriate authority, we will take reasonable steps where required.
19. Your rights
Subject to POPIA and other applicable law, you may ask us to confirm whether we hold your information, provide access, correct inaccurate information, delete or destroy information where applicable, restrict certain processing, object to processing, stop direct marketing or explain the basis for processing.
We may verify identity before acting. Some records cannot immediately be deleted where they must be retained for legal, accounting, fraud-prevention, dispute or contract purposes. Requests may be sent to hello@toastee.co.za.
20. PAIA manual and access to records
Our PAIA manual is being prepared for publication and will be made available on request. Requests or enquiries about access to records may be directed to the Information Officer at hello@toastee.co.za.
21. Complaints
Please first contact the Information Officer at hello@toastee.co.za. You may also lodge a complaint with the Information Regulator of South Africa through its published complaint channels.
22. Changes
We may update this policy when our processing, providers, website features or legal obligations change. The updated policy will show a revised effective date. Where a material change affects optional consent, we may ask customers to make a new choice.
23. Contact
Information Officer
Bang Bang Creative Co (Pty) Ltd trading as Toastee
2 Bentonite Street, Alrode, Alberton, South Africa
hello@toastee.co.za
078 747 4044