Privacy policy

Last updated: May 2026

1. Introduction

Taria Jewellery ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African privacy legislation.

This policy explains how we collect, use, store, share, and protect your personal information when you visit taria.co.za or purchase from us.

2. Who We Are (Responsible Party)

Responsible Party: Taria Jewellery Website: taria.co.za Country of operation: South Africa Email: taria.jewellery@gmail.com

As the Responsible Party under POPIA, we determine the purpose and means of processing your personal information.

3. What Personal Information We Collect

We may collect the following categories of personal information:

Identity information: name, surname
Contact information: email address, phone number, delivery address
Transaction information: order history, payment method type (we do not store full card details)
Technical information: IP address, browser type, device identifiers, cookies and browsing behaviour on our site
Communications: enquiries, reviews, and correspondence you send us

4. Lawful Basis for Processing (POPIA Section 11)

We process your personal information on one or more of the following lawful grounds:

Contractual necessity — to fulfil your order and deliver your purchase
Legal obligation — to comply with tax, consumer protection, and other applicable laws
Legitimate interest — to improve our services, prevent fraud, and market to existing customers (where not overridden by your rights)
Consent — for marketing communications and non-essential cookies, where we have obtained your explicit consent

5. How We Use Your Personal Information

We use your personal information to:

Process and fulfil your orders
Send order confirmations, shipping updates, and invoices
Respond to your enquiries and provide customer support
Send marketing communications (only where you have consented or are an existing customer)
Improve our website and product offerings
Comply with legal and regulatory obligations
Detect and prevent fraud or abuse

We do not sell your personal information. We may share it with trusted third parties only to the extent necessary, including:

Shopify Inc. — our e-commerce platform provider (hosted internationally; see Section 7)
Payment processors — to securely process transactions
Courier and logistics providers — to deliver your orders
Email and marketing platforms — (e.g. Klaviyo) for transactional and marketing communications
Analytics providers — (e.g. Google Analytics) for website performance insights
Legal authorities — where required by law or court order

All third-party operators are required to handle your personal information in a manner consistent with POPIA.

7. Cross-Border Transfers of Personal Information

Our store is hosted by Shopify Inc., based in Canada, and your data may be processed on servers located outside South Africa. We take reasonable steps to ensure that any cross-border transfer of your personal information is subject to adequate safeguards, in compliance with POPIA Section 72.

By using our website, you acknowledge that your personal information may be transferred to and processed in countries outside South Africa.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and support marketing activities. You can manage your cookie preferences via the cookie banner displayed on our site.

For more information, see our Cookie Policy here.

9. Your Rights Under POPIA

As a data subject, you have the right to:

Access the personal information we hold about you
Correct or update inaccurate or incomplete information
Request deletion of your personal information (subject to legal retention obligations)
Object to processing of your personal information
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with the Information Regulator of South Africa (see Section 11)

To exercise any of these rights, contact us at: taria.jewellery@gmail.com

We will respond within a reasonable time and no later than 30 days of receiving your request.

10. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order records are typically retained for 5 years in line with South African tax and consumer protection requirements.

11. Information Regulator of South Africa

If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with:

Information Regulator (South Africa) Website: www.inforegulator.org.za Email: inforeg@justice.gov.za Tel: 012 406 4818

12. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These include SSL encryption, access controls, and regular security reviews.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via our website or email. The "Last updated" date at the top of this policy reflects the most recent revision.