Privacy Policy

Effective Date: 16 November 2024

At Fox and Bare, your privacy is a top priority. This Privacy Policy outlines how we collect, use, and protect your personal data when you visit our website, foxandbare.co.za, or purchase our products. We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Who We Are

  • Business Name: Fox and Bare
  • Website: foxandbare.co.za
  • Email: info@foxandbare.co.za
  • Address: 100 Voortrekker Road, Salt River, Cape Town, 7925

2. What Personal Data We Collect and Why

We collect and process personal data to provide and improve our services, process transactions, and ensure a secure and user-friendly experience on our website.

2.1 Information You Provide Voluntarily

  • Contact Details: Name, email address, phone number, and physical address for communication, order delivery, and invoicing.
  • Payment Details: Information provided for processing transactions (processed securely by third-party payment providers).
  • Account Information: If you create an account, we collect your login details and preferences.

2.2 Information Collected Automatically

  • Technical Data: IP address, browser type, operating system, and device information for analytics and security.
  • Usage Data: Pages visited, time spent on the website, and interaction patterns to improve our website’s functionality.

2.3 Cookies

We use cookies to enhance your experience, remember preferences, and provide personalised content. You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy.

3. How We Use Your Personal Data

We process your data for the following purposes:

  • To process and fulfil your orders, including delivery and invoicing.
  • To provide customer support and respond to inquiries.
  • To personalise your shopping experience.
  • To send marketing communications (with your explicit consent).
  • To improve our website, products, and services.
  • To comply with legal obligations, such as tax regulations.

4. Legal Basis for Processing Your Data

Under the GDPR, we rely on the following legal bases for processing your data:

  • Contractual Necessity: To fulfil orders and provide services you request.
  • Consent: For marketing communications and non-essential cookies.
  • Legitimate Interests: To improve our services, enhance security, and provide customer support.
  • Legal Obligations: To comply with laws and regulations.

5. How We Share Your Personal Data

We only share your data when necessary and ensure your privacy is protected.

  • Third-Party Service Providers: Payment processors, delivery services, and IT support providers who assist in operating our website and business.
  • Legal Compliance: When required by law or to protect our legal rights.
  • Business Transfers: In the event of a merger, acquisition, or sale, your data may be transferred to the new entity.

We do not sell or rent your personal data to third parties.

6. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy or to comply with legal requirements.

  • Account Information: Until you delete your account.
  • Order Information: Retained for 7 years for tax and legal compliance.
  • Marketing Data: Retained until you withdraw consent.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right to Access: Request a copy of your personal data.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data (subject to legal obligations).
  • Right to Restrict Processing: Request limited use of your data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: At any time for processing based on your consent.

To exercise these rights, contact us at info@foxandbare.co.za.

8. Data Security

We implement robust security measures to protect your data, including encryption, secure payment gateways, and regular system updates. While we strive to safeguard your information, no online system can guarantee absolute security.

9. International Data Transfers

As our services may involve third-party providers outside your country, we ensure your data is protected in accordance with GDPR requirements, including Standard Contractual Clauses (SCCs).

10. Children’s Privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

11. Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website. Changes become effective upon posting.

12. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or your data, contact us:

13. Supervisory Authority

If you believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.