Draft · awaiting Trent's approval · placeholders in brackets
We keep what you tell us. Only what we need, only for as long as we need it.
House of Vespera (VESPERA) is the responsible party for your personal information under the Protection of Personal Information Act (POPIA). The responsible party is Trent Scott, a sole proprietor, trading as House of Vespera. Address for legal notices: [TO CONFIRM: shop street address for legal notices, pending Trent's OK].
Information Officer: [TO CONFIRM: Trent Scott, once registered with the Information Regulator]. Contact: [email protected].
When you order: your name, email, phone number and your delivery address (we deliver by courier anywhere in South Africa). Your order: what, how many, the total and your reference.
When you write to us or use our enquiry form: your name, email and what you tell us (see “Launch list and enquiries” below).
We do not take or keep card numbers. Payments are handled by [TBC: payment provider].
Giving us these details is voluntary, but we cannot make, deliver or support an order without them.
To make, deliver and support your order, to answer you, to handle returns and warranty claims, and to keep the records the law requires.
We do not sell your details.
We send no marketing unless you ask for it yourself. Nothing is ticked for you. Every message has an unsubscribe link, and you can stop at any time. We keep a record of your consent.
Only those who help us run your order, and only what they need:
Payments: [TBC: payment provider]. Delivery: a national courier such as The Courier Guy [TBC: courier]. Website hosting, visit counts, enquiry storage and spam protection: Cloudflare (enquiries are stored in Western Europe). Order notifications: [TBC: form or order service, if used]. Email: Zoho Mail (our mailbox).
Each of them must keep your information safe under a written agreement with us. Some may store data outside South Africa. [TBC: list each provider's data location]. We only use providers in countries with protection similar to POPIA, or under a contract that requires it (POPIA s72, to verify).
If you use the enquiry form on our site, we collect your name and email, and, if you choose to give them, the case you are interested in (Hero, Slim, Car, Made to measure or Just curious) and your message.
We use these details only to reply to you. We email you about the launch only if you tick the box asking us to. The box is never ticked for you. You can unsubscribe at any time by replying to any of our emails or by writing to [email protected], and we stop.
We store your name, email, the interest and message you give, whether you asked for launch emails (with the exact wording of the box you saw), and the dates of your first and last contact. We do not store your IP address, browser details or cookies with your enquiry. To stop the form being flooded, we keep a scrambled, one-way code made from your IP address for 48 hours, then delete it. It cannot be turned back into your IP address.
Your enquiry is stored in Cloudflare’s database service (D1), on servers in Western Europe, outside South Africa. Cloudflare is bound by a written agreement to protect it to a standard similar to POPIA (POPIA section 72). To keep out spam, the form uses Cloudflare Turnstile, which checks for signs of automated use without tracking you for advertising. We do not sell or share your details.
We keep enquiries and launch-list details for 24 months after we last hear from you, or until you unsubscribe or ask us to delete them, whichever comes first. Old records are cleared every month. To have your details deleted sooner, write to [email protected].
We use no advertising cookies and no tracking pixels. We use Cloudflare Web Analytics to count visits. It sets no cookies and builds no profile of you. If we ever add anything that tracks you, we will ask first, with an equal “Accept” and “Reject”, and nothing loads until you choose.
To work, the site keeps only small items in your own browser, not on our side: vespera_cart (your bag, cleared once you confirm your order) and your order reference after you confirm. No name, email, phone number or address is stored in your browser. Our host may set strictly necessary security cookies [TBC: list them once hosting is chosen].
We protect your information with reasonable technical and practical safeguards: secure connections, limited access, and strong passwords with two-step sign-in on our accounts.
If your information is ever compromised, we tell the Information Regulator and you as soon as reasonably possible.
Order and tax records: [TO CONFIRM with accountant: five years, for SARS]. Enquiries and launch list: 24 months after we last hear from you, or sooner if you unsubscribe or ask. Messages and everything else: deleted when no longer needed, and reviewed at least once a year.
You may ask what we hold about you, ask us to correct or delete it, or object to how we use it. Write to [email protected]. We reply within [TBC: response time, e.g. 30 days].
If you are not happy with our answer, you may complain to the Information Regulator: inforegulator.org.za, through its eServices complaints portal (eservices.inforegulator.org.za), or [email protected] · 010 023 5200. (Contact details checked 15 Oct 2026; to verify before publishing.)
Version 0.4 (draft) · 20 Oct 2026 · v0.4: enquiry form and launch list added (Cloudflare D1, Western Europe, s72), Cloudflare Web Analytics disclosed, delivery anywhere in South Africa, browser storage updated · v0.1 updated: unconfirmed providers (Yoco, Formspree, Cloudflare) changed to TBC; browser data disclosed; Information Regulator contact corrected; consent, security, breach and cross-border sections added; v0.3: sole proprietor, shop address
Approved by Trent: [not yet] · Attorney sign-off: [not yet] · Published: [not yet]