Last updated: October 19, 2026

Welcome to Sprinkle Studio (“we,” “our,” or “us”). We operate the website www.getsprinkles.co.za (the “Site”). We are committed to protecting your personal information and respecting your privacy in full compliance with the Protection of Personal Information Act (Act 4 of 2013) (“POPIA”) and the Electronic Communications and Transactions Act (Act 25 of 2002) (“ECTA”).

1. Who We Are & Information Officer

For the purposes of POPIA, Sprinkle Studio is the legal “Responsible Party.”

  • Entity Name: Sprinkle Studio
  • Information Officer: Mrs FMDS Morrow
  • Contact Email: sprinklestudioza@gmail.com
  • Website: www.getsprinkles.co.za

2. Information We Collect

We collect personal information necessary to process your e-commerce orders and provide customer support. This includes:

  • Identity & Contact Data: Name, surname, delivery/shipping address, billing address, phone number, and email address.
  • Order & Transaction Data: Order history, details of products purchased, invoice records, and delivery references (such as Pudo locker or courier tracking data).
  • Payment Data: Payment transactions are processed directly via secure third-party payment gateways. We do not store full credit card details or banking passwords on our servers.
  • Technical & Browsing Data: IP address, browser type, device information, and site interaction data gathered via cookies.

3. Purpose & Legal Basis for Processing

We process your personal information only for explicit, lawful purposes:

  1. Order Fulfillment & Performance of Contract: Processing transactions, arranging shipping and courier deliveries, and notifying you of order status.
  2. Customer Support: Responding to inquiries, returns, or technical issues.
  3. Legal & Tax Compliance: Retaining necessary accounting records as required by the South African Revenue Service (SARS) and company legislation.
  4. Direct Marketing: Sending promotional offers, updates, or newsletters where you have provided express consent (opt-in) or where permitted by Section 69 of POPIA for existing customers. You may opt out at any time.

4. Third-Party Sharing & Operators

We do not sell, trade, or rent your personal information. We only share information with trusted third-party service providers (“Operators”) essential to running our business:

  • Logistics & Delivery: Courier companies and locker services (e.g., Pudo) to deliver your purchases.
  • Payment Gateways: Secure payment service providers for card and EFT verification.
  • Hosting & Web Services: E-commerce platforms, database management, and email delivery providers.

All Operators are bound by contract to uphold POPIA-compliant security standards and may only process your data on our instructions.

5. Data Security & Cross-Border Transfers

  • Security: We enforce reasonable physical, electronic, and managerial procedures to safeguard your data against loss, unauthorized access, or disclosure.
  • Cross-Border Transfers: If cloud server infrastructure or service providers host data outside South Africa, we ensure these jurisdictions provide equal or adequate levels of data protection equivalent to POPIA Section 72.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, or to satisfy legal, accounting, and reporting requirements (e.g., SARS mandates retaining transaction records for 5 years). Personal data no longer needed is securely deleted or anonymized.

7. Your Statutory Rights Under POPIA

You have the right to:

  • Access: Request confirmation and details of the personal information we hold about you.
  • Correction: Request correction or updating of inaccurate, outdated, or incomplete data.
  • Objection & Deletion: Object to processing or request deletion of data, provided it does not conflict with legal retention duties.
  • Opt-Out: Withdraw consent for direct marketing at any time via the “Unsubscribe” link in our emails or by contacting us.

8. Cookies

Our site uses essential and analytical cookies to remember shopping carts and analyze traffic. You can adjust your browser settings to decline cookies, though some website functions may be limited.

9. Complaints & The Information Regulator

If you believe our processing of your personal information infringes on your rights under POPIA, please contact our Information Officer first to resolve the issue.

You also have the right to lodge a complaint directly with the South African Information Regulator:

  • Website:https://inforegulator.org.za
  • General Enquiries: enquiries@inforegulator.org.za
  • POPIA Complaints: complaints.IR@inforegulator.org.za

10. Updates to This Policy

We reserve the right to modify this Privacy Policy. Any changes will be published on www.getsprinkles.co.za with an updated revision date.