Effective date: 1 November 2025
Last updated: 6 June 2026

1. Who we are (Responsible Party)

This Privacy Policy explains how Yamie Group (Pty) Ltd, trading as Yamie Floral Studio (“we”, “us”, “our”) collects, uses, and protects your personal information. We are the Responsible Party as defined in the Protection of Personal Information Act, 4 of 2013 (“POPIA”).

• Website: https://www.yamiefloralstudio.co.za
• Physical address: 2009 Tropical Street, Pretoria, 0184
• Email: compliance@yamie.co.za
• Phone: +27 61 544 0290

Information Officer: Nthabiseng Mhaka — compliance@yamie.co.za. (Under POPIA the Information Officer is responsible for compliance and must be registered with the Information Regulator.)

2. The personal information we collect

We collect personal information you give us and information collected automatically:

• You provide: name, email address, delivery and billing address, phone number, the recipient’s name/address/phone, and any card message or order notes you supply.
• Payment information: processed by our payment provider PayFast. We do not store full card numbers on our servers.
• Automatically: IP address, browser/device type, pages viewed, and similar usage data collected via cookies and similar technologies (see section 5).

3. Why we use it, and our lawful basis

We process personal information for these purposes, relying on the POPIA grounds noted:

Purpose	Lawful basis under POPIA
Process and deliver your order, including giving delivery details to our in-house drivers	Performance of a contract
Send order/transaction updates and respond to enquiries	Performance of a contract / legitimate interest
Comply with tax, accounting and other legal obligations	Legal obligation
Marketing emails and analytics/advertising cookies	Your consent (which you can withdraw at any time)

We only use your information for the purpose it was collected for, unless POPIA permits otherwise.

4. Sharing your personal information (Operators & third parties)

We do not sell, rent, or trade your personal information. We share it only with parties that help us run the store (“Operators” under POPIA), who must protect it and use it only on our instructions:

• PayFast — payment processing.
• Mailchimp (Intuit Inc.) — email marketing (only if you consent).
• Meta Platforms, Inc. — advertising/measurement via the Meta Pixel (only if you consent).
• Google LLC — advertising/analytics via Google tags (only if you consent).
• Authorities or advisors where required by law.

Order deliveries are carried out by our own in-house drivers (our staff) — we do not hand your details to an external courier company.

5. Cookies and tracking technologies

We use cookies in these categories:

• Strictly necessary (always on): needed for the cart, checkout, login and security. These cannot be switched off.
• Analytics (consent required): help us understand how the site is used (Google).
• Marketing (consent required): used for advertising and measurement (Meta Pixel, Google Ads, Mailchimp tracking).

When you first visit, non-essential cookies are off by default. Our consent banner lets you accept or decline each non-essential category, and you can change your choice at any time using the “Cookie preferences” link on every page.

6. Cross-border transfers

Some of our service providers (Mailchimp, Meta, Google) are located outside South Africa, mainly in the United States. Where your information is transferred across borders, we take reasonable steps to ensure it is protected by laws or contractual terms that provide an adequate level of protection, as required by section 72 of POPIA.

7. How we protect your information

We apply appropriate technical and organisational measures — including access controls, encryption in transit (HTTPS), and restricted staff access — to guard against loss, misuse, and unauthorised access, alteration, or disclosure of your personal information.

8. How long we keep it

We keep personal information only as long as necessary for the purposes above or as required by law:

• Order and transaction records: 5 years (to meet tax/accounting obligations).
• Marketing contact details: until you unsubscribe or withdraw consent.
• Website analytics/marketing cookies: for the lifetime stated for each cookie.

9. Your rights under POPIA

You have the right to:

• Access the personal information we hold about you.
• Correct or delete information that is inaccurate, irrelevant, excessive, or out of date.
• Object to processing, and to withdraw consent for marketing/analytics at any time.
• Not be subject to direct marketing without consent.
• Lodge a complaint with the Information Regulator (see section 10).

To exercise any of these, contact compliance@yamie.co.za. We may need to verify your identity before acting on a request.

10. Complaints to the Information Regulator

If you are not satisfied with how we handle your personal information, you may complain to:

The Information Regulator (South Africa)

• Website: https://inforegulator.org.za
• Complaints email (POPIA): PORequest@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows the latest version. Material changes will be communicated where appropriate.