Twinzzle Crafts · South Africa

Privacy Policy

Your details help us plan, make and deliver your project. Here is what we collect, why we need it and how to exercise your rights.

Effective 17 October 2026 · Version 2026-10-17

Who handles your information

Twinzzle Crafts operates this website and is responsible for the personal information it processes for its workshop services in South Africa. For privacy questions, access requests or complaints, email admin@twinzzlecrafts.co.za.

What we collect

We collect the details you submit: your name, email, contact number, delivery address or Pudo locker, order details, quotes, project notes, uploaded images, QR destinations and correspondence. If you create an account, Firebase Authentication handles your sign-in credentials. We also keep submission timestamps, acceptance records and order activity. Hosting and service providers may process technical information such as IP addresses and security logs.

Why we use it

We use relevant information to reply to enquiries, prepare quotes and QR files, fulfil orders, issue invoices, arrange delivery, track payment and resolve problems. We may contact you by email, phone or WhatsApp about your request. Required fields are needed to handle the service; optional notes and uploads are your choice.

Under the Protection of Personal Information Act 4 of 2013 (POPIA), processing may be necessary for a contract or steps you request before a contract, a legal obligation, legitimate interests or, where appropriate, consent. Acknowledging this policy is not blanket consent to unrelated uses. We do not treat submitting a form as permission to send marketing.

Who receives it

Information may be handled by authorised workshop staff and service providers needed for the task, including Google Firebase for hosting, authentication, database and file storage; email delivery providers; and your chosen courier or collection service. We share the details relevant to their work and may disclose information when legally required. We do not sell your personal information.

Providers may process data outside South Africa. Any cross-border transfer must meet POPIA section 72 requirements, including appropriate legal or contractual protection where required. QR links may lead to independently operated websites, social platforms or payment providers with their own privacy policies. Binary Baker provides separate website or menu services when arranged with you.

Storage and security

We keep information only as long as reasonably needed for the purpose, resolving disputes and applicable legal or accounting obligations, then delete, de-identify or securely dispose of it. The period depends on the record and legal requirements. You may ask about retention of your specific records.

We use reasonable technical and organisational safeguards and service-provider security controls. No system is entirely secure. Where POPIA requires it, a security compromise will be reported to the Information Regulator and affected people.

Your choices and rights

You may ask whether we hold your information, request access or correction, request deletion where lawful, object to certain processing, or withdraw consent where processing relies on it. Some records must be retained by law. Contact us using the address above; we may reasonably verify your identity before responding. You can also complain to the Information Regulator of South Africa. Access requests may also be subject to the Promotion of Access to Information Act (PAIA).

Browser storage, uploads and children

The website uses browser storage for functions such as your shopping cart and sign-in session. Your browser lets you manage this storage; disabling it can affect these functions. Any future optional advertising or analytics use requires an appropriate notice and consent where required.

Only upload material you are entitled to share. Avoid identity documents, banking credentials, sensitive personal information or information about other people unless necessary and lawfully authorised. Never put private documents at a publicly accessible QR destination. A parent or guardian must manage requests involving a child or a child's personal information.

Updates and legal reference

We publish changes here with a new version date. Material changes will be communicated where required. Read the official POPIA information for the legislation underlying this policy.