Privacy Policy
1. Introduction
1.1. SA Bonsai and Little Wood Pottery (“SA Bonsai and Little Wood Pottery”, “we”, “us”, “our”) is a proudly South African manufacturer, wholesaler, and retailer of bonsai trees, related products, and handmade bonsai and flower pots.
1.2. We are committed to protecting your right to privacy. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with the Protection of Personal Information Act, No. 4 of 2013 (“POPIA”). Specifically, it outlines:
What personal information we collect;
Why we collect it;
How we collect and use it;
How long we retain it; and
Your rights as a data subject.
1.3. By using our products, services, websites, applying for employment, or providing information to us, you provide your express, informed, and voluntary consent to the collection and processing of your personal information as set out in this Privacy Policy.
1.4. This policy should be read in conjunction with POPIA and its regulations.
1.5. This Privacy Policy applies to all legal entities within the SA Bonsai and Little Wood Pottery Group operating in South Africa. The specific entity that collects your information will be the “responsible party” for the purposes of POPIA.
2. Our Privacy Principles
We are committed to:
Transparency in how we collect and process personal information;
Legal compliance with all applicable privacy and data protection laws;
Collecting only relevant, lawful, and necessary information;
Keeping information accurate and up to date;
Maintaining strong physical and digital safeguards against data loss, misuse, or unauthorised access;
Contracting only with service providers who meet our data protection standards;
Communicating this policy to customers, employees, suppliers, and service providers; and
Continuously improving our privacy practices.
3. Personal Information We Collect
3.1. Under POPIA, “personal information” refers to any data that can identify a living person or existing legal entity, including:
Demographic details (e.g., age, gender, nationality);
Contact information (e.g., phone number, email address, physical address);
Biometric and identity information;
Employment, education, or financial history;
Correspondence, views, and opinions;
Online identifiers, location data, and device information.
3.2. We only collect personal information that is relevant, necessary, and not excessive in relation to our relationship with you.
4. Why We Collect Your Personal Information
We use your personal information to manage our business relationship with you. Depending on our relationship, we may use it to:
If you are a customer:
Verify your identity;
Communicate marketing and promotional material;
Process and manage purchases and deliveries;
Handle feedback or complaints;
Provide access to our premises or online platforms;
Understand your preferences to improve our offerings.
If you are a supplier or service provider:
Verify company and representative information;
Make and manage payments;
Communicate regarding services or products;
Evaluate performance and maintain legal records.
If you are an employee or job applicant:
Conduct background screening and recruitment;
Administer payroll and employment benefits;
Comply with labour regulations;
Provide access to company premises;
Evaluate job qualifications and performance.
In all cases, we may also:
Conduct audits or regulatory reporting;
Provide you with relevant updates, newsletters, or offers;
Use aggregated data for analysis and business improvement;
Comply with legal obligations or respond to legal proceedings.
4.4. We may share your personal information with:
Delivery partners and logistics providers;
Our professional auditors and advisors;
Government agencies or law enforcement when required by law.
4.5. All third parties are contractually bound to process your personal information only for authorised purposes and in accordance with our privacy requirements.
4.6. Your personal information may be processed outside of South Africa (e.g., cloud storage providers), in line with section 72 of POPIA.
4.7. We do not sell or trade your personal data. You indemnify us against any unintentional disclosures beyond our control.
4.8. If you choose not to provide your personal information, we may not be able to deliver our services or maintain our relationship with you.
5. How We Collect Personal Information
5.1. We collect personal information:
Directly from you — through forms, emails, telephone, job applications, or in-store transactions;
From third parties — such as public sources or credit agencies (we will notify you before running any credit or fraud checks).
6. Direct Marketing
6.1. We may send promotional content to existing or past customers about similar products or services.
6.2. Your information may be shared within the SA Bonsai and Little Wood Pottery group for similar marketing purposes.
6.3. You may opt out at any time by using the unsubscribe link in our communications or contacting our helpdesk.
7. Retention of Personal Information
Your personal information will be retained for as long as necessary to:
Comply with legal obligations;
Fulfil contractual obligations;
Meet your consented purposes;
Serve legitimate business needs;
Support any ongoing legal or tax processes.
8. Your Rights Under POPIA
You have the right to:
Access personal information we hold about you;
Request correction or deletion;
Object to processing or request restriction;
Withdraw consent at any time;
Opt out of marketing;
Lodge complaints with the Information Regulator.
Refer to our PAIA and POPIA Manual (available on our website) for full procedures.
9. Cookies
Our website uses cookies to enhance your browsing experience. Cookies help us recognise returning users, monitor website traffic, and personalise your experience. You may disable cookies in your browser settings, but this could limit website functionality.
10. Data Security and Breaches
10.1. We implement appropriate security safeguards to protect personal information against loss, theft, or unauthorised access.
10.2. If a data breach occurs, we will notify you and the Information Regulator as required by POPIA.
10.3. Third parties handling your information are contractually bound to uphold privacy and data security standards.
10.4. While we take all reasonable steps to protect your data, we are not liable for breaches caused by third parties outside our control.
10.5. We are not responsible for any personal information you share with other websites linked to ours.
11. Contacting the Information Regulator
You may lodge complaints with the Information Regulator at:
Information Regulator (South Africa)
33 Hoofd Street, Forum III, 3rd Floor, Braampark, Johannesburg
PO Box 31533, Braamfontein, 2017
📧 complaints.IR@justice.gov.za
📧 inforeg@justice.gov.za
12. Policy Updates
This Privacy Policy was reviewed and approved by our Information Officer and is subject to updates without prior notice. The latest version will always be available on our website.
Effective Date: July 2023
13. Contact Us
For questions or requests related to this Privacy Policy, please contact:
📞 083 393 0188
📧 info@sabonsai.co.za
