{"id":3,"date":"2026-03-18T08:00:24","date_gmt":"2026-03-18T08:00:24","guid":{"rendered":"https:\/\/carlythella.co.za\/Staging\/?page_id=3"},"modified":"2026-11-07T15:49:48","modified_gmt":"2026-11-07T13:49:48","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/carlythella.co.za\/Staging\/privacy-policy\/","title":{"rendered":"PRIVACY & POPIA POLICY"},"content":{"rendered":"\n
\n

PRIVACY & PERSONAL INFORMATION PROTECTION POLICY<\/h1>\n\n\n\n

Carly Thella Home & D\u00e9cor<\/strong>
Operated by Carly Thella Pty Ltd<\/strong>
Website:<\/strong> https:\/\/carlythella.co.za<\/a>
<\/p>\n\n\n\n

\n\n\n\n

Introduction<\/h2>\n\n\n\n

At Carly Thella Home & D\u00e9cor, we respect your privacy and are committed to protecting your personal information.<\/p>\n\n\n\n

We recognise the importance of maintaining the confidentiality, security and integrity of the information entrusted to us by our customers, website visitors, suppliers and other individuals who interact with our business.<\/p>\n\n\n\n

This Privacy & Personal Information Protection Policy explains how we collect, use, process, store, share, safeguard and retain personal information when you visit our website, create an account, purchase products, contact our team or otherwise interact with Carly Thella Home & D\u00e9cor.<\/p>\n\n\n\n

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA)<\/strong> and other applicable South African laws.<\/p>\n\n\n\n

This Policy should be read together with our Terms & Conditions, Shipping Policy, Refund and Returns Policy, Orders & Delivery Information, Payment Policy and other applicable website policies.<\/p>\n\n\n\n

Where any provision of this Policy conflicts with applicable law, the relevant legal requirements will prevail.<\/p>\n\n\n\n

1. Who We Are<\/h2>\n\n\n\n

Carly Thella Home & D\u00e9cor is operated by Carly Thella Pty Ltd, a South African business specialising in carefully curated furniture, home d\u00e9cor, decorative accessories and interior lifestyle products.<\/p>\n\n\n\n

Our store operates exclusively online through our website and authorised customer communication channels.<\/p>\n\n\n\n

Business Operations<\/strong><\/p>\n\n\n\n

Administrative office: Ballito, KwaZulu-Natal, South Africa.<\/p>\n\n\n\n

Dispatch operations: Pinetown, KwaZulu-Natal, South Africa.<\/p>\n\n\n\n

Website: https:\/\/carlythella.co.za<\/a>.<\/p>\n\n\n\n

General and privacy enquiries: concierge@carlythella.co.za<\/a>.<\/p>\n\n\n\n

Order-related correspondence: orders@carlythella.co.za<\/a>.<\/p>\n\n\n\n

WhatsApp Business: +27 83 684 0853.<\/p>\n\n\n\n

We do not operate a public retail showroom, offer walk-in shopping or provide customer collections unless a specific arrangement is expressly authorised.<\/p>\n\n\n\n

For the purposes of POPIA, Carly Thella Pty Ltd is the responsible party<\/strong> in relation to personal information for which it determines the purposes and means of processing.<\/p>\n\n\n\n

Our authorised service providers may process information on our behalf in accordance with their responsibilities and applicable privacy requirements.<\/p>\n\n\n\n

2. Scope of This Privacy Policy<\/h2>\n\n\n\n

This Policy applies to personal information processed in connection with:<\/p>\n\n\n\n

Visits to our website and online store.<\/p>\n\n\n\n

Online shopping and WooCommerce transactions.<\/p>\n\n\n\n

Customer account registrations and guest checkout.<\/p>\n\n\n\n

Orders placed through WhatsApp Business.<\/p>\n\n\n\n

Payment processing and verification.<\/p>\n\n\n\n

Product sourcing and fulfilment.<\/p>\n\n\n\n

Courier and delivery arrangements.<\/p>\n\n\n\n

Order updates and customer service.<\/p>\n\n\n\n

Returns, refunds, cancellations and complaints.<\/p>\n\n\n\n

Product reviews and customer-submitted information.<\/p>\n\n\n\n

Custom sourcing, trade and business enquiries.<\/p>\n\n\n\n

Email subscriptions, promotions and marketing.<\/p>\n\n\n\n

Website analytics, cookies and similar technologies.<\/p>\n\n\n\n

Website security, fraud prevention and regulatory compliance.<\/p>\n\n\n\n

This Policy applies whether information is collected directly from you, submitted voluntarily, generated through website activity or received from authorised service providers.<\/p>\n\n\n\n

3. Our Principles for Processing Personal Information<\/h2>\n\n\n\n

We aim to handle personal information responsibly and in accordance with the conditions for lawful processing under POPIA.<\/p>\n\n\n\n

These principles include:<\/p>\n\n\n\n

Accountability:<\/strong> We take responsibility for personal information processed under our control.<\/p>\n\n\n\n

Processing limitation:<\/strong> We collect and process information only where a lawful basis exists and the processing is reasonably necessary.<\/p>\n\n\n\n

Purpose specification:<\/strong> We collect information for specific, lawful and clearly defined purposes.<\/p>\n\n\n\n

Further processing limitation:<\/strong> We do not use information for incompatible purposes unless permitted by law.<\/p>\n\n\n\n

Information quality:<\/strong> We take reasonable steps to maintain accurate, complete and updated information.<\/p>\n\n\n\n

Openness:<\/strong> We explain how information is collected and used.<\/p>\n\n\n\n

Security safeguards:<\/strong> We implement reasonable measures to protect personal information against loss, misuse and unauthorised access.<\/p>\n\n\n\n

Data subject participation:<\/strong> We recognise individuals’ applicable rights to access, correct, object to certain processing and request deletion of personal information.<\/p>\n\n\n\n

4. Personal Information We Collect<\/h2>\n\n\n\n

Depending on how you interact with our business, we may collect the following categories of personal information.<\/p>\n\n\n\n

4.1 Identity and Contact Information<\/h3>\n\n\n\n

Full name and surname.<\/p>\n\n\n\n

Email address.<\/p>\n\n\n\n

Telephone or WhatsApp number.<\/p>\n\n\n\n

Billing address.<\/p>\n\n\n\n

Delivery address.<\/p>\n\n\n\n

Company or business name, where applicable.<\/p>\n\n\n\n

Other contact details voluntarily provided.<\/p>\n\n\n\n

4.2 Customer Account Information<\/h3>\n\n\n\n

Account registration details.<\/p>\n\n\n\n

Username and account preferences.<\/p>\n\n\n\n

Saved billing and delivery information.<\/p>\n\n\n\n

Purchase and order history.<\/p>\n\n\n\n

Account activity relevant to security and administration.<\/p>\n\n\n\n

Authentication information handled through the website’s account systems.<\/p>\n\n\n\n

4.3 Order and Transaction Information<\/h3>\n\n\n\n

Products purchased or requested.<\/p>\n\n\n\n

Product quantities and specifications.<\/p>\n\n\n\n

Order numbers.<\/p>\n\n\n\n

Purchase history.<\/p>\n\n\n\n

Transaction amounts.<\/p>\n\n\n\n

Payment status and transaction references.<\/p>\n\n\n\n

Invoices and refund records.<\/p>\n\n\n\n

Promotional codes or discounts applied.<\/p>\n\n\n\n

Delivery and tracking details.<\/p>\n\n\n\n

Customer-approved order specifications.<\/p>\n\n\n\n

4.4 Customer Communications<\/h3>\n\n\n\n

Email correspondence.<\/p>\n\n\n\n

WhatsApp Business messages.<\/p>\n\n\n\n

Customer enquiries and service requests.<\/p>\n\n\n\n

Custom sourcing and trade enquiries.<\/p>\n\n\n\n

Order instructions and preferences.<\/p>\n\n\n\n

Return and refund correspondence.<\/p>\n\n\n\n

Complaints and supporting documentation.<\/p>\n\n\n\n

Photographs and videos voluntarily provided in support of product or delivery claims.<\/p>\n\n\n\n

4.5 Technical and Website Information<\/h3>\n\n\n\n

Internet Protocol (IP) addresses.<\/p>\n\n\n\n

Browser and device information.<\/p>\n\n\n\n

Operating system and connection information.<\/p>\n\n\n\n

Website activity and navigation information.<\/p>\n\n\n\n

Cookie identifiers.<\/p>\n\n\n\n

Referral sources and campaign information.<\/p>\n\n\n\n

Website security and diagnostic records.<\/p>\n\n\n\n

Information relating to cart, checkout and account sessions.<\/p>\n\n\n\n

4.6 Marketing and Preference Information<\/h3>\n\n\n\n

Email subscription preferences.<\/p>\n\n\n\n

Marketing consent records.<\/p>\n\n\n\n

Communication preferences.<\/p>\n\n\n\n

Promotional participation information.<\/p>\n\n\n\n

Opt-out and unsubscribe requests.<\/p>\n\n\n\n

We aim to collect only the information reasonably necessary for the relevant purpose.<\/p>\n\n\n\n

We do not ordinarily require sensitive banking credentials, card PINs, one-time passwords or full payment-card information to be disclosed directly to our representatives.<\/p>\n\n\n\n

5. How We Collect Personal Information<\/h2>\n\n\n\n

We may collect information when you:<\/p>\n\n\n\n

Visit or browse our website.<\/p>\n\n\n\n

Register or access a customer account.<\/p>\n\n\n\n

Add products to your shopping cart.<\/p>\n\n\n\n

Place an order.<\/p>\n\n\n\n

Complete checkout.<\/p>\n\n\n\n

Request a quotation.<\/p>\n\n\n\n

Submit a custom sourcing enquiry.<\/p>\n\n\n\n

Apply for trade-related services.<\/p>\n\n\n\n

Contact us by email or WhatsApp.<\/p>\n\n\n\n

Subscribe to our newsletter.<\/p>\n\n\n\n

Participate in a promotion.<\/p>\n\n\n\n

Submit a product review.<\/p>\n\n\n\n

Request a return, cancellation or refund.<\/p>\n\n\n\n

Report damaged, missing, defective or incorrect goods.<\/p>\n\n\n\n

Submit a complaint.<\/p>\n\n\n\n

Interact with our website or advertising.<\/p>\n\n\n\n

Information may also be received from authorised third parties, including payment processors, courier companies, suppliers, fulfilment partners and other service providers involved in completing or supporting a transaction.<\/p>\n\n\n\n

Where reasonably practicable, we collect personal information directly from the individual concerned.<\/p>\n\n\n\n

6. Why We Collect and Use Personal Information<\/h2>\n\n\n\n

We may process personal information for the following purposes:<\/p>\n\n\n\n

6.1 Order Processing and Fulfilment<\/h3>\n\n\n\n

Receiving and confirming orders.<\/p>\n\n\n\n

Checking product availability.<\/p>\n\n\n\n

Confirming customer-approved specifications.<\/p>\n\n\n\n

Processing invoices.<\/p>\n\n\n\n

Verifying payments.<\/p>\n\n\n\n

Coordinating suppliers.<\/p>\n\n\n\n

Preparing products for dispatch.<\/p>\n\n\n\n

Arranging collection by couriers.<\/p>\n\n\n\n

Delivering purchased goods.<\/p>\n\n\n\n

Providing tracking and delivery updates.<\/p>\n\n\n\n

6.2 Customer Service<\/h3>\n\n\n\n

Responding to enquiries.<\/p>\n\n\n\n

Providing product information.<\/p>\n\n\n\n

Assisting with existing orders.<\/p>\n\n\n\n

Managing customer accounts.<\/p>\n\n\n\n

Responding to sourcing requests.<\/p>\n\n\n\n

Processing returns and refunds.<\/p>\n\n\n\n

Investigating complaints.<\/p>\n\n\n\n

Resolving payment or delivery disputes.<\/p>\n\n\n\n

6.3 Website Operations<\/h3>\n\n\n\n

Maintaining website functionality.<\/p>\n\n\n\n

Supporting shopping carts and checkout.<\/p>\n\n\n\n

Managing account authentication.<\/p>\n\n\n\n

Improving website performance.<\/p>\n\n\n\n

Diagnosing technical problems.<\/p>\n\n\n\n

Monitoring website security.<\/p>\n\n\n\n

Understanding customer preferences where permitted.<\/p>\n\n\n\n

6.4 Business Administration and Compliance<\/h3>\n\n\n\n

Maintaining accounting and transaction records.<\/p>\n\n\n\n

Managing legitimate business correspondence.<\/p>\n\n\n\n

Investigating suspected fraud.<\/p>\n\n\n\n

Responding to payment disputes and chargebacks.<\/p>\n\n\n\n

Complying with legal and regulatory obligations.<\/p>\n\n\n\n

Establishing, exercising or defending legal rights.<\/p>\n\n\n\n

6.5 Marketing and Customer Engagement<\/h3>\n\n\n\n

Sending newsletters where permitted.<\/p>\n\n\n\n

Communicating new arrivals.<\/p>\n\n\n\n

Sharing seasonal collections.<\/p>\n\n\n\n

Promoting products and special offers.<\/p>\n\n\n\n

Administering promotions.<\/p>\n\n\n\n

Improving marketing relevance and effectiveness where lawful.<\/p>\n\n\n\n

We do not intentionally process personal information for purposes incompatible with those for which it was collected unless permitted by applicable law.<\/p>\n\n\n\n

7. Lawful Basis for Processing<\/h2>\n\n\n\n

We process personal information only where an appropriate lawful basis exists under POPIA.<\/p>\n\n\n\n

Depending on the circumstances, processing may be justified where:<\/p>\n\n\n\n

You have provided consent.<\/p>\n\n\n\n

Processing is necessary for the conclusion or performance of a contract with you.<\/p>\n\n\n\n

Processing is required to comply with a legal obligation.<\/p>\n\n\n\n

Processing protects a legitimate interest of the individual concerned.<\/p>\n\n\n\n

Processing is necessary for a legitimate interest pursued by our business or a third party, where permitted by law.<\/p>\n\n\n\n

The applicable basis depends on the particular activity.<\/p>\n\n\n\n

Consent is not required for every processing activity. For example, we may need to process order and delivery information to fulfil a purchase.<\/p>\n\n\n\n

Where processing relies on consent, you may withdraw that consent, subject to other lawful grounds or retention requirements that may continue to apply.<\/p>\n\n\n\n

Withdrawal does not retrospectively invalidate processing lawfully carried out before consent was withdrawn.<\/p>\n\n\n\n

8. Customer Accounts and WooCommerce<\/h2>\n\n\n\n

Our online store operates using WordPress and WooCommerce.<\/p>\n\n\n\n

Customers may be able to register an account, manage selected personal details, save relevant delivery information and view previous purchases.<\/p>\n\n\n\n

Account information may be processed to:<\/p>\n\n\n\n

Authenticate account access.<\/p>\n\n\n\n

Facilitate future purchases.<\/p>\n\n\n\n

Display relevant order history.<\/p>\n\n\n\n

Manage customer preferences.<\/p>\n\n\n\n

Maintain account security.<\/p>\n\n\n\n

Provide customer support.<\/p>\n\n\n\n

Customers are responsible for protecting their login credentials and should use strong passwords.<\/p>\n\n\n\n

We may implement appropriate security measures to identify suspicious activity and protect accounts from unauthorised access.<\/p>\n\n\n\n

Customers may request correction or deletion of eligible account information, subject to applicable legal and record-retention requirements.<\/p>\n\n\n\n

9. Guest Checkout<\/h2>\n\n\n\n

Where guest checkout is available, customers may place orders without creating a permanent customer account.<\/p>\n\n\n\n

We will nevertheless collect the information necessary to:<\/p>\n\n\n\n

Process payment.<\/p>\n\n\n\n

Confirm the order.<\/p>\n\n\n\n

Arrange fulfilment and delivery.<\/p>\n\n\n\n

Communicate relevant order updates.<\/p>\n\n\n\n

Maintain appropriate financial and transaction records.<\/p>\n\n\n\n

Guest checkout does not remove our obligation or lawful ability to retain relevant purchase records.<\/p>\n\n\n\n

Without certain necessary information, we may be unable to process or deliver an order.<\/p>\n\n\n\n

10. WhatsApp Business Orders and Communications<\/h2>\n\n\n\n

Customers may place orders through Carly Thella Home & D\u00e9cor’s official WhatsApp Business channel.<\/p>\n\n\n\n

When processing WhatsApp orders, we may collect:<\/p>\n\n\n\n

Customer name and contact details.<\/p>\n\n\n\n

Product selections and quantities.<\/p>\n\n\n\n

Delivery details.<\/p>\n\n\n\n

Product preferences and specifications.<\/p>\n\n\n\n

Relevant customer correspondence.<\/p>\n\n\n\n

Order confirmation information.<\/p>\n\n\n\n

Before payment, customers will receive a written order summary, applicable policy links and the total amount payable.<\/p>\n\n\n\n

Once product availability and order details have been confirmed, we will provide a secure payment link through an authorised payment service.<\/p>\n\n\n\n

Orders are processed following successful payment verification and confirmation of the applicable order details.<\/p>\n\n\n\n

WhatsApp is also available for enquiries relating to pending and processing orders<\/strong>.<\/p>\n\n\n\n

Formal returns, refunds, cancellations, damage reports and complaints should be submitted by email, except where another legally valid means of communication or notice must be accepted.<\/p>\n\n\n\n

WhatsApp communications may be processed through Meta’s WhatsApp Business services and authorised communication systems.<\/p>\n\n\n\n

Customers should review the privacy practices of the relevant messaging platform and avoid sending confidential banking credentials, passwords, card PINs or one-time passwords through WhatsApp.<\/p>\n\n\n\n

Placing an order through WhatsApp does not automatically constitute consent to receive unrelated promotional messages.<\/p>\n\n\n\n

11. Payments and Payment Security<\/h2>\n\n\n\n

Payments are processed using the secure payment methods made available through our website or authorised payment links.<\/p>\n\n\n\n

Depending on which services are enabled, these may include:<\/p>\n\n\n\n

PayFast.<\/p>\n\n\n\n

Ozow.<\/p>\n\n\n\n

Stitch Express.<\/p>\n\n\n\n

Payment providers may process financial and authentication information directly in accordance with their own security arrangements and privacy policies.<\/p>\n\n\n\n

Carly Thella Home & D\u00e9cor may receive limited payment-related information such as:<\/p>\n\n\n\n

Transaction reference numbers.<\/p>\n\n\n\n

Payment status.<\/p>\n\n\n\n

Amount paid.<\/p>\n\n\n\n

Payment method category.<\/p>\n\n\n\n

Payment confirmation.<\/p>\n\n\n\n

Refund or dispute information.<\/p>\n\n\n\n

Relevant verification details.<\/p>\n\n\n\n

We do not require customers to disclose banking passwords, card PINs, one-time passwords or other confidential authentication details to our representatives.<\/p>\n\n\n\n

Payment information should be entered only through the relevant authorised and secure payment interface.<\/p>\n\n\n\n

Any limited or masked payment data or payment tokens handled by our systems will be processed according to the relevant security and compliance requirements.<\/p>\n\n\n\n

12. Payment Verification and Fraud Prevention<\/h2>\n\n\n\n

We may process appropriate customer and transaction information to detect, prevent and investigate suspected fraudulent or unauthorised transactions.<\/p>\n\n\n\n

This may include reviewing:<\/p>\n\n\n\n

Order information.<\/p>\n\n\n\n

Transaction amounts.<\/p>\n\n\n\n

Payment references.<\/p>\n\n\n\n

Billing and delivery details.<\/p>\n\n\n\n

Payment provider notifications.<\/p>\n\n\n\n

Customer correspondence.<\/p>\n\n\n\n

Relevant account and security activity.<\/p>\n\n\n\n

Promotional code usage.<\/p>\n\n\n\n

Refund and chargeback records.<\/p>\n\n\n\n

Where lawful and necessary, relevant information may be shared with payment processors, banks, fraud-prevention providers, professional advisers or appropriate authorities.<\/p>\n\n\n\n

Fraud-prevention measures should be proportionate to the circumstances.<\/p>\n\n\n\n

We will not request unnecessary sensitive information solely because an order has a high monetary value.<\/p>\n\n\n\n

13. Delivery, Couriers and Logistics<\/h2>\n\n\n\n

To fulfil customer orders, we may provide necessary information to appointed courier, freight and transport providers.<\/p>\n\n\n\n

This may include:<\/p>\n\n\n\n

Recipient name.<\/p>\n\n\n\n

Delivery address.<\/p>\n\n\n\n

Contact number.<\/p>\n\n\n\n

Order reference.<\/p>\n\n\n\n

Parcel or product information.<\/p>\n\n\n\n

Delivery instructions.<\/p>\n\n\n\n

Relevant access information.<\/p>\n\n\n\n

Courier and logistics providers may collect delivery-related records, including tracking information, recipient acknowledgements, signatures, photographs or proof of delivery.<\/p>\n\n\n\n

These records may be used to:<\/p>\n\n\n\n

Confirm delivery.<\/p>\n\n\n\n

Investigate missing shipments.<\/p>\n\n\n\n

Resolve delivery disputes.<\/p>\n\n\n\n

Verify courier performance.<\/p>\n\n\n\n

Assist with claims or complaints.<\/p>\n\n\n\n

We aim to share only the information reasonably required for the relevant delivery service.<\/p>\n\n\n\n

14. Suppliers and Fulfilment Partners<\/h2>\n\n\n\n

Certain products may be sourced from local or international suppliers.<\/p>\n\n\n\n

Where necessary, limited order information may be shared with authorised suppliers or fulfilment partners to:<\/p>\n\n\n\n

Confirm product availability.<\/p>\n\n\n\n

Verify specifications.<\/p>\n\n\n\n

Arrange production or sourcing.<\/p>\n\n\n\n

Coordinate dispatch.<\/p>\n\n\n\n

Facilitate delivery.<\/p>\n\n\n\n

Where a supplier ships directly to a customer, the information reasonably necessary for that delivery may be provided.<\/p>\n\n\n\n

We do not intentionally disclose unnecessary customer information to suppliers.<\/p>\n\n\n\n

15. Returns, Refunds, Cancellations and Product Claims<\/h2>\n\n\n\n

Customers requesting a return, refund, cancellation or investigation of a product issue may be asked to provide information reasonably necessary to assess the matter.<\/p>\n\n\n\n

This may include:<\/p>\n\n\n\n

Order number.<\/p>\n\n\n\n

Product description.<\/p>\n\n\n\n

Delivery date.<\/p>\n\n\n\n

Product photographs.<\/p>\n\n\n\n

Packaging photographs.<\/p>\n\n\n\n

Relevant video evidence.<\/p>\n\n\n\n

Courier or delivery information.<\/p>\n\n\n\n

Product handling or assembly information.<\/p>\n\n\n\n

Customer correspondence.<\/p>\n\n\n\n

Refund verification details.<\/p>\n\n\n\n

This information may be used to establish the circumstances of a claim, assess available evidence, investigate responsibility and determine an appropriate resolution.<\/p>\n\n\n\n

Where reasonably necessary, relevant information may be shared with suppliers, courier companies, payment providers, insurers or professional advisers.<\/p>\n\n\n\n

We will not request information unrelated to a reasonable investigation.<\/p>\n\n\n\n

Submitting evidence does not automatically determine the outcome of a claim. Each matter will be considered in accordance with our applicable policies and the customer’s statutory rights.<\/p>\n\n\n\n

16. Transactional and Service Communications<\/h2>\n\n\n\n

We may use customer contact information to send communications relating to an existing transaction or requested service.<\/p>\n\n\n\n

These may include:<\/p>\n\n\n\n

Order confirmations.<\/p>\n\n\n\n

Payment notifications.<\/p>\n\n\n\n

Product availability updates.<\/p>\n\n\n\n

Processing and fulfilment updates.<\/p>\n\n\n\n

Supplier or sourcing delays.<\/p>\n\n\n\n

Dispatch confirmations.<\/p>\n\n\n\n

Tracking information.<\/p>\n\n\n\n

Delivery arrangements.<\/p>\n\n\n\n

Requests for outstanding information.<\/p>\n\n\n\n

Refund confirmations.<\/p>\n\n\n\n

Responses to enquiries and complaints.<\/p>\n\n\n\n

These communications are distinct from promotional marketing.<\/p>\n\n\n\n

Customers may still receive essential transactional or legally required communications even if they unsubscribe from marketing, where there is a lawful basis for such communication.<\/p>\n\n\n\n

17. Email Marketing and Direct Marketing<\/h2>\n\n\n\n

We may send marketing communications about:<\/p>\n\n\n\n

New arrivals.<\/p>\n\n\n\n

Seasonal collections.<\/p>\n\n\n\n

Product launches.<\/p>\n\n\n\n

Promotions and special offers.<\/p>\n\n\n\n

Exclusive discounts.<\/p>\n\n\n\n

Product recommendations.<\/p>\n\n\n\n

Store announcements.<\/p>\n\n\n\n

Electronic direct marketing will be carried out in accordance with POPIA and other applicable requirements.<\/p>\n\n\n\n

For unsolicited electronic marketing, we will rely on appropriate consent unless a recognised existing-customer exception applies.<\/p>\n\n\n\n

Where the existing-customer exception is applicable, it is subject to legal conditions, including that contact details were obtained in the context of a sale, the marketing concerns our own similar products or services, and the customer was given the required opportunity to object.<\/p>\n\n\n\n

Marketing messages will provide appropriate sender identification and a method to stop further promotional communication.<\/p>\n\n\n\n

Customers may unsubscribe from marketing communications at any time by using the applicable unsubscribe mechanism or by contacting us.<\/p>\n\n\n\n

An order placed through our website or WhatsApp does not, by itself, authorise unrelated promotional marketing.<\/p>\n\n\n\n

Where we offer promotional WhatsApp messages, these will be subject to applicable consent and messaging requirements.<\/p>\n\n\n\n

Unsubscribing from marketing does not prevent necessary order-related or service communications.<\/p>\n\n\n\n

18. Cookies and Similar Technologies<\/h2>\n\n\n\n

Our website may use cookies and similar technologies to support functionality, security, analytics and marketing.<\/p>\n\n\n\n

18.1 Essential Cookies<\/h3>\n\n\n\n

These support necessary website functions, including:<\/p>\n\n\n\n

Shopping carts.<\/p>\n\n\n\n

Checkout sessions.<\/p>\n\n\n\n

Account authentication.<\/p>\n\n\n\n

Security.<\/p>\n\n\n\n

Session management.<\/p>\n\n\n\n

18.2 Preference Cookies<\/h3>\n\n\n\n

These may remember selected settings or customer preferences where enabled.<\/p>\n\n\n\n

18.3 Analytics Cookies<\/h3>\n\n\n\n

These may help us understand website usage, visitor behaviour, store performance and technical issues.<\/p>\n\n\n\n

18.4 Marketing Cookies<\/h3>\n\n\n\n

Where enabled, these may support advertising measurement, campaign attribution or relevant promotional activities.<\/p>\n\n\n\n

The specific cookies and technologies used may change as website features, plugins and service providers are updated.<\/p>\n\n\n\n

Where legally required, optional cookies or tracking technologies will be subject to appropriate consent or other lawful controls.<\/p>\n\n\n\n

Customers may manage cookies through their browser settings and any cookie preference controls provided on our website.<\/p>\n\n\n\n

Disabling certain cookies may affect shopping cart, checkout, account or other website functionality.<\/p>\n\n\n\n

19. Website Analytics and Advertising Technologies<\/h2>\n\n\n\n

We may use authorised analytics, measurement and advertising services to understand website performance and improve our online store.<\/p>\n\n\n\n

Where enabled, these services may process information such as:<\/p>\n\n\n\n

Website interactions.<\/p>\n\n\n\n

Device identifiers.<\/p>\n\n\n\n

Browser information.<\/p>\n\n\n\n

Referral information.<\/p>\n\n\n\n

Product views.<\/p>\n\n\n\n

Cart activity.<\/p>\n\n\n\n

Purchase-related events.<\/p>\n\n\n\n

Campaign interactions.<\/p>\n\n\n\n

We will use such services subject to applicable privacy, security and consent requirements.<\/p>\n\n\n\n

Analytics information is not necessarily anonymous simply because it is used for statistical or marketing purposes.<\/p>\n\n\n\n

Where analytics or advertising data constitutes personal information, the protections described in this Policy apply.<\/p>\n\n\n\n

20. Customer Reviews and Submitted Content<\/h2>\n\n\n\n

Customers may voluntarily submit product reviews, ratings, feedback or other content.<\/p>\n\n\n\n

Where a review is published, information visible to other website visitors may include the selected display name, rating, review text and other content submitted for publication.<\/p>\n\n\n\n

Customers should avoid including unnecessary personal information in public reviews.<\/p>\n\n\n\n

We may moderate submitted content that is unlawful, fraudulent, abusive, misleading, irrelevant or contains another person’s private information.<\/p>\n\n\n\n

We will not knowingly publish private customer correspondence as a public review without an appropriate lawful basis.<\/p>\n\n\n\n

21. Sharing Personal Information<\/h2>\n\n\n\n

We do not sell or rent customer personal information to third parties for their independent marketing purposes.<\/strong><\/p>\n\n\n\n

We may share personal information with appropriate third parties where reasonably necessary to operate our business, fulfil customer orders, provide services or meet legal obligations.<\/p>\n\n\n\n

These may include:<\/p>\n\n\n\n

Website hosting providers.<\/p>\n\n\n\n

WordPress and WooCommerce technical service providers.<\/p>\n\n\n\n

Payment gateways and banks.<\/p>\n\n\n\n

Courier and logistics companies.<\/p>\n\n\n\n

Suppliers and fulfilment partners.<\/p>\n\n\n\n

Customer communication providers.<\/p>\n\n\n\n

Email marketing platforms.<\/p>\n\n\n\n

Website analytics and security providers.<\/p>\n\n\n\n

Accounting service providers.<\/p>\n\n\n\n

Professional advisers.<\/p>\n\n\n\n

Insurers, where relevant to a claim.<\/p>\n\n\n\n

Regulatory, law-enforcement or other authorities where lawfully required.<\/p>\n\n\n\n

Service providers processing personal information on our behalf are expected to implement appropriate confidentiality and security safeguards.<\/p>\n\n\n\n

Where required, suitable contractual and organisational arrangements will be maintained to regulate the processing.<\/p>\n\n\n\n

We aim to disclose only information reasonably necessary for the relevant purpose.<\/p>\n\n\n\n

22. International Processing and Data Transfers<\/h2>\n\n\n\n

Some technology providers, messaging platforms, payment processors, cloud services, suppliers and other authorised partners may process or store personal information outside South Africa.<\/p>\n\n\n\n

International transfers will be handled in accordance with POPIA, including section 72 where applicable.<\/p>\n\n\n\n

Depending on the circumstances, an international transfer may be permitted where:<\/p>\n\n\n\n

The recipient is subject to adequate legal or contractual protections.<\/p>\n\n\n\n

The individual has provided valid consent.<\/p>\n\n\n\n

The transfer is necessary for a relevant contractual arrangement.<\/p>\n\n\n\n

Another recognised basis under POPIA applies.<\/p>\n\n\n\n

We will take reasonable steps to establish appropriate safeguards where required.<\/p>\n\n\n\n

International processing will be limited to legitimate purposes associated with our business and customer services.<\/p>\n\n\n\n

23. Security of Personal Information<\/h2>\n\n\n\n

We take reasonable and appropriate technical and organisational measures to protect personal information against:<\/p>\n\n\n\n

Unauthorised access.<\/p>\n\n\n\n

Unlawful disclosure.<\/p>\n\n\n\n

Loss or theft.<\/p>\n\n\n\n

Misuse.<\/p>\n\n\n\n

Unauthorised alteration.<\/p>\n\n\n\n

Destruction.<\/p>\n\n\n\n

Unlawful processing.<\/p>\n\n\n\n

Depending on the systems involved, security measures may include:<\/p>\n\n\n\n

Restricted administrative access.<\/p>\n\n\n\n

Password protection.<\/p>\n\n\n\n

Secure website connections.<\/p>\n\n\n\n

Payment provider security controls.<\/p>\n\n\n\n

Appropriate staff or service-provider permissions.<\/p>\n\n\n\n

Software updates.<\/p>\n\n\n\n

Security maintenance.<\/p>\n\n\n\n

Website backups.<\/p>\n\n\n\n

Fraud-prevention measures.<\/p>\n\n\n\n

Monitoring of suspicious activity.<\/p>\n\n\n\n

Confidentiality requirements for authorised service providers.<\/p>\n\n\n\n

Although we take reasonable precautions, no internet-based transmission, website or electronic storage system can guarantee absolute security.<\/p>\n\n\n\n

Customers should also protect their personal devices, passwords and account credentials.<\/p>\n\n\n\n

24. Security Incidents and Data Breaches<\/h2>\n\n\n\n

If we become aware of reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will assess and respond to the incident in accordance with applicable legal requirements.<\/p>\n\n\n\n

Appropriate measures may include:<\/p>\n\n\n\n

Containing the incident.<\/p>\n\n\n\n

Securing affected systems.<\/p>\n\n\n\n

Investigating the circumstances.<\/p>\n\n\n\n

Identifying the personal information involved.<\/p>\n\n\n\n

Assessing the extent of the compromise.<\/p>\n\n\n\n

Reducing the risk of further unauthorised access.<\/p>\n\n\n\n

Implementing corrective security measures.<\/p>\n\n\n\n

Maintaining appropriate incident records.<\/p>\n\n\n\n

Where required under POPIA, we will notify the Information Regulator and affected individuals as soon as reasonably possible after discovery, subject to the requirements and exceptions prescribed by law.<\/p>\n\n\n\n

Notifications will provide appropriate information to help affected individuals take protective measures.<\/p>\n\n\n\n

Customers who suspect unauthorised account access or misuse of their personal information should contact us promptly.<\/p>\n\n\n\n

25. Retention of Personal Information<\/h2>\n\n\n\n

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or as otherwise required or permitted by law.<\/p>\n\n\n\n

Retention periods may depend on the information concerned.<\/p>\n\n\n\n

For example:<\/p>\n\n\n\n

Order and accounting records<\/strong> may be retained for applicable statutory recordkeeping periods.<\/p>\n\n\n\n

Customer service records<\/strong> may be retained while reasonably necessary to respond to enquiries or resolve disputes.<\/p>\n\n\n\n

Refund and payment-dispute records<\/strong> may be retained for lawful verification, compliance and dispute-resolution purposes.<\/p>\n\n\n\n

Account information<\/strong> may be retained while an account remains active or another lawful basis applies.<\/p>\n\n\n\n

Marketing records<\/strong> may be retained while a lawful marketing basis remains and as necessary to honour opt-out preferences.<\/p>\n\n\n\n

Security records<\/strong> may be retained for reasonable security, investigation and compliance purposes.<\/p>\n\n\n\n

Where information is no longer required and no lawful basis for retaining it remains, we will take appropriate steps to delete, destroy or de-identify it.<\/p>\n\n\n\n

A request to delete a customer account does not necessarily require deletion of records that must lawfully be retained.<\/p>\n\n\n\n

26. Accuracy and Updating of Information<\/h2>\n\n\n\n

We take reasonable steps to ensure that personal information is accurate, complete and updated where necessary for its intended purpose.<\/p>\n\n\n\n

Customers should notify us when their contact details, delivery address or other relevant information changes.<\/p>\n\n\n\n

We may request confirmation of certain information where necessary to fulfil an order, investigate a claim or prevent an incorrect delivery.<\/p>\n\n\n\n

Customers may request correction of inaccurate or incomplete personal information in accordance with applicable law.<\/p>\n\n\n\n

27. Your Rights Under POPIA<\/h2>\n\n\n\n

Subject to applicable legal requirements and limitations, individuals may have the right to:<\/p>\n\n\n\n

Confirm whether we hold personal information about them.<\/p>\n\n\n\n

Request access to eligible personal information.<\/p>\n\n\n\n

Request correction of inaccurate or incomplete information.<\/p>\n\n\n\n

Request deletion or destruction of information where legally permissible.<\/p>\n\n\n\n

Object to certain processing.<\/p>\n\n\n\n

Object to direct marketing.<\/p>\n\n\n\n

Withdraw consent where processing relies on consent.<\/p>\n\n\n\n

Request information about relevant processing activities.<\/p>\n\n\n\n

Lodge a complaint about the handling of their information.<\/p>\n\n\n\n

These rights are subject to the requirements and limitations of POPIA and other applicable legislation.<\/p>\n\n\n\n

We may need to verify the identity of a person making a request before disclosing or changing personal information.<\/p>\n\n\n\n

Certain lawful record-retention or other obligations may prevent a request from being fulfilled in full.<\/p>\n\n\n\n

28. Access, Correction, Deletion and Objection Requests<\/h2>\n\n\n\n

Customers wishing to exercise their privacy rights may contact us by email.<\/p>\n\n\n\n

Privacy enquiries:<\/strong> concierge@carlythella.co.za<\/a>
Alternative email:<\/strong> orders@carlythella.co.za<\/a><\/p>\n\n\n\n

To help us identify and process a request, we may ask for:<\/p>\n\n\n\n

Full name.<\/p>\n\n\n\n

Relevant email address.<\/p>\n\n\n\n

Contact number.<\/p>\n\n\n\n

Order number, where applicable.<\/p>\n\n\n\n

A description of the request.<\/p>\n\n\n\n

Information reasonably necessary to verify identity.<\/p>\n\n\n\n

We will not require banking passwords, card PINs or one-time passwords for identity verification.<\/p>\n\n\n\n

Requests will be considered and responded to in accordance with applicable legal requirements.<\/p>\n\n\n\n

Where a request cannot lawfully be fulfilled, we will provide an appropriate explanation where required.<\/p>\n\n\n\n

29. Withdrawal of Consent<\/h2>\n\n\n\n

Where we rely on consent to process personal information, that consent may be withdrawn.<\/p>\n\n\n\n

Withdrawal of consent does not affect processing lawfully carried out before the withdrawal.<\/p>\n\n\n\n

We may continue processing or retaining information where another lawful basis or legal obligation applies.<\/p>\n\n\n\n

Customers wishing to withdraw marketing consent may use the unsubscribe mechanism provided or email:<\/p>\n\n\n\n

concierge@carlythella.co.za<\/strong><\/a><\/p>\n\n\n\n

We will take appropriate steps to update marketing preferences.<\/p>\n\n\n\n

30. Children’s Personal Information<\/h2>\n\n\n\n

Our website and products are primarily intended for adult customers.<\/p>\n\n\n\n

We do not knowingly process children’s personal information for independent commercial transactions without an appropriate lawful basis or authorisation.<\/p>\n\n\n\n

Where we become aware that a child’s personal information has been collected or processed unlawfully, we will take appropriate corrective steps.<\/p>\n\n\n\n

Where information relating to children must be processed for a legitimate purpose, the relevant requirements of POPIA will apply.<\/p>\n\n\n\n

31. Third-Party Websites and External Services<\/h2>\n\n\n\n

Our website may contain links to external websites and services, including:<\/p>\n\n\n\n

Payment providers.<\/p>\n\n\n\n

Courier services.<\/p>\n\n\n\n

Social media platforms.<\/p>\n\n\n\n

External customer communication services.<\/p>\n\n\n\n

Other third-party websites.<\/p>\n\n\n\n

These services may process personal information according to their own privacy notices and terms.<\/p>\n\n\n\n

We encourage customers to review the relevant third-party privacy information.<\/p>\n\n\n\n

Carly Thella Home & D\u00e9cor is not responsible for independent third-party practices that are outside our control, except where responsibility arises from our own conduct or applicable legal obligations.<\/p>\n\n\n\n

32. Changes to This Privacy Policy<\/h2>\n\n\n\n

We may update this Privacy Policy to reflect changes in:<\/p>\n\n\n\n

Business operations.<\/p>\n\n\n\n

Website functionality.<\/p>\n\n\n\n

Service providers.<\/p>\n\n\n\n

Payment arrangements.<\/p>\n\n\n\n

Technology and security systems.<\/p>\n\n\n\n

Legal requirements.<\/p>\n\n\n\n

Personal information processing practices.<\/p>\n\n\n\n

The revised Policy will be published on our website with an updated effective or review date.<\/p>\n\n\n\n

Where a material change requires additional notification or consent, we will take appropriate steps.<\/p>\n\n\n\n

Updates will not retrospectively authorise processing that was unlawful when undertaken.<\/p>\n\n\n\n

We encourage customers to review this Policy periodically.<\/p>\n\n\n\n

33. Privacy Complaints and Dispute Resolution<\/h2>\n\n\n\n

If you have concerns about how Carly Thella Home & D\u00e9cor collects, uses or protects your personal information, please contact us by email.<\/p>\n\n\n\n

Privacy complaints:<\/strong> concierge@carlythella.co.za<\/a><\/p>\n\n\n\n

We will review the matter and take appropriate steps to investigate and respond.<\/p>\n\n\n\n

Customers may also lodge a complaint with the Information Regulator of South Africa where applicable.<\/p>\n\n\n\n

Information Regulator of South Africa<\/strong><\/p>\n\n\n\n

Website: https:\/\/inforegulator.org.za<\/a><\/p>\n\n\n\n

Nothing in this Privacy Policy prevents an individual from exercising an applicable statutory right or pursuing an authorised complaint process.<\/p>\n\n\n\n

34. Contact and Business Information<\/h2>\n\n\n\n

For privacy questions, access requests, corrections, deletion requests, objections or other personal information enquiries, please contact:<\/p>\n\n\n\n

Carly Thella Pty Ltd<\/strong>
Trading as Carly Thella Home & D\u00e9cor<\/strong><\/p>\n\n\n\n

Administrative office: Ballito, KwaZulu-Natal, South Africa.<\/p>\n\n\n\n

Dispatch operations: Pinetown, KwaZulu-Natal, South Africa.<\/p>\n\n\n\n

Email:<\/strong> concierge@carlythella.co.za<\/a>
Alternative Email:<\/strong> orders@carlythella.co.za<\/a><\/p>\n\n\n\n

WhatsApp Business:<\/strong> +27 83 684 0853
For WhatsApp orders and pending or processing order enquiries.<\/p>\n\n\n\n

Website:<\/strong> https:\/\/carlythella.co.za<\/a><\/p>\n\n\n\n

Formal returns, refunds, cancellations, product damage reports and complaints should be submitted by email, except where another legally valid notice method must be accepted.<\/p>\n\n\n\n

Privacy-related requests may also be submitted through the email addresses above.<\/p>\n\n\n\n

35. Final Provisions<\/h2>\n\n\n\n

This Privacy & Personal Information Protection Policy is intended to provide clear information about how Carly Thella Home & D\u00e9cor handles personal information and to support compliance with POPIA.<\/p>\n\n\n\n

It should be read together with our other applicable website policies.<\/p>\n\n\n\n

Nothing in this Policy is intended to exclude, restrict or waive any statutory right or protection that cannot lawfully be excluded.<\/p>\n\n\n\n

Where a provision is inconsistent with applicable South African law, the relevant legal requirements will take precedence.<\/p>\n\n\n\n

\n\n\n\n

Carly Thella Home & D\u00e9cor<\/strong>
Thoughtfully Sourced. Beautifully Curated.<\/em><\/p>\n\n\n\n

Website:<\/strong> https:\/\/carlythella.co.za<\/a>
Privacy Enquiries:<\/strong> concierge@carlythella.co.za<\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

PRIVACY & PERSONAL INFORMATION PROTECTION POLICY Carly Thella Home & D\u00e9corOperated by Carly Thella Pty LtdWebsite: https:\/\/carlythella.co.za Introduction At Carly Thella Home & D\u00e9cor, we respect your privacy and are committed to protecting your personal information. We recognise the importance of maintaining the confidentiality, security and integrity of the information entrusted to us by our […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/carlythella.co.za\/Staging\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carlythella.co.za\/Staging\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/carlythella.co.za\/Staging\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/carlythella.co.za\/Staging\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/carlythella.co.za\/Staging\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":16,"href":"https:\/\/carlythella.co.za\/Staging\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":11414,"href":"https:\/\/carlythella.co.za\/Staging\/wp-json\/wp\/v2\/pages\/3\/revisions\/11414"}],"wp:attachment":[{"href":"https:\/\/carlythella.co.za\/Staging\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}