Privacy Policy

Privacy Policy: Toaster Bath & Co.
Last updated: 7 November 2026

We collect as little as we can, look after it properly and never sell it. This policy explains what personal information we collect, why, who we share it with, and your rights under the Protection of Personal Information Act (POPIA).

1. Who we are
Toaster Bath & Co. is a sole proprietorship owned by Cheyenne Savage-Stone, 55 1st Street, Linden, Johannesburg. We are the responsible party for your personal information. Our Information Officer is Cheyenne Savage-Stone: hello@toasterbathco.co.za or +27 61 877 1661.

2. What we collect
• When you order: your name, email address, phone number, delivery and billing address, what you bought and your order history.
• Payments: handled by our payment providers, such as Paystack. We never see or store your full card details.
• Custom orders: your brief and any text, photos or reference images you send us.
• Newsletter: your name and email address, if you sign up.
• Account: your login details and wishlist, if you create an account on our site.
• When you contact us: your messages by email, WhatsApp, our contact form or social media.
• When you browse: your device, browser, the pages you visit and how you found us, collected through cookies (section 6).
• At markets: the details our payment provider collects if you pay by payment link.

3. Why we use it
• To process, make and deliver your order, and handle returns and refunds.
• To talk to you about your order and answer your questions.
• To send our newsletter and offers, only if you've signed up or are an existing customer who hasn't opted out. Every email has an unsubscribe link.
• To understand how our website is used and make it better.
• To measure and show our ads on Meta (Facebook and Instagram), TikTok and Google, using cookies (section 6).
• To prevent fraud and keep the records the law requires, such as tax records.

4. Who we share it with
We share only what each provider needs to do its job:
• Payment providers, such as Paystack, to take payment.
• Our courier, to deliver your parcel (your name, phone number and delivery address).
• Our printing and framing partners, to make your order.
• Wix, which hosts our website and online store.
• Mailchimp, which sends our newsletter.
• Meta, TikTok and Google, for advertising and analytics.
• Authorities, if the law requires it.
We never sell or rent your personal information.

5. Information sent outside South Africa
Some of these providers, including Wix, Mailchimp, Meta, TikTok and Google, store information on servers outside South Africa. As section 72 of POPIA requires, we only use providers bound by laws or agreements that give your information a similar level of protection.

6. Cookies
Cookies are small files stored on your device. We use:
• Essential cookies to run the site, your cart and checkout. These can't be switched off.
• Analytics cookies (Google Analytics) to see how the site is used.
• Advertising cookies (Meta Pixel, TikTok Pixel and Google Ads) to measure our ads and show you relevant ones.
By using our website, you agree to us using these cookies. You can block or delete cookies at any time in your browser settings, and choose how ads are personalised in your Meta, TikTok and Google account settings. If you block essential cookies, the cart and checkout may not work.

7. How long we keep it
• Order and payment records: as long as tax and accounting law requires, usually five years.
• Custom order files: only as long as we need them for your order and any reprint you ask for.
• Newsletter details: until you unsubscribe.
• Messages: as long as we need them to help you.
After that, we delete it or make it anonymous.

8. How we protect it
We take reasonable technical and organisational steps to keep your information safe, and only people who need it can access it. If your information is ever compromised, we'll tell you and the Information Regulator as POPIA requires.

9. Your rights
You have the right to:
• ask what information we hold about you, and get a copy;
• ask us to correct or delete it;
• object to how we use it, including for marketing;
• withdraw your consent at any time;
• complain to the Information Regulator.
Email hello@toasterbathco.co.za and we'll respond within 30 days. If you're not happy with our answer, contact the Information Regulator: inforegulator.org.za, enquiries@inforegulator.org.za, or complaints to POPIAComplaints@inforegulator.org.za.

10. Children
Our site isn't aimed at children under 18, and we don't knowingly collect their information. If you think a child has given us their details, email us and we'll delete them.

11. Changes to this policy
We may update this policy from time to time. The latest version is always on our website, with the date it was updated.