Privacy policy

Policy

Consumer Data Privacy Policy

This Privacy Policy sets out how we collect, use, store, share and protect personal information when you visit or use the website, register an account, place orders, make payments for purchases or contact us.

01

Data Controller

The data controller for this website is:

Business Name
THABISO MOHAPI trading as ORELEKAMO PROPERTY GROUP
Email
Telephone
+27 73 498 1551
Address
3122 Makhasane Street, Rocklands, Bloemfontein, South Africa
Responsible Person
THABISO MOHAPI

We process personal information in compliance with the Protection of Personal Information Act 4 of 2013 of South Africa ("POPIA") and other applicable legislation.


02

Information We Collect

Depending on how you use the website, we may collect the following information:

Information You Provide Directly

  • Full name
  • Email address
  • Contact telephone number
  • Delivery address and billing address
  • Account login credentials and account profile information
  • Order, return, refund and exchange information
  • Product size, colour and shopping preferences
  • Emails, messages and complaints submitted to customer service
  • Promotion subscription and marketing preferences
  • Other information you voluntarily provide

Transaction and Payment Information

We may collect data including order amount, payment status, transaction reference number, payment time and payment method category.

Full bank card numbers, security codes and other complete payment credentials are processed directly by authorised payment service providers. We do not collect or store full bank card details on our systems.

Automatically Collected Information

When you access the website, we may automatically collect:

  • IP address
  • Browser and device type
  • Operating system
  • Date and time of access
  • Browsed pages and click records
  • Referral URL
  • Data generated by Cookies and similar technologies
  • Information relating to website security, error diagnostics and fraud prevention

03

Purposes for Processing Personal Information

We may process personal information for the following purposes:

  • Create and manage customer accounts
  • Receive, confirm and fulfil orders
  • Process payments, refunds, returns and exchanges
  • Arrange delivery and provide order tracking
  • Communicate with customers regarding orders or customer service matters
  • Verify identity, transaction and delivery information
  • Prevent fraud, misuse, security incidents and unlawful transactions
  • Maintain, analyse and improve the website and services
  • Manage inventory, financial records and business operations
  • Comply with tax, accounting, consumer protection and other legal obligations
  • Handle complaints, disputes and legal requests
  • Send marketing communications where appropriate consent has been obtained or permitted by law

04

Legal Bases for Processing Personal Information

We process personal information only where a valid legal basis exists, including:

  • Performance of a sales contract with the customer
  • Pre-contractual measures taken at the customer's request
  • Compliance with legal obligations
  • Consent obtained from the customer
  • Protection of the legitimate interests of the customer or other persons
  • Processing necessary for conducting reasonable and proper business activities, without unreasonably infringing upon the customer's privacy rights

05

Cookies and Similar Technologies

We may use Cookies and similar technologies to:

  • Preserve shopping cart contents and login status
  • Remember user preferences
  • Facilitate secure checkout
  • Analyse website traffic and performance
  • Diagnose errors and prevent fraud
  • Deliver marketing content upon obtaining necessary consent

Customers may block or delete Cookies via browser settings. Disabling essential Cookies may impair the normal functionality of the shopping cart, account login or checkout processes.


06

Sharing of Personal Information

We do not sell your personal information.

To operate the online store, we may share information to the extent necessary with the following parties:

  • Payment gateways, banks and payment processors
  • Delivery and logistics service providers
  • Website hosting, cloud storage and technology service providers
  • Email, SMS and customer service providers
  • Accounting, auditing, insurance and professional consultants
  • Fraud prevention, identity verification and cybersecurity service providers
  • Courts, law enforcement authorities or regulatory bodies legally entitled to obtain information
  • Other third parties authorised by you

Such third parties may only process information for the purposes of delivering agreed services or as permitted by law, and shall implement appropriate confidentiality and security measures.


07

Cross-Border Transfers

Some website, payment, cloud storage, analytics or communication service providers may process or store personal information outside South Africa.

Where cross-border transfers occur, we will take reasonable measures in accordance with applicable laws to ensure recipients are bound by adequate data protection obligations, or confirm that the transfer is supported by another valid legal basis.


08

Data Retention Periods

We retain personal information only for the period necessary to fulfil the purposes for which it was collected, perform contracts, resolve disputes, or satisfy legal, tax, accounting and regulatory requirements.

Generally:

  • Orders, transactions, invoices and tax records are retained for periods required under applicable South African law
  • Customer service and complaint records are kept until matters are resolved and applicable limitation periods expire
  • Marketing-related records are retained until the customer unsubscribes or withdraws consent
  • Account information is stored until account closure and the expiry of mandatory retention periods
  • Security logs are retained as required for fraud prevention and cybersecurity purposes

Upon expiry of the retention period, we will securely delete, destroy or anonymise relevant information, unless continued retention is required by law.


09

Information Security

We implement reasonable technical and organisational measures to protect personal information, including:

  • Encrypted connections for the website and checkout processes
  • Restricting access to information for staff and service providers
  • Implementing authentication, access controls and password protection
  • Conducting system security updates, backups and risk monitoring
  • Entering into appropriate data protection and confidentiality arrangements with service providers
  • Investigating and responding to suspected personal information breaches

No internet transmission or electronic storage method can guarantee absolute security.

In the event of an incident potentially compromising personal information security, we will take action in accordance with applicable law and notify affected individuals and the South African Information Regulator where necessary.


10

Customer Rights in Respect of Personal Information

Subject to conditions under POPIA and other applicable laws, customers may:

  • Enquire whether we hold their personal information
  • Request access to their personal information
  • Request correction of inaccurate, incomplete or outdated information
  • Request deletion or destruction of information that is no longer needed or unlawfully processed
  • Object to certain processing of personal information
  • Withdraw previously provided consent
  • Object to or opt out of direct marketing
  • Lodge a complaint with the South African Information Regulator

To prevent unauthorised disclosure of information, we may verify the identity of applicants prior to handling requests.


11

Direct Marketing

We will send promotional communications via email, SMS or other electronic channels only where appropriate consent has been obtained or permitted by law.

Customers may at any time:

  • Click the unsubscribe link within marketing emails
  • Reply to messages to request cessation of communications
  • Send an email to
  • Call +27 73 498 1551

Opting out of marketing communications will not affect essential service communications including order confirmations, payment notifications, delivery updates and security alerts.


12

Personal Information of Children

This website is not targeted primarily at children.

We will not knowingly collect personal information from children without appropriate authorisation or other valid legal grounds. If you believe a child has provided us with personal information without proper consent, please contact us via the contact details set out in this Policy.


13

Third-Party Links

This website may contain links to third-party websites or services. Third parties maintain their own privacy policies and security measures, and we are not responsible for their information processing activities.

Customers are advised to review the privacy policies of third parties before disclosing personal information to them.


14

Updates to this Privacy Policy

We may update this Policy to reflect changes in business, technical or legal requirements.

The updated version will be published on the website with a new Last Updated date. Where updates materially impact customer rights, we will notify customers via website announcements, email or other reasonable means where appropriate.


15

Contact and Complaints

If you wish to access, correct or delete personal information, withdraw marketing consent, or raise questions or complaints regarding this Policy, please contact:

Business Name
THABISO MOHAPI trading as ORELEKAMO PROPERTY GROUP
Email
Telephone
+27 73 498 1551
Address
3122 Makhasane Street, Rocklands, Bloemfontein, South Africa
Information Officer & Responsible Person
THABISO MOHAPI

Last updated: 27 October 2026