This Privacy Policy describes how Laurence Garrett (“we”, “us”, “our”) collects, uses, stores, and protects your Personal Information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa when you visit or make a purchase from www.laurencegarrett.co.za.
1. RESPONSIBLE PARTY
For the purpose of POPIA, Laurence Garrett is the “Responsible Party” determining how and why your personal information is processed.
- Website: www.laurencegarrett.co.za
- Contact Email: hello@laurencegarrett.co.za
2. WHAT PERSONAL INFORMATION WE COLLECT
We only collect personal information that is strictly necessary to process your digital orders, deliver your assets, and maintain site functionality:
- Identity & Contact Data: Name, surname, billing address, email address, and phone number.
- Order & Transaction Data: Products purchased, purchase totals, IP address, device/browser details, and transaction timestamps.
- Technical Data & Cookies: Cookies to track cart items, manage user sessions, and remember site preferences.
- User Content: Comments, reviews, or query forms submitted directly by you.
Note: We do not collect, process, or store credit card numbers, banking details, or sensitive financial information on our servers.
3. PURPOSE & LEGAL BASIS FOR PROCESSING
We process your Personal Information under the following legal bases recognized by POPIA:
| Purpose of Processing | Data Used | Legal Basis (POPIA) |
| Order Fulfillment: Generating and emailing instant digital download links. | Name, Email, Order Details | Contractual Necessity |
| Payment Processing & Fraud Prevention: Verifying transactions securely via PayFast. | Billing Address, Purchase Total, IP | Contractual Necessity & Legitimate Interest |
| Tax & Accounting Compliance: Retaining sale records for SARS legal audits. | Billing Records, Invoice Data | Legal Obligation |
| Site Functionality & Security: Managing shopping carts, user logins, and preventing spam. | Cookies, IP Address, Browser Data | Legitimate Interest |
4. SHARING DATA WITH THIRD PARTIES (OPERATORS)
We never sell, rent, or trade your personal information. To fulfill your orders and operate our site, we share limited data with trusted third-party service providers (“Operators”) who comply with POPIA’s security standards:
- Payment Gateways (PayFast): When you check out, your billing details and purchase total are transmitted securely to PayFast to process the payment. View the PayFast Privacy Policy.
- Web Hosting & Infrastructure: Our site host and automated email service process your email address strictly to deliver your purchased vector files.
- Spam Detection: Visitor comments and form submissions may be checked through automated spam detection services.
5. DATA RETENTION
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:
- Tax & Accounting Records: Sales transaction records are retained for 5 years to comply with South African tax laws (SARS regulations).
- User Accounts & Comments: Comment metadata and registered account profiles are retained until you request their removal.
6. DATA SECURITY SAFEGUARDS
We implement appropriate technical and organizational measures to safeguard your personal information against unauthorized access, loss, or misuse, including SSL (Secure Sockets Layer) encryption across the entire website.
7. YOUR DATA RIGHTS UNDER POPIA
Under POPIA, you have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct or update any inaccurate or incomplete personal information.
- Objection & Deletion: Request that we erase or stop processing your personal information (subject to legal retention obligations like SARS record-keeping).
- Complain: Lodge a complaint with the South African Information Regulator if you believe your privacy rights have been infringed (enquiries@inforegulator.org.za).
To exercise any of these rights, please email us directly at hello@laurencegarrett.co.za