Privacy policy

Privacy Policy

Last Updated: 24 June 2026

Welcome to Tiny Treasure Co. We are committed to protecting your privacy and handling your personal information responsibly and in accordance with applicable South African laws, including the Protection of Personal Information Act, 2013 (POPIA).

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website or make a purchase from us.

1. Information We Collect

We may collect the following personal information when you use our website or place an order:

Full name
Email address
Telephone number
Billing and delivery addresses
Payment information (processed securely by our payment service providers)
Order history
Communications with our customer support team
IP address, browser type, device information, and website usage data collected through cookies or similar technologies

You may also voluntarily provide additional information when contacting us.

2. How We Use Your Information

We use your personal information to:

Process and fulfil your orders
Deliver products to you
Communicate about your purchases
Respond to enquiries and customer service requests
Process refunds and returns
Improve our website, products, and services
Detect and prevent fraud or unauthorised activity
Comply with legal and regulatory obligations
Send marketing communications where you have consented or where permitted by law

3. Payment Information

We do not store your full payment card details on our servers.

Payments are securely processed by trusted third-party payment providers using industry-standard security measures. These providers process your payment information according to their own privacy policies and applicable legal requirements.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

Remember your preferences
Enable website functionality
Analyse website traffic and performance
Improve your browsing experience
Support marketing and advertising activities

You can disable cookies through your browser settings, although some website features may not function properly.

5. Sharing Your Information

We do not sell your personal information.

We may share your information with trusted third parties where necessary, including:

Courier and delivery companies
Payment processors
Website hosting providers
IT and security service providers
Marketing service providers (where applicable)
Professional advisers or regulators where legally required

These parties may only process your information for authorised purposes and are expected to protect it appropriately.

6. Marketing Communications

If you subscribe to our newsletter or choose to receive promotional communications, we may send you updates about products, offers, and news.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in our communications or by contacting us directly.

7. Data Security

We take reasonable technical and organisational measures to safeguard your personal information against loss, misuse, unauthorised access, alteration, or disclosure.

While we strive to protect your information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

8. Data Retention

We retain personal information only for as long as reasonably necessary to:

Fulfil the purposes described in this Privacy Policy;
Comply with legal, accounting, tax, or regulatory obligations;
Resolve disputes; or
Enforce our agreements.

When information is no longer required, we will securely delete or de-identify it where appropriate.

9. Your Rights

Subject to applicable law, you may have the right to:

Request access to your personal information;
Request correction of inaccurate or incomplete information;
Request deletion of information where legally permissible;
Object to certain processing activities;
Withdraw consent where processing is based on consent; and
Lodge a complaint with the relevant supervisory authority if you believe your rights have been infringed.

We will consider and respond to such requests in accordance with applicable legal requirements.

10. Children's Privacy

Our website is intended for use by adults purchasing baby and children's products. We do not knowingly collect personal information directly from children.

If we become aware that personal information has been collected from a child without appropriate legal authority, we will take reasonable steps to delete it.

11. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external websites. We encourage you to review their privacy policies before providing personal information.

12. International Processing

Some of our service providers may process personal information outside South Africa. Where this occurs, we will take reasonable steps to ensure that appropriate safeguards are in place and that such processing complies with applicable data protection laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be published on this page with the revised "Last Updated" date.