Privacy Policy

1. Introduction

Brandful (Pty) Ltd (“Brandful”, “we”, “us”, or “our”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

This policy is compliant with the Protection of Personal Information Act 4 of 2013 (“POPIA”) of South Africa. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

We collect information that you provide directly to us, including:

• Identity Information: First name, last name, company name, job title
• Contact Information: Email address, phone number, physical address
• Account Information: Username, password (encrypted), account preferences
• Transaction Information: Order history, quote requests, payment details (processed securely via third-party providers)
• Communication Information: Correspondence with our team, feedback, and support requests
• Emails We Send You: A record of the emails we send you about your account, enquiries and quotes, and your answer if you use one of the one-click options in those emails
• Brand Assets: Logos and artwork you upload for branding purposes

We also automatically collect certain information when you visit our website:

• Device Information: Browser type, operating system, device identifiers
• Usage Information: Pages visited, time spent, click patterns
• Products You View While Signed In: When you are signed in to your Brandful account, we record which products you look at, how often and when, and keep this with your account. We do not link this to you when you are not signed in.
• Location Information: IP address, approximate geographic location

3. How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfil your orders and quote requests
• To communicate with you about your orders, quotes, and account
• To provide customer support and respond to enquiries
• To follow up on your enquiries and quotes, and to help you find the right products based on what you have viewed while signed in
• To personalise your experience and provide product recommendations
• To improve our website, products, and services
• To send promotional communications (with your consent)
• To comply with legal obligations
• To detect and prevent fraud or security issues

4. Legal Basis for Processing (POPIA)

Under POPIA, we process your personal information based on:

• Consent: Where you have given explicit consent for specific purposes
• Contract: Where processing is necessary to fulfil our contractual obligations
• Legal Obligation: Where processing is required by law
• Legitimate Interest: Where processing is necessary for our legitimate business interests, provided these do not override your rights

5. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties who assist with payment processing, shipping, and IT services
• Suppliers: Our promotional product suppliers (e.g., Amrod) to fulfil your orders
• Business Partners: Branding and printing partners for product customization
• Legal Authorities: When required by law, court order, or to protect our rights

We do not sell your personal information to third parties. All third parties are contractually obligated to protect your information and use it only for the purposes we specify.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Secure password hashing
• Regular security assessments
• Access controls and authentication
• Secure cloud infrastructure

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order and transaction records are retained for 7 years for tax and legal compliance purposes.

The record of products you have viewed while signed in is kept for as long as your account is active. You can ask us to delete it at any time without closing your account.

8. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right to Access: Request a copy of your personal information
• Right to Correction: Request correction of inaccurate information
• Right to Deletion: Request deletion of your information (subject to legal requirements)
• Right to Object: Object to processing for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: Lodge a complaint with the Information Regulator

To exercise any of these rights, please contact us using the details below.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience. These include:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: