Privacy Policy

Last updated: 3 October 2026

1. Who we are

Little Petal Co (“we”, “us”, “our”) is an online store based in Bryanston, Johannesburg, South Africa, selling baby gifts, clothing and accessories through littlepetalco.co.za. We are the “responsible party” for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

For any privacy questions or requests, contact us at hello@littlepetalco.co.za or +27 82 903 1138.

2. What we collect

When you order: your name, email address, phone number, billing and delivery address, order details, and any gift message or gift-wrap request. Gift recipients’ names and addresses are included where you give them to us.
When you buy or send a gift card: the recipient’s name and email address.
When you contact us: whatever you include in your message, whether through our contact form, email or WhatsApp.
When you sign up to our newsletter: your email address and your marketing preferences.
When you leave a review: your name and the review content.
When you browse the site: technical information such as your IP address, browser type, the pages you visit, and cookie data (see section 7).

We do not take or store your full card details. Payments are processed directly by our payment provider.

3. Why we use it

We use your information:

to process, deliver and support your orders, including gift wrapping and gift messages;
to answer your questions;
to send order and delivery updates;
to ask for a review after you’ve bought something;
to send marketing emails, but only if you’ve opted in, and you can unsubscribe at any time;
to keep our site secure and prevent fraud;
to understand how people use our site so we can improve it;
to meet our legal and tax obligations.

We only process your information where we have a lawful reason to: to carry out your order, with your consent, to meet a legal obligation, or for our legitimate interests as a small business.

4. Who we share it with

We only share what’s needed, with:

payment providers such as Yoco, to process your payment;
courier companies, to deliver your order;
Mailchimp, for newsletters, if you’ve subscribed;
Meta (Facebook and Instagram), for advertising and measuring how our ads perform;
our website hosting, email-delivery and e-commerce software providers;
authorities, where the law requires it.

We never sell your personal information.

5. Information sent outside South Africa

Some of these providers, such as Mailchimp and Meta, store information outside South Africa. Where this happens, we rely on those providers having adequate data protection safeguards in place, as POPIA requires.

6. How long we keep it

We keep order records for as long as tax law requires, currently five years. We keep marketing data until you unsubscribe. Everything else is kept only for as long as we need it for the purposes above.

7. Cookies

Our site uses cookies to keep your shopping cart working, to remember your preferences, and, with analytics and advertising tools such as the Meta Pixel, to understand how people use the site and how our ads perform. You can block or delete cookies in your browser settings, but parts of the site, like the cart, may then stop working.

8. Keeping it safe

We take reasonable technical and organisational steps to protect your information, including a secure (SSL) connection, security software on our website, and limiting who can access it. If a data breach affects you, we will notify you and the Information Regulator as POPIA requires.

9. Children’s information

Our customers are adults. We only process information about babies or children, such as a name in a gift message, when a parent or gift-giver chooses to give it to us, and only to fulfil that order.

10. Your rights

Under POPIA you can:

ask what personal information we hold about you;
ask us to correct or delete it;
object to us processing it;
withdraw your consent to marketing at any time.

To do any of these, email hello@littlepetalco.co.za. If you’re unhappy with how we’ve handled your information, you can complain to the Information Regulator at inforegulator.org.za.