Privacy Policy

Privacy Policy for Card King

Last Updated: 10 September 2025

At Card King, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act (POPIA) and other applicable laws in South Africa.By using our website www.cardking.co.za and/or making a purchase, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our site or services.

1. Information We Collect

We collect personal information to provide you with a better shopping experience and to fulfill your orders. The types of information we may collect include:
  • Personal Information:
    • Name, email address, phone number, billing address, and shipping address provided when you create an account, place an order, or contact us.
    • Payment information (e.g., credit card details), which is processed securely through our payment gateway and not stored on our servers.
  • Automatically Collected Information:
    • IP address, browser type, device information, and browsing behavior (e.g., pages visited, time spent on the site) collected through cookies, web beacons, or similar technologies.
    • Transaction details, such as order history and purchase amounts.
  • Voluntary Information:
    • Information you provide through customer support inquiries, reviews, surveys, or newsletter subscriptions.
2. How We Collect Information

We collect information in the following ways:
  • Directly from You: When you sign up for an account, place an order, fill out a contact form, or subscribe to our newsletter.
  • Automatically: Through cookies, analytics tools (e.g., Google Analytics), and Shopify’s platform features when you interact with our website.
  • From Third Parties: From service providers like payment processors, shipping companies, or marketing partners, where necessary to fulfill orders or improve our services.
3. How We Use Your Information

We use your personal information for the following purposes:
  • Order Processing: To process and fulfill your orders, including sending order confirmations, shipping updates, and invoices.
  • Customer Support: To respond to your inquiries, provide assistance, and resolve issues.
  • Marketing and Communications: To send you promotional emails, newsletters, or personalized offers (only with your consent, where required).
  • Website Improvement: To analyze website usage, improve our services, and enhance your shopping experience.
  • Legal Compliance: To comply with legal obligations, such as tax reporting or fraud prevention.
  • Security: To protect against unauthorized access, fraud, or other illegal activities.
4. Legal Basis for Processing

Under POPIA, we process your personal information based on the following legal grounds:
  • Consent: Where you have given explicit consent (e.g., for marketing emails).
  • Contractual Necessity: To fulfill our obligations under a contract, such as processing your order.
  • Legal Obligation: To comply with South African laws or regulations.
  • Legitimate Interests: For purposes like improving our website, preventing fraud, or analyzing customer behavior, provided these interests do not override your rights.
5. Sharing Your Information

We may share your personal information with:
  • Service Providers: Third parties that assist with payment processing (e.g., PayFast, Stripe), shipping (e.g., couriers), or marketing (e.g., email platforms like Mailchimp). These providers are contractually obligated to protect your data.
  • Shopify: Our store is hosted on Shopify Inc., which processes data to provide e-commerce services. Shopify’s Privacy Policy can be found at https://www.shopify.com/legal/privacy.
  • Legal Authorities: When required by law, such as in response to a court order or to prevent fraud.
  • Business Transfers: In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new entity.
We do not sell or rent your personal information to third parties for marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze website performance, and deliver personalized content. Cookies may include:
  • Essential Cookies: Necessary for the website to function (e.g., maintaining your cart).
  • Analytics Cookies: To track website usage and performance.
  • Marketing Cookies: To deliver relevant ads or promotions.
You can manage cookie preferences through your browser settings or our website’s cookie consent tool (if applicable). Note that disabling cookies may affect your experience on our site.7. Data Storage and Security

We store your personal information securely using industry-standard measures, including encryption and secure servers. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.Your data is stored on Shopify’s servers, which may be located outside South Africa. Shopify complies with international data protection standards, and we ensure that any cross-border data transfers comply with POPIA requirements.

8. Your Rights Under POPIA

As a South African resident, you have the following rights regarding your personal information:
  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal obligations.
  • Objection: Object to the processing of your data for certain purposes, such as marketing.
  • Restriction: Request that we restrict the processing of your data in certain cases.
  • Data Portability: Request a copy of your data in a structured, commonly used format.
To exercise these rights, please contact us at nick@cardking.co.za or www.cardking.co.za/pages/contact.
We will respond within a reasonable timeframe, as required by POPIA.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. For example:
  • Order-related data is kept for 5 years to comply with tax and accounting laws.
  • Marketing data is retained until you unsubscribe or request deletion.
10. International Data Transfers

As a Shopify-hosted store, some of your data may be processed or stored outside South Africa (e.g., in the United States or Canada). We ensure that any international transfers comply with POPIA and that appropriate safeguards, such as standard contractual clauses, are in place.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. Please review their privacy policies before sharing personal information.

12. Updates to This Privacy PolicyWe may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with the “Last Updated” date. We encourage you to review this policy periodically.