Privacy policy

Last updated: 7 September 2026

SOF SERVE operates this store and website, including all related information, content, features, tools, products and services (collectively, the "Services"), to provide you with a curated shopping experience.

SOF SERVE uses Shopify to provide and operate the Services. This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, use our Services, purchase our products, or otherwise communicate with us.

We respect your privacy and are committed to processing your personal information responsibly and in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 ("POPIA").

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

"Personal information" means information that identifies you or can reasonably be linked to you.

Depending on how you interact with our Services, we may collect:

Contact information, including your name, email address, telephone number, billing address and delivery address.
Payment and transaction information, including payment method, transaction details, payment confirmations and information required to process your order. Payment card details may be processed directly by our payment service providers.
Account information, where applicable, such as your account details, preferences and settings.
Order information, including products you view, add to your cart, purchase, return, exchange or cancel.
Communications, including information you provide when contacting us with questions, complaints or customer-service requests.
Device and technical information, including your IP address, browser type, device type, operating system and network information.
Usage information, including information about how you interact with and navigate our website.
Cookie and similar technology information, as described below.

We only collect and process personal information that is reasonably necessary for the purposes described in this Privacy Policy or otherwise permitted by applicable law.

2. How We Collect Personal Information

We may collect personal information:

Directly from you when you place an order, create an account, contact us, subscribe to communications or otherwise provide information to us.
Automatically when you browse or use our website through cookies and similar technologies.
From Shopify and other service providers that assist us in operating our store.
From payment providers, delivery companies and other third parties where necessary to provide our Services.
From other third parties where permitted by applicable law.

3. How We Use Your Personal Information

We may use your personal information to:

Process and fulfill your orders.
Process payments and confirm transactions.
Arrange delivery and shipping.
Process returns, exchanges and refunds.
Provide customer support.
Communicate with you about your orders, account or enquiries.
Maintain and improve our website and Services.
Personalize your shopping experience.
Detect, prevent and investigate fraud, security incidents or other unlawful activity.
Comply with legal and regulatory obligations.
Send marketing or promotional communications where permitted by law.
Analyze website usage and improve our products, services and customer experience.

We will process your personal information only where we have a lawful basis to do so, including where processing is necessary to perform a contract with you, where you have provided consent, where we have a legitimate business purpose permitted by law, or where processing is required by law.

4. Marketing Communications

We may send promotional communications about SOF SERVE where permitted by applicable law.

Where consent is required, we will obtain your consent before sending direct marketing communications.

Where POPIA permits marketing to an existing customer in relation to similar products or services, we will provide an appropriate opportunity to object to receiving further marketing communications.

You may unsubscribe from promotional emails at any time by using the unsubscribe option included in the communication or by contacting us using the details provided below.

POPIA places specific restrictions on direct marketing by electronic communications such as email and SMS. We will process personal information for direct marketing in accordance with those requirements.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the website, remember preferences, understand how visitors use our Services, improve our website and support marketing and advertising activities.

You may be able to control or disable certain cookies through your browser settings. Some website features may not function properly if certain cookies are disabled.

6. How We Share Personal Information

We may disclose personal information where reasonably necessary to operate our business and provide our Services.

This may include sharing information with:

Shopify and its related service providers.
Payment processors and payment service providers.
Shipping and delivery providers.
Technology and IT service providers.
Website analytics and advertising providers.
Customer support providers.
Professional advisers, where necessary.
Government authorities, regulators or law-enforcement agencies where required or permitted by law.

We require service providers that process personal information on our behalf to handle that information appropriately and in accordance with applicable legal requirements.

We do not sell your personal information as a business practice.

7. Shopify

Our store is powered by Shopify. Shopify provides the technology and infrastructure that enables us to operate our online store, process transactions and provide our Services.

Information you submit through our store may therefore be processed by Shopify and its service providers.

Shopify may process personal information in countries outside South Africa. You can review Shopify's own privacy practices through Shopify's privacy policy.

8. International Transfers of Personal Information

Some of our service providers, including Shopify and other technology providers, may process or store personal information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer is conducted in accordance with applicable requirements under POPIA.

POPIA regulates the transfer of personal information outside South Africa and provides circumstances in which such transfers may lawfully take place.

9. Security of Your Personal Information

We take reasonable technical and organizational measures to protect personal information against loss, misuse, unauthorized access, disclosure, alteration or destruction.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

You should also take reasonable steps to protect your account credentials and other personal information.

10. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide our Services, process transactions, comply with legal and accounting obligations, resolve disputes and enforce our agreements.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it, subject to any legal requirements requiring us to retain it.

11. Your Rights Under POPIA

Subject to applicable legal limitations, you may have the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete personal information.
Request deletion of personal information where there is no lawful reason for us to retain it.
Object to certain processing of your personal information.
Object to the use of your personal information for direct marketing.
Withdraw consent where processing is based on your consent.
Request information about how your personal information is being processed.
Lodge a complaint regarding the processing of your personal information.

We may need to verify your identity before processing certain requests.

You may exercise your rights by contacting us using the details provided at the end of this Privacy Policy.

12. Children's Information

Our Services are not intended for children to use independently.

We do not knowingly collect personal information from children where such collection would be unlawful.

If you believe that a child has provided us with personal information unlawfully, please contact us so that we can take appropriate steps.

13. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites. We recommend that you review the privacy policies of those websites before providing them with personal information.

14. Complaints

If you have concerns about how we process your personal information, please contact us first using the contact details below so that we can investigate and address your concern.

You may also have the right to lodge a complaint with the Information Regulator of South Africa, which is responsible for monitoring and enforcing compliance with POPIA.

The Information Regulator provides official channels for privacy-related enquiries and complaints.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, Services or applicable legal and regulatory requirements.

When we make changes, we will update the "Last updated" date at the beginning of this Privacy Policy.

We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy, how we process your personal information, or wish to exercise your rights under applicable privacy laws, please contact us:

SOF SERVE
Email: info@sofserve.co.za
Telephone: +27 78 315 9807