Privacy policy

Faith & Finery Co.
Last updated: 22/10/2026

Your trust matters to Faith & Finery Co. This Privacy Policy explains how we handle personal information when you visit our website, place an order, subscribe to our emails, or contact us.

In this policy, “we”, “us”, and “our” refer to Faith & Finery Co, the responsible party for the personal information we control.

1. Information we collect

Depending on how you interact with our store, we may collect:

Contact and delivery information: Your name, email address, telephone number, and billing and shipping addresses.
Order and transaction information: Items purchased, selected options, order history, payment status, transaction references, and return or refund details.
Communications and preferences: Messages you send us, customer service correspondence, and your marketing preferences.
Technical and browsing information: Your IP address, browser and device information, and activity on our storefront, collected through Shopify and relevant website technologies.

Payment providers collect the payment information needed to process your transaction. Please do not send payment card details to us by email or through a contact form.

We receive information directly from you, automatically through our storefront, and from service providers involved in payments, delivery, and operating the store.

2. Why we use your information

We use personal information to:

Process payments, fulfil orders, and arrange deliveries.
Send order confirmations, delivery updates, and other service messages.
Respond to enquiries and manage returns, refunds, or complaints.
Maintain and secure our website and prevent fraud.
Understand and improve the shopping experience, subject to applicable privacy choices.
Send marketing communications where permitted.
Keep records and meet applicable legal obligations.

We process information on an appropriate lawful basis, such as fulfilling a contract, complying with the law, pursuing a legitimate interest where permitted, or obtaining consent where required.

Information needed to process and deliver an order must be provided for us to fulfil that order. Optional information and marketing subscriptions are voluntary.

3. Who receives your information

We share relevant information with service providers where necessary to operate our business, including:

Shopify, which hosts our online store.
Payment processors.
Courier and delivery providers.
Providers supporting customer communications, technology, and business administration, where used.
Professional advisers or public authorities where there is a lawful reason to disclose it.

We limit disclosures to information relevant to the purpose and require appropriate protections where a provider processes information on our behalf.

4. Shopify’s role

Our store uses Shopify to provide its online shopping and checkout services. Information submitted through the store is processed through Shopify’s systems.

Depending on the services and features you use, Shopify may also process information for its own purposes. You can read more in the Shopify Consumer Privacy Policy.

5. Cookies and similar technologies

Our storefront uses cookies and similar technologies to support functions such as your shopping cart, checkout, security, and preferences.

Where optional analytics or advertising technologies are used, we will explain their purposes and provide consent or other choices required by applicable law.

You can also manage cookies through your browser settings. Blocking certain cookies may affect how parts of the store function.

6. Marketing preferences

We send marketing communications only where we have your consent or another permission recognised by applicable law.

You can unsubscribe at any time using the link in a marketing email or by contacting us. Unsubscribing from marketing does not prevent essential messages about an order or customer service request.

7. International processing

Shopify and other service providers may process personal information outside South Africa.

Where we transfer personal information internationally, we will ensure that the transfer has a lawful basis under POPIA, such as appropriate contractual protections or another permitted ground.

You may contact us for information about the safeguards applicable to your information.

8. Security and retention

We use reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access or disclosure.

If a security compromise occurs, we will take appropriate steps and notify affected people and the Information Regulator where required by law.

We retain personal information only for as long as reasonably needed for its purpose, including fulfilling orders, resolving disputes, and meeting legal recordkeeping obligations. We then delete, destroy, or de-identify it as appropriate.

9. Your privacy rights

Subject to applicable law, you may:

Ask whether we hold personal information about you and request access to it.
Request correction of inaccurate or incomplete information.
Request deletion of information we are no longer entitled to retain.
Object to certain processing, including direct marketing.
Withdraw consent where processing depends on it.
Lodge a privacy complaint.

Contact us using the details below to exercise your rights. We may reasonably verify your identity before responding. Some records may need to be retained to meet legal obligations.

You may also complain directly to the Information Regulator (South Africa). Contact information and complaint procedures are available at inforegulator.org.za.