Privacy Policy

1. Who is responsible for your information

Fat Zebra is the responsible party for the personal information collected through fatzebra.co.za and in the course of supplying products to you. This policy explains how we handle that information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

2. What we collect

Identity and contact

Your name, company name, email address, telephone number, delivery and billing addresses.

Order information

Products ordered, quantities, sizes, colours, branding instructions, order history and correspondence with us.

Payment information

The payment method used and confirmation of payment. Card details are handled by our payment provider, not by us.

Account information

Your username, password in encrypted form, and saved preferences if you create an account.

Technical information

IP address, browser type, device, pages viewed and referring site, collected through cookies and server logs.

We do not store your full card details. Card payments are processed by our payment provider, who handles that data under their own security standards.

3. Why we collect it

• To process, produce and deliver your order, including branding
• To take payment and issue invoices, credit notes and refunds
• To communicate with you about quotes, proofs, orders and deliveries
• To manage returns, refunds and warranty claims
• To keep accounting and tax records as the law requires
• To improve the site, our product range and our service
• To send you marketing about products and offers, where you have opted in

We do not sell your personal information, and we do not use it for purposes unrelated to those listed above without telling you first.

4. Legal basis

We process your information because it is necessary to conclude and perform a contract with you, because we have a legal obligation to do so (for example tax and accounting records), because it serves our legitimate interests in running and protecting the business, or because you have consented. Where we rely on consent, you may withdraw it at any time.

5. Who we share it with

We share personal information only where it is needed to fulfil your order or to run the business, and only with parties who are bound to protect it:

• Couriers and logistics partners, to deliver your order
• Our suppliers and production partners, including Barron, to fulfil and brand your order
• Our payment provider, to process payments securely
• Cloud hosting and storage providers, including secure file storage for branding artwork
• Professional advisers, auditors and authorities, where the law requires it

Some of these providers process or store data outside South Africa. Where information is transferred across borders, we take reasonable steps to ensure it receives a comparable level of protection to that required by POPIA.

6. Artwork and branding files

Where you upload logos, artwork or branding files with an order, those files are stored in our order system and shared with our production partner and, where relevant, our supplier, solely to produce your order. They are held in secure cloud storage with restricted access, and are not used for any other purpose or shared further without your permission.

7. Cookies

Our site uses cookies. Strictly necessary cookies keep your cart and session working and cannot be switched off. Analytics cookies help us understand how the site is used so we can improve it. Marketing cookies may be used to measure the performance of advertising.

You can block or delete cookies through your browser settings, though doing so may affect how parts of the site work, including checkout.

8. How long we keep it

We keep personal information only as long as necessary for the purpose it was collected, or as long as the law requires. Order, invoice and tax records are retained for five years as required by South African tax legislation. Marketing contact details are kept until you unsubscribe. Artwork files are kept for the duration of our trading relationship so that repeat orders can be produced consistently, unless you ask us to delete them.

9. Security

We take reasonable technical and organisational steps to protect your information, including encrypted connections across the site, access controls on our systems, and restricting access to those who need it to do their work. No system is completely secure, but where a breach occurs that creates a risk to you, we will notify you and the Information Regulator as POPIA requires.

10. Your rights

Under POPIA you have the right to:

• Ask what personal information we hold about you and request access to it
• Ask us to correct or update information that is inaccurate or incomplete
• Ask us to delete information we no longer have grounds to keep
• Object to processing based on our legitimate interests
• Withdraw consent, including unsubscribing from marketing at any time
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these, email us at info@fatzebra.co.za. We may ask you to verify your identity before we act, and will respond within a reasonable period.

11. Children

Our site is intended for business and adult customers. We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian. Where we supply schoolwear, we deal with the school or the parent, not the learner.

12. Complaints and contact

If you have a question about this policy or how we handle your information, contact us first and we will try to resolve it. You also have the right to lodge a complaint with the Information Regulator of South Africa.