Privacy & POPIA Policy

Effective date: 5 July 2026

Original Corporate Gifts respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013, commonly known as POPIA.

1. Introduction

This policy explains how we collect, use, store, share and protect personal information when companies, users, recipients, suppliers and website visitors use our corporate gifting platform, website and related services.

2. Who this policy applies to

This policy applies to corporate clients, authorised users, gift recipients, website visitors, suppliers, couriers, fulfilment partners and service providers.

3. Personal information we collect

We may collect company information, contact person details, authorised user details, campaign information, uploaded logos, branding notes, recipient names, email addresses, telephone numbers, delivery addresses, gift allocations and fulfilment information.

We may also collect website and technical information such as IP address, browser type, device information, pages visited, dates and times of access, and cookies where applicable.

4. How we collect personal information

We collect personal information when a company creates an account, a user uses the platform, a client uploads recipient information, a campaign is created, a logo or branding instruction is uploaded, a person contacts us, or we receive fulfilment or delivery information from suppliers or couriers.

Where a corporate client uploads recipient information, the client confirms that it has the necessary authority or lawful basis to provide that information to us for the purpose of fulfilling the gifting campaign.

5. Purpose of processing personal information

We process personal information to create and manage client accounts, manage corporate gifting campaigns, allocate gifts, arrange packing, branding, fulfilment and delivery, generate quotes and reports, communicate with clients, send transactional emails, prevent fraud and unauthorised access, improve our services, and comply with legal, tax, accounting and regulatory obligations.

We do not sell personal information.

6. Lawful basis for processing

We process personal information where it is necessary to provide our services, perform a contract, comply with a legal obligation, protect a legitimate business interest, or where consent has been provided when required.

7. Corporate clients and recipient information

In many cases, corporate clients provide recipient information to us. The corporate client is responsible for ensuring that recipient information has been lawfully collected and that it is accurate, relevant and limited to what is necessary for the campaign.

Original Corporate Gifts processes recipient information for the purpose of fulfilling the relevant corporate gifting campaign and related services. We will not use recipient information for unrelated marketing unless a lawful basis exists.

8. Sharing of personal information

We may share personal information with trusted third parties where necessary to provide our services. These may include courier and delivery companies, gift suppliers, fulfilment partners, branding and packaging providers, payment providers, email providers, hosting providers, database providers, IT service providers, professional advisers, regulators or authorities where legally required.

9. Cross-border transfers

Some service providers may store or process information outside South Africa. Where this happens, we will take reasonable steps to ensure that personal information remains protected in accordance with POPIA and applicable legal requirements.

10. Security safeguards

We take reasonable and appropriate technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration, disclosure or destruction.

These measures may include password-protected access, role-based access controls, secure hosting and database controls, restricted access to campaign and recipient information, and monitoring for unauthorised access or misuse.

11. Retention of personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including completion of campaigns, account administration, quote and delivery records, tax and accounting obligations, legal compliance and dispute resolution.

12. Direct marketing

We may send marketing communications to business contacts where permitted by law. Recipients may opt out of marketing communications at any time.

We will not use gift recipient information uploaded for a corporate gifting campaign for unrelated marketing unless we have a lawful basis to do so.

13. Cookies

Our website may use cookies or similar technologies to improve website functionality, analyse usage and support user experience. Users can manage or disable cookies through their browser settings.

14. Rights of data subjects

Subject to POPIA and applicable law, data subjects may request access to their personal information, request correction of inaccurate information, request deletion where legally permitted, object to certain processing, withdraw consent where applicable, or lodge a complaint with the Information Regulator.

15. Accuracy of information

Clients and users must ensure that personal information submitted to us is accurate, complete and up to date. Incorrect recipient information may result in delayed or failed delivery.

16. Children’s personal information

Our services are intended for corporate gifting and business use. We do not knowingly collect personal information of children unless it is lawfully provided by a parent, guardian, school, organisation or authorised responsible party for a legitimate gifting or delivery purpose.

17. Information Officer

Privacy-related requests may be sent to:

Original Corporate Gifts
Email: greg@originalcorporategifts.co.za
Website: www.originalcorporategifts.co.za

18. Complaints

If you believe that we have processed your personal information unlawfully or contrary to this policy, please contact us first so that we can try to resolve the matter.

You may also lodge a complaint with the Information Regulator South Africa.

Website: https://inforegulator.org.za

19. Changes to this policy

We may update this policy from time to time. The latest version will be published on our website.

20. Contact us

For privacy questions, POPIA requests or complaints, please contact:

Original Corporate Gifts
Email: gregy@originalcorporategifts.co.za