Privacy Policy

Who we are

trôve studio sells vintage clothing and jewellery through this website from a studio in Pretoria, South Africa. We are the ‘responsible party’ for your information under POPIA.

Trading name

trôve studio

Legal status

Sole proprietor (not a registered company)

Physical address (also for service of legal documents)

Pretoria, South Africa

Email

hello@trovestudio.co.za

Our information officer is the owner of the business. Send any privacy question or request to hello@trovestudio.co.za.

What we collect and why

Account information

If you create an account we store your name and email address so you can sign in, see your orders and save addresses. Our authentication provider handles your password, and we can’t see it. If you sign in with Google, Google gives us your name and email address, not your Google password.

Order information

When you order, we store your name, email address, delivery address, phone number if you give one, and the pieces you bought with their prices. We use this to process and deliver the order, contact you about it, and keep the records that tax law requires.

Saved addresses

If you save delivery addresses to your account, we keep them so checkout is quicker next time. You can delete them from your profile whenever you like.

Newsletter

If you subscribe, we store your email address and use it only to send you news about the studio, new pieces and offers. We only email you if you have subscribed.

Messages you send us

When you use the contact form we store your name, email address, the subject you chose and your message, so we can reply and keep track of the conversation.

Do you have to give us this information?

No, but some of it is needed for the thing you are asking us to do. We can’t deliver an order without your name, email address and delivery address, or reply to a message without an email address. An account and the newsletter are optional, and you can buy as a guest.

Our grounds for using it

We process your information because:

• we need it to carry out your order or a request you have made;
• the law requires us to keep business and tax records;
• you have consented, as with the newsletter; or
• we have a legitimate interest in running and protecting the shop, for example keeping it secure and stopping misuse.

Cookies and browser storage

We only use what the site needs to work. A session cookie keeps you signed in, and your shopping bag is kept in your browser’s local storage so it survives a page reload. We don’t use advertising cookies or third-party analytics or tracking.

Who else processes your information

We don’t sell your personal information. We share it only with the service providers that run this website for us, and only as much as they need:

• Supabase: our database, sign-in and image storage. Our data is hosted in the European Union (Ireland).
• Vercel: website hosting and delivery.
• Google: the optional ‘Continue with Google’ sign-in, and the address search you can use when you save a delivery address. What you type into that search is sent to Google to find matching addresses.

These providers store and process data outside South Africa, including in the European Union, whose data protection laws give protection comparable to POPIA. We rely on that, and on our agreements with these providers, when your information is transferred. We may also disclose information when the law requires it.

How long we keep it

We keep account details while your account is open. If you delete your account, it is permanently removed after 30 days; until then you can reinstate it by signing in again. We keep order records after that, because South African tax law requires businesses to keep records of their sales (usually for five years). Newsletter subscriptions are kept until you unsubscribe, and contact messages for as long as we need them to deal with your request.

How we protect it

Traffic to this site is encrypted. Access to customer data is restricted in the database itself, so one customer can never read another customer’s orders or addresses, and only store administrators can see the full order list. No payment card details are captured or stored on this website. If we believe your information has been accessed by someone without authority, we will tell you and the Information Regulator as POPIA requires.

Your rights

Under POPIA you can ask us to:

• confirm whether we hold personal information about you, and give you a copy;
• correct information that is wrong or out of date;
• delete information we no longer have a reason to keep;
• stop sending you marketing, at any time; and
• stop using your information where you object to how we use it.

Email hello@trovestudio.co.za and we will respond. You can also change your name, manage saved addresses and delete your account yourself from your profile. To stop the newsletter, reply to any newsletter or email us.

If you are unhappy with how we have handled your information, you can complain to the Information Regulator (South Africa) at POPIAComplaints@inforegulator.org.za or through inforegulator.org.za.

Children

This website is meant for adults. We don’t knowingly collect personal information from children. If you think a child has given us their information, let us know and we will delete it.

Changes to this policy

If we change this policy we will update this page and the date at the top. See also our Terms of Service.