This Privacy Policy explains what personal information Beds & Pillows collects, why, and how it's protected, in line with South Africa's Protection of Personal Information Act (POPIA).
1. Who we are
Beds & Pillows, trading from Birch Acres Shopping Centre, Tembisa, Kempton Park, Gauteng, is the responsible party for the personal information described in this policy. For any privacy query, contact us at hello@bedsandpillows.co.za.
2. What we collect
Depending on how you use the site, we may collect:
- Account details — your email address, and if you choose to add them, your name, phone number and a default delivery address
- Order details — name, email, phone number, delivery address, and the items and quantities in each order
- Wishlist activity — which products you've saved, if you're logged in
- Payment confirmation — we receive confirmation from PayFast that a payment succeeded, along with a PayFast reference number. We do not receive or store your card number, expiry date or CVC — these are entered directly on PayFast's own secure payment page and never pass through our systems
3. How we use it
- To create and fulfil your order, including arranging delivery
- To let you view your order history and manage your wishlist if you have an account
- To confirm payment and prevent fraudulent transactions
- To respond to enquiries and provide customer support
- To send you offers or updates, only if you've opted in (for example, by submitting your email for offers)
4. Accounts and authentication
If you create an account, you can sign in with a password or a one-time magic link sent to your email. Your account is protected by industry-standard authentication infrastructure. You're responsible for keeping your login details confidential.
5. Payment processing
All payments are handled by PayFast, a registered South African payment gateway. When you check out, you're redirected to PayFast's own site to enter your payment details. PayFast confirms successful payments to us directly; this confirmation, not anything visible to your browser, is what marks an order as paid. Please refer to PayFast's own privacy policy for how they handle your payment information.
6. Who we share information with
We don't sell your personal information. We share it only where necessary to run the business:
- With PayFast, to process payments
- With our database and hosting providers, who store and secure the site's data on our behalf
- With delivery personnel, limited to what's needed to complete a delivery (name, address, phone number)
- Where required by law
7. Data retention
We keep order records for as long as reasonably necessary for accounting, warranty and legal purposes. If you delete your account, your profile and wishlist data are removed; order history tied to a completed transaction may be retained where required for financial record-keeping.
8. Your rights
Under POPIA, you have the right to:
- Ask what personal information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete your account and associated personal information, subject to our legal obligation to retain certain order and financial records
- Object to your information being used for direct marketing, and unsubscribe from marketing emails at any time
To exercise any of these rights, contact us at hello@bedsandpillows.co.za.
9. Security
We take reasonable technical and organisational measures to protect your personal information, including restricting access to customer and order data to authorised staff only.
10. Changes to this policy
We may update this Privacy Policy from time to time. The version published on this page reflects our current practice.
11. Contact
For any privacy question or request, reach us at hello@bedsandpillows.co.za, on 062 769 4090, or in person at Birch Acres Shopping Centre, Tembisa, Kempton Park.