Privacy policy

Who is responsible

To confirm: registered business name, trading as Hymns Farms, is responsible for your personal information. Our Information Officer is To confirm: Information Officer's name and role, reachable at info@hymnsfarms.co.za or 082 819 0707.

What we collect

• When you order: your name, email address, phone number, delivery address and any delivery notes, and what you bought.
• When you pay: nothing about your card. Payment happens on Yoco's secure page; we only receive confirmation that it succeeded and a payment reference.
• When you message us: whatever you choose to send us on WhatsApp or by email.

We do not collect identity numbers, and we do not need information about children.

Why we use it

• To pack and deliver your order and contact you about it.
• To email your receipt and answer your questions.
• To keep the financial records the law requires.
• To prevent fraud and keep the shop secure.

We use it only for these purposes — to perform our agreement with you, to meet legal obligations, and in our legitimate interest in running the shop safely. We will not send you marketing unless you ask for it, and you can stop it at any time.

Who sees it

We never sell your information. It is shared only with people and services that need it to fulfil your order:

• Our team — only the staff who handle orders; packers and drivers see your name, phone, address and delivery notes, not your email or payment details.
• Yoco — processes your card payment.
• Supabase — stores our order database.
• Vercel — hosts this website.
• Resend — sends our order emails.

Some of these providers store information on servers outside South Africa. We use them only because they are bound by agreements that protect personal information to a standard comparable to POPIA, as section 72 of the Act requires.

How long we keep it

We keep order records for five years, because tax law requires it, then delete or anonymise them. You can ask us to delete other information about you sooner.

Cookies and browser storage

Your cart is saved in your own browser so it survives a page refresh; it never leaves your device until you check out. Staff who sign in to manage the shop get a sign-in cookie. We use no advertising or tracking cookies.

How we protect it

Information is encrypted in transit, access to orders is limited by staff role, and every staff change to an order is logged. If a breach ever affected your information, we would tell you and the Information Regulator as POPIA requires.

Your rights

You may ask us, free of charge, to:

• tell you what personal information we hold about you;
• correct or update it;
• delete it, where we are not required to keep it;
• stop using it for a particular purpose.

Contact our Information Officer at info@hymnsfarms.co.za. If you are not happy with our response, you may complain to the Information Regulator at inforegulator.org.za.