Legal

Privacy Policy

Effective date: 1 August 2026

Bathroom Boutique Creations (Pty) Ltd, registration number 2026/096981/07 ("BBC", "we", "us" or "our"), respects privacy and processes personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable law.

Responsible party and contact details

Responsible party: Bathroom Boutique Creations (Pty) Ltd. Registered office: 12, 22 West Road South, Morningside, Gauteng, South Africa, 2196. Information Officer: Steven Wise. Email: steven.w@bathroomboutique.co.za. Telephone: +27 72 396 5170. Website: bathroomboutique.co.za.

Information we may collect

Identity and contact information, including name, role, company, property, email address, telephone number and delivery address.
Enquiry and quotation information, including property type, room count, products, dimensions, quantities, specifications, laundry arrangement, delivery location and required timing.
Order and account information, including quotations, approvals, invoices, payments, delivery records, correspondence and support history.
Website and device information, including IP address, browser, device, pages viewed, referral information and cookie or analytics identifiers where enabled.
Supplier, partner and business-contact information required for legitimate business administration.
Any other information voluntarily supplied in an enquiry, meeting, document, form or communication.

How we collect information

We collect information directly from you, from your employer or authorised representative, through website forms and communications, during meetings and quotations, through lawful business sources, and automatically through the website where cookies or analytics are enabled.

Why we process information

To respond to enquiries and prepare quotations.
To assess product, specification, delivery and operating requirements.
To communicate, accept and administer orders.
To arrange production, sourcing, delivery, support, claims and replenishment.
To maintain business, tax, accounting, legal and security records.
To operate, secure, analyse and improve the website and customer experience.
To send direct marketing where permitted by law and to honour opt-out requests.
To establish, exercise or defend legal rights and comply with lawful obligations.

Lawful processing

We process personal information where it is necessary to take steps requested before contracting, perform a contract, comply with law, pursue a legitimate business interest in a reasonable manner, protect a legitimate interest, or where consent has been provided and is required.

Sharing information

We may share relevant information with authorised employees, manufacturers, suppliers, logistics providers, professional advisers, technology and hosting providers, Shopify and installed service providers, financial institutions, insurers, regulators, law-enforcement bodies or other parties where reasonably necessary and lawful. Service providers acting as operators are expected to protect the information and process it only for the authorised purpose or as required by law.

Cross-border processing

Some suppliers and technology providers may process information outside South Africa. Where personal information is transferred across borders, BBC will take reasonable steps to use a lawful transfer basis and appropriate safeguards as required by POPIA.

Retention

We retain personal information only for as long as reasonably required for the purpose collected, an active business relationship, legal or accounting obligations, dispute resolution, security or the establishment and defence of rights. Information is then deleted, destroyed or de-identified where reasonably practicable.

Security

BBC uses reasonable organisational and technical safeguards appropriate to the information and risk. No internet transmission or storage system is completely secure. If BBC has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, BBC will act in accordance with applicable notification requirements.

Your rights

Subject to POPIA and applicable limitations, you may ask whether BBC holds personal information about you, request access, request correction or deletion, object to certain processing, withdraw consent where processing is based on consent, opt out of direct marketing, or submit a complaint to the Information Regulator.

Direct marketing

BBC will send electronic direct marketing only where permitted. Every marketing communication will provide a reasonable way to opt out. Transactional, quotation, order and service communications may still be sent where necessary.

Children

The website is intended for business and adult users. BBC does not knowingly collect personal information from children through the website.

Information Regulator

You may contact the Information Regulator of South Africa using the current details published at inforegulator.org.za. We encourage you to contact BBC first so that we can try to resolve the concern promptly.

Changes to this policy

BBC may update this policy when its services, website or legal obligations change. The current version and effective date will be published on the website.