Privacy policy

PRIVACY POLICY

Last Updated: August 2026

This Privacy Policy explains how Oxfame Trading CC, operating YESIDO South Africa (“YESIDO South Africa”, “we”, “us” or “our”), collects, uses, stores and discloses personal information when customers visit our website, place orders, purchase products, communicate with us or otherwise use our services.

Our online store is powered by Shopify.

Personal information is processed in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with YESIDO South Africa, we may collect or process information including:

Name, email address and telephone number;
Billing and delivery addresses;
Order, transaction and purchase history;
Payment and payment-confirmation information;
Account information;
Customer-service communications;
Returns, refunds and warranty information;
IP address, browser, device and website-usage information;
Cookie and similar technology information; and
Information reasonably required for security, fraud prevention or legal purposes.

Payment-card information may be processed directly by Shopify, payment gateways, banks or other authorized payment providers.

2. HOW WE USE PERSONAL INFORMATION

Subject to applicable law, personal information may be processed where reasonably necessary to:

Process payments and fulfill orders;
Arrange deliveries;
Provide customer service;
Administer accounts;
Process returns, refunds and warranty claims;
Verify transactions and customer information;
Detect, prevent and investigate fraud or abuse;
Investigate chargebacks, false claims or product substitution;
Maintain accounting, tax and transaction records;
Improve and secure our website and services;
Conduct analytics and personalize customer experiences;
Conduct lawful marketing;
Enforce our Terms of Service and other policies;
Resolve disputes and recover amounts lawfully owed;
Establish, exercise or defend legal claims; and
Comply with legal and regulatory obligations.

Where processing does not legally require consent, YESIDO South Africa may rely on another lawful basis for processing permitted under POPIA.

3. INFORMATION REQUIRED FROM CUSTOMERS

Certain information is necessary to process payments, fulfill orders, arrange deliveries, investigate claims or provide other requested services.

Where required information is not provided, YESIDO South Africa may be unable to process an order, deliver a product, process a return or refund, investigate a warranty claim or provide another requested service.

4. SHARING OF PERSONAL INFORMATION

Where reasonably necessary and legally permitted, personal information may be shared with:

Shopify;
Payment processors and financial institutions;
Courier, logistics and fulfillment providers;
IT, hosting and cloud-service providers;
Fraud-prevention and security providers;
Analytics, advertising and marketing providers;
Accountants, attorneys, insurers and other professional advisers;
Government, regulatory or law-enforcement authorities where legally required or permitted; and
Other service providers reasonably necessary to operate our business.

We may also disclose relevant information where reasonably necessary to investigate fraud, defend chargebacks, enforce agreements, recover amounts owed or establish, exercise or defend legal claims.

5. SHOPIFY & THIRD-PARTY SERVICES

Our online store is hosted and supported by Shopify. Information submitted through our website may therefore be processed by Shopify and its service providers in order to operate and improve the e-commerce services provided to us and our customers.

Third-party payment providers, couriers and other service providers may also process personal information under their own applicable privacy practices and legal obligations.

6. COOKIES, ANALYTICS & MARKETING

Our website and service providers may use cookies and similar technologies for website functionality, security, fraud prevention, analytics, remembering preferences, advertising and improving the shopping experience.

YESIDO South Africa may send marketing communications where permitted by applicable law.

Customers may unsubscribe from electronic marketing using the unsubscribe facility provided or by contacting us.

Opting out of marketing does not prevent YESIDO South Africa from sending necessary transactional communications relating to orders, payments, deliveries, accounts, returns or warranties.

7. RETENTION OF INFORMATION

YESIDO South Africa may retain personal information for as long as reasonably necessary or otherwise permitted or required by law.

Information may therefore be retained after completion of an order where reasonably necessary for:

Tax and accounting requirements;
Transaction records;
Warranty and return records;
Fraud prevention;
Dispute resolution;
Contract enforcement;
Regulatory compliance; or
Establishing, exercising or defending legal claims.

A request for deletion does not automatically require YESIDO South Africa to delete information that it is legally required or otherwise lawfully entitled to retain.

8. SECURITY

YESIDO South Africa takes appropriate and reasonable technical and organizational measures to protect personal information as required by applicable law.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for keeping their account credentials and passwords confidential.

9. INTERNATIONAL PROCESSING

Shopify and certain other service providers may process or store personal information outside South Africa.

Where personal information is transferred outside South Africa, such transfers will be handled in accordance with applicable requirements of POPIA.

10. YOUR RIGHTS

Subject to POPIA and any applicable conditions, limitations, exceptions and identity-verification requirements, customers may have the right to:

Request confirmation of personal information held about them;
Request access to qualifying personal information;
Request correction of inaccurate information;
Request deletion or destruction where legally applicable;
Object to certain processing;
Object to direct marketing; and
Lodge a complaint with the Information Regulator.

These rights are not absolute.

YESIDO South Africa may retain, decline to disclose, restrict or otherwise process information where permitted or required by applicable law.

We may take reasonable steps to verify the identity and authority of any person making a privacy request before acting on that request.

11. FRAUD, SECURITY & LEGAL CLAIMS

Where legally permitted, YESIDO South Africa may retain, process and disclose relevant personal information where reasonably necessary to investigate or prevent:

Payment fraud;
Unauthorized transactions;
False identities;
Fraudulent returns;
False warranty or defect claims;
Product substitution or tampering;
Promotional abuse; or
Other unlawful activity.

Information may also be retained and used where reasonably necessary for disputes, chargebacks, debt recovery, enforcement of agreements or legal proceedings.

12. THIRD-PARTY WEBSITES

Our website may contain links to independent third-party websites or platforms.

YESIDO South Africa does not control their privacy or security practices and, to the extent permitted by law, is not responsible for the independent processing activities of third parties that we do not control.

13. CHANGES TO THIS POLICY

YESIDO South Africa may update this Privacy Policy from time to time to reflect changes in our operations, technology, service providers or applicable law.

The latest version will be published on the website with the updated revision date.