Privacy policy

🌿 The Branch – Privacy Policy

Last updated: 29 January 2026

The Branch (“we”, “us”, or “our”) operates this website and store, including all related information, content, features, tools, products, and services (collectively, the “Services”). Our Services are powered by Shopify, which enables us to provide a secure and seamless shopping experience.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, make a purchase, interact with us, or otherwise use our Services.

If there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy will apply in relation to the collection, processing, and disclosure of personal information.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

When we refer to “personal information”, we mean information that identifies or can reasonably be linked to you or another identifiable person or juristic person, as defined under South African law. This does not include anonymised or de-identified information.

Depending on how you interact with our Services, we may collect or process the following categories of personal information:

a) Contact Information

  • Full name

  • Billing and delivery address

  • Email address

  • Phone number

b) Financial & Transaction Information

  • Payment method and payment confirmation

  • Transaction history and order details

  • Items viewed, added to cart, wishlisted, purchased, returned, or exchanged

(Payment details are processed securely by third-party payment providers and are not stored directly by us.)

c) Account Information

  • Account login details

  • Preferences and settings

d) Communications

  • Messages sent to us via email, WhatsApp, social media, or customer support channels

e) Device & Usage Information

  • IP address

  • Browser and device type

  • Pages viewed and interactions with our website

  • Cookies and similar tracking technologies

f) Compliance & Membership Information (Special Personal Information)

To comply with South African law relating to regulated products, we may collect:

  • Date of birth for age verification

  • Where legally required, a government-issued identifier

  • Membership status for our Bar & Lounge or private offerings

This information is collected strictly for legal compliance and internal verification purposes.

2. Sources of Personal Information

We may collect personal information from:

  • Directly from you, when you create an account, place an order, or contact us

  • Automatically, through cookies and similar technologies when you use our website

  • Service providers, such as Shopify, payment processors, couriers, and IT providers

  • Third parties or partners, where permitted by law

3. How We Use Your Personal Information

We use personal information for the following purposes:

a) Providing and Improving Our Services

  • Processing orders and payments

  • Fulfilling deliveries and returns

  • Managing customer accounts

  • Remembering preferences and improving your shopping experience

  • Facilitating product reviews and feedback

b) Legal Compliance

  • Verifying age and identity where required

  • Complying with regulatory obligations relating to regulated products

c) Marketing & Communications

  • Sending service-related messages

  • Sending marketing communications where you have opted in

  • Displaying relevant advertising across platforms

You may opt out of marketing communications at any time.

d) Security & Fraud Prevention

  • Protecting against unauthorised access, fraud, or misuse

  • Maintaining the safety and integrity of our Services

e) Legal & Business Operations

  • Complying with applicable laws

  • Responding to lawful requests

  • Enforcing our policies and protecting our rights

4. How We Share Personal Information

We may disclose personal information in the following circumstances:

a) Service Providers

With trusted third parties who assist us in operating our business, including:

  • Shopify (website hosting and infrastructure)

  • Payment processors

  • Courier and delivery services

  • Marketing and analytics providers

These parties may process information on our behalf in accordance with their own privacy policies.

b) Google Customer Reviews

We participate in the Google Customer Reviews program. As part of this program:

  • Google may receive transaction information such as order details and delivery information

  • Google may place or read cookies or use similar technologies

  • You may be invited by Google to leave a post-purchase review

Where required, your consent is obtained at checkout before Google sends any review request emails. Google’s use of this information is governed by Google’s Privacy Policy.

c) Cookies & Tracking Technologies

We and our partners (including Shopify and Google) use cookies, pixels, and similar technologies to understand website usage and improve performance. You can manage or disable cookies through your browser settings, though some features may not function correctly.

d) Legal & Business Transfers

We may disclose information:

  • To comply with legal obligations

  • In connection with a business transaction such as a merger or sale

  • To protect our rights, customers, or Services

5. Relationship With Shopify

Our website is hosted on Shopify. Shopify collects and processes personal information to support the operation of our store and may process information across multiple merchants.

Shopify is responsible for handling certain data processing activities independently. To learn more, you can review the Shopify Consumer Privacy Policy and manage your data rights via the Shopify Privacy Portal.

6. Children’s Information

Our Services are intended for adults only. We do not knowingly collect personal information from anyone under the age of 18 years. If you believe a minor has provided us with personal information, please contact us and we will take appropriate steps to delete it.

7. Data Security & Retention

We take reasonable technical and organisational measures to protect your personal information. However, no system is completely secure.

We retain personal information only for as long as necessary to:

  • Fulfil the purposes for which it was collected

  • Comply with legal and regulatory requirements

  • Resolve disputes and enforce agreements

All retention is handled in accordance with POPIA.

8. Your Rights

Under applicable data protection laws, including POPIA, you may have the right to:

  • Access your personal information

  • Request correction of inaccurate data

  • Request deletion of personal information

  • Object to certain processing activities

  • Withdraw consent for marketing communications

Requests can be made using the contact details below. We may need to verify your identity before responding.

9. International Transfers

Your personal information may be processed outside South Africa. Where this occurs, we ensure that appropriate safeguards are in place to provide a level of protection substantially similar to that required under POPIA.

10. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

📧 shop@thebranchkzn.co.za
📍 978 Kings Road, Shelly Beach, 4265, South Africa