Privacy policy

Last updated: 3 August 2026
Cape Utility ("we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our store, place an order, or interact with us.
This policy is drafted in accordance with South Africa's Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who We Are

Cape Utility is a Cape Town-based online store operating under DuMey Creations (Pty) Ltd's wholesale supply chain. We are the responsible party for the personal information we collect from you.
Contact details:
Email: cape.utility@gmail.com
Address: Cape Town, South Africa

2. What Information We Collect

We only collect information that is necessary to fulfil your order and communicate with you.
Information you provide directly:
  • Name and surname
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment confirmation details (we do not store your full card details)
  • Order history and transaction records
  • Communications, feedback, or enquiries you send us
Information collected automatically:
  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on our store
  • Referring website or search terms
  • Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use your personal information for the following purposes:
Purpose Legal Basis under POPIA
To process and fulfil your orders Performance of a contract
To communicate about your order, delivery, or returns Performance of a contract
To verify your identity and prevent fraud Legitimate interest / legal obligation
To improve our website, products, and customer experience Legitimate interest
To send marketing communications (only if you opt in) Consent
To comply with legal and tax obligations Legal obligation
We will not use your personal information for any purpose other than those listed above without your consent, unless required by law.

4. How We Share Your Information

We share your information only where necessary and only with trusted parties who assist us in operating our store.
Our suppliers and fulfilment partners: We share your name, phone number, and delivery address with DuMey Creations (Pty) Ltd (trading as DMC Wholesale), our wholesale supplier, so they can pick, pack, and dispatch your order. If you have ordered on behalf of someone else, that recipient's details are shared for delivery purposes only.
Other third parties:
  • Shopify — our e-commerce platform provider, which hosts our store and processes your data on secure servers (international data transfer — see Section 9)
  • Payment gateways — to process your card or EFT payment securely. We do not store your full card details on our servers
  • Courier and logistics providers — to deliver your parcel and provide tracking services
  • Legal and regulatory authorities — where we are required by law to disclose information
We do not:
  • Sell your personal information to any third party
  • Share your information with third parties for their own marketing purposes
  • Allow our suppliers to contact you directly or use your data for their own purposes

5. Cookies and Tracking Technologies

Our store uses cookies and similar technologies to function properly and to understand how visitors use our site.
Types of cookies we use:
  • Essential cookies: Required for the store to function (e.g., shopping cart, checkout, security)
  • Functional cookies: Remember your preferences (e.g., language, region)
  • Analytics cookies: Help us understand how visitors interact with our store (e.g., Shopify Analytics, Google Analytics)
Your choices: You can manage or disable cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of our store, such as adding items to your cart or completing checkout.

6. Marketing Communications

We may send you marketing emails or SMS messages about new products, promotions, or useful tips — but only if you have explicitly opted in during checkout or by subscribing to our mailing list.
You can opt out at any time by:
  • Clicking the "Unsubscribe" link in any marketing email
  • Replying "STOP" to any marketing SMS
  • Contacting us at cape.utility@gmail.com
Even if you opt out of marketing, we will still send you transactional messages related to your orders (e.g., order confirmations, shipping updates).

7. Your Rights Under POPIA

You have the following rights regarding your personal information:
Right to access:
You may request a copy of the personal information we hold about you. We will provide this within a reasonable time (usually within 21 days) and may charge a small fee if the request is excessive.
Right to correction:
You may request that we correct any inaccurate or outdated information.
Right to deletion:
You may request that we delete your personal information. We will comply unless we are legally required to retain it (e.g., for tax or accounting purposes).
Right to object or restrict processing:
You may object to us using your information for certain purposes, such as marketing or analytics.
Right to lodge a complaint:
If you believe your privacy rights have been infringed, you may lodge a complaint with the Information Regulator of South Africa:
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
How to exercise your rights:
Send your request to cape.utility@gmail.com with the subject line "POPIA Request." Include enough detail to help us identify you and the information in question.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
  • Order and transaction records: 5 years (as required by South African tax law)
  • Customer account information: As long as your account is active, or until you request deletion
  • Marketing consent records: As long as you remain subscribed, or until you withdraw consent
  • Correspondence and complaints: 3 years after resolution
Once the retention period expires, we securely delete or anonymise your information.

9. Cross-Border Data Transfers

Our store is hosted on Shopify, which stores data on servers located outside South Africa (primarily in the United States and Canada). By using our store and placing an order, you acknowledge that your personal information may be transferred to, processed, and stored in countries that may have different data protection laws than South Africa.
Shopify is contractually bound to protect your data in accordance with POPIA and international data protection standards. We have ensured that appropriate safeguards are in place for these transfers.

10. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. These measures include:
  • SSL encryption on our website (HTTPS)
  • Secure password protection for our admin systems
  • Limited access to personal information (only authorised personnel)
  • Regular security updates to our platform
However: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Data Breaches

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:
  1. Notify the Information Regulator as soon as reasonably possible
  2. Notify affected individuals without undue delay, where required by law
  3. Take immediate steps to contain the breach and prevent further harm

12. Children's Privacy

Our store is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete it.

13. Third-Party Websites

Our store may contain links to third-party websites (e.g., courier tracking pages, payment gateways). This Privacy Policy applies only to our store. We are not responsible for the privacy practices of external websites. We encourage you to read their privacy policies before providing them with your information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or our business operations.
  • Significant changes will be notified by email (if you have an account with us) or by a prominent notice on our website
  • Continued use of our store after changes are posted constitutes your acceptance of the updated policy
  • The "Last updated" date at the top of this page indicates when the policy was last revised

15. Contact Us

For any privacy-related questions, requests, or concerns, please contact us:
Cape Utility
Cape Town, South Africa
Email: cape.utility@gmail.com
Please allow up to 21 days for us to respond to formal POPIA requests.