Privacy policy

Privacy Policy

Effective Date: 23 July 2026

1. Introduction

COTTON AND SUNDAYS (Pty) Ltd ("COTTON AND SUNDAYS", "we", "our", or "us") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA").

This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you visit our website, place an order, contact us, or otherwise interact with our business.

2. Responsible Party

Company Name: COTTON AND SUNDAYS (Pty) Ltd

Registration Number: 2025/533064/07

Location: Montagu, Western Cape, South Africa

Email: cottonandsundays@gmail.com

Unless otherwise stated, COTTON AND SUNDAYS is the Responsible Party responsible for processing your personal information.

3. Information We Collect

Depending on how you use our website, we may collect:

Personal Information

Full name
Email address
Telephone number
Delivery and billing address

Order Information

Products purchased
Order history
Shipping preferences
Payment confirmation information

Please note: We do not store your debit or credit card details. Payments are processed securely by our third-party payment service providers.

Technical Information

When you visit our website, we may automatically collect:

IP address
Browser type
Device information
Website usage information
Cookies and similar technologies

4. Why We Collect Your Information

We collect and process personal information to:

Process and fulfil your orders
Deliver purchased products
Communicate regarding your order
Respond to enquiries
Improve our website and customer experience
Detect fraud and maintain website security
Comply with legal and regulatory obligations
Send marketing communications where you have consented or where permitted by law

We only collect information that is necessary for these purposes.

5. Legal Basis for Processing

We process your personal information where:

it is necessary to perform a contract with you;
you have given your consent;
processing is required by law; or
we have a legitimate business interest that does not override your rights.

6. Cookies

Our website may use cookies to:

remember your preferences;
improve website functionality;
analyse website traffic; and
measure marketing performance.

You can disable cookies through your browser settings, although some website features may not function correctly.

7. Sharing Your Information

We may share your information with trusted third parties including:

payment processors;
courier and delivery companies;
website hosting providers;
website analytics providers;
email communication platforms;
professional advisers where legally required.

These service providers are only permitted to process your information for the services they provide to us and are expected to keep it secure.

We do not sell your personal information.

8. International Transfers

Some of our technology providers may process personal information outside South Africa.

Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are in place as required by POPIA.

9. Data Security

We implement reasonable technical and organisational measures to protect your personal information against:

unauthorised access;
accidental loss;
misuse;
disclosure;
alteration; and
destruction.

While no online system can be guaranteed completely secure, we continually work to protect the information entrusted to us.

10. How Long We Keep Information

We retain personal information only for as long as:

necessary to fulfil the purpose for which it was collected;
required by law;
required for accounting or tax obligations;
necessary to resolve disputes or enforce our agreements.

When information is no longer required, it will be securely deleted or de-identified where appropriate.

11. Your Rights Under POPIA

Subject to applicable law, you have the right to:

request access to your personal information;
request correction of inaccurate information;
request deletion of information where legally permissible;
object to certain processing activities;
withdraw consent where processing is based on consent;
object to direct marketing; and
lodge a complaint with the Information Regulator of South Africa.

Requests may be submitted to:

Email: cottonandsundays@gmail.com

12. Marketing Communications

If you subscribe to our newsletter or marketing communications, we may send you information about:

new collections;
promotions;
special offers; and
brand updates.

You may unsubscribe at any time using the unsubscribe link in our emails or by contacting us directly.

13. Children's Privacy

Our products are designed for infants and children; however, our website is intended for use by adults aged 18 years or older.

We do not knowingly collect personal information directly from children. Any personal information collected through our website is intended to be provided by a parent, legal guardian, or other adult acting on behalf of the child.

If we become aware that we have inadvertently collected personal information directly from a child without the necessary legal authority, we will take reasonable steps to delete that information as soon as practicable.

Parents or legal guardians who believe that a child has provided personal information through our website may contact us at cottonandsundays@gmail.com to request that the information be reviewed or deleted, where appropriate.

14. Third-Party Links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page together with the updated Effective Date.

16. Contact Us

If you have any questions about this Privacy Policy or how we process your personal information, please contact:

COTTON AND SUNDAYS (Pty) Ltd

Registration Number: 2025/533064/07

Montagu, Western Cape, South Africa

Email: cottonandsundays@gmail.com