Privacy Policy

Black Barbie by TK (Pty) Ltd, trading as BlackBarbiebyTK, is the responsible party for the personal information described here. Our Information Officer can be reached at info@blackbarbiebytk.company or by post at Barclay Square Shopping Centre (Shop F06, F09 & F11), 296 Justice Mahommed Street, Sunnyside, Pretoria, 0002, South Africa.

We collect only what we need to run the boutique and serve you:

• Contact & account details — your name, phone number, email address and the password you set (stored encrypted).
• Delivery details — your delivery address or collection preference.
• Measurements — the sizing you give us so your dress fits.
• Order & payment records — what you ordered, what you paid, and the balance owing.
• Messages & photos you send us — anything you write or upload in BarbieChat (our in-app chat), including images and any profile picture you choose.
• Proof of payment — the EFT proof you upload, if you pay by bank transfer.
• Device & usage information — basic technical data your browser or the app sends (such as device type and, if you allow notifications, a push token), used to keep the site working and to notify you about your order.

We do not see or store your card details. All card payments are processed securely by our payment provider (Yoco) on their own PCI-compliant systems. We only receive confirmation that a payment succeeded and how much was paid.

We use your information to:

• make, price, and deliver or hand over your order;
• keep you updated on its progress, by message and by notification;
• answer your questions and provide support through BarbieChat, WhatsApp, phone or email;
• take and reconcile payments, and keep proper sales records as the law requires;
• with your choice to receive them, send you occasional marketing messages about sales and new arrivals (see below).

We may send you marketing SMS about promotions and new collections. Every marketing SMS includes a free way to opt out — simply reply STOP and we will not send you any more. You can also tell us to stop at any time on WhatsApp, by phone, or by email, and we will remove you from our marketing list.

Stopping marketing does not stop essential messages about an order you have actually placed (for example, that it is ready for collection or that a balance is due) — those are part of the service you asked for.

If you allow notifications, we use them only to tell you about your order and to let you know when we reply to your chat. You can switch notifications off at any time in your browser or phone settings.

We do not sell your information. We share it only with the service providers we need to run the shop, and only for that purpose:

• Yoco — to process card payments securely;
• Couriers (Pep Paxi, Aramex, The Courier Guy) — to deliver your order;
• Our SMS provider — to send you order and (if you have not opted out) marketing messages;
• Our hosting & database providers (such as Vercel and Supabase) — to run the website and store your order securely;
• Google — where you use Google-powered features (such as notifications or maps) on the site.

Some of these providers may process data outside South Africa. Where they do, POPIA requires that your information receives a comparable level of protection.

We keep your order and payment records for as long as we need them to run the business and to meet our legal and tax obligations (generally up to five years after your last order). Chat messages and uploaded photos are kept while your account is active and for a reasonable period afterwards for support and dispute purposes. When you delete your account, we remove your personal information except records we are legally required to retain.

Your information is stored on secured, access-controlled systems, and access is limited to the people who need it to serve you. Card data never touches our systems. If a data breach ever affects your personal information, we will act to contain it and notify you and the Information Regulator as POPIA requires.

Some of our customers (for example, matric-dance shoppers) may be under 18. We do not knowingly collect information from a child without the involvement of a parent or guardian. If you are under 18, please use the site with a parent or guardian, who agrees to this policy on your behalf. If you believe we hold a child's information without proper consent, contact us and we will address it.

You have the right to:

• ask what personal information we hold about you;
• ask us to correct or update it;
• ask us to delete it where we are not required by law to keep it — you can also delete your account yourself on your profile page or at Delete my account;
• object to your information being used for marketing (reply STOP, or contact us);
• complain to the Information Regulator of South Africa if you believe we have not handled your information lawfully.

We may update this policy from time to time. The date at the top shows when it was last reviewed. Significant changes will be reflected here.

Black Barbie by TK (Pty) Ltd — Information Officer
Barclay Square Shopping Centre (Shop F06, F09 & F11), 296 Justice Mahommed Street, Sunnyside, Pretoria, 0002, South Africa
Email: info@blackbarbiebytk.company
Phone/WhatsApp: 071 440 1540

Information Regulator (South Africa): complaints may be lodged at inforegulator.org.za.