MAISONNE ← Back to the house
The House

Privacy & POPIA

Last updated 20 September 2026

Maisonne collects only what it needs to authenticate a piece, take your order, deliver it and stay on the right side of the law — and keeps it no longer than it should. This notice explains what we hold, why, who we share it with, and the rights you have under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

What we collect

Why we process it, and our lawful basis

Who we share it with

We do not sell your personal information. We share it only with operators who help us run the house, under confidentiality and processing terms, and only as far as needed:

Some of these providers may process data outside South Africa. Where that happens, we rely on providers who are subject to laws or agreements that give your information comparable protection, as POPIA requires.

Payments

Payments are processed by PayFast. Your card and banking details are entered on PayFast's own secure pages and are never seen, handled or stored by Maisonne or by this website. We receive only confirmation that a payment succeeded or failed, and its reference.

How we keep it safe

We take reasonable technical and organisational measures to protect your information against loss, unauthorised access and misuse — including HTTPS across the site, keeping payment handling with PayFast, limiting who can access order data, and holding gateway credentials server-side rather than in the browser. If a security compromise affecting your personal information occurs, we will notify you and the Information Regulator as POPIA requires.

How long we keep it

We keep personal information only as long as necessary for the purpose it was collected for, or as long as the law requires — for example, tax and financial records are generally kept for five years. Marketing consent data is kept until you withdraw consent. When information is no longer needed, we securely delete or de-identify it.

Your rights

Under POPIA you have the right to:

To exercise any of these, contact our Information Officer at [email protected]. We will respond within a reasonable time and may need to verify your identity first.

Complaints to the Regulator

If you believe we have not handled your personal information lawfully, you may complain to:

Regulator
The Information Regulator (South Africa)
Address
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Complaints
[email protected]
Enquiries
[email protected]

Please confirm the Regulator's current contact details before publishing, and have this notice reviewed by a South African attorney. This page is a summary of our practices, not legal advice.

Returns & refunds · Delivery & shipping