PRIVACY POLICY

Last updated: 14 November 2026

Rosalita respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Rosalita Fashion (Pty) Ltd, trading as Rosalita / Rosalita Atelier (“Rosalita”, “we”, “us” or “our”), collects, uses, stores, protects and shares personal information when you visit our website, purchase our products, download resources, subscribe to our communications, contact us or otherwise interact with our business.

We process personal information in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”).

Our online store is hosted by Shopify, which provides the ecommerce platform through which we offer our products and services.

1. WHO IS RESPONSIBLE FOR YOUR PERSONAL INFORMATION?

The responsible party is:

Rosalita Fashion (Pty) Ltd
Trading as Rosalita / Rosalita Atelier
Company registration number: 2013/098361/07

Physical and legal service address:
148 Bosuil Road
Kameeldrift East
Pretoria
0039
South Africa

Email: hello@rosalita.co.za
Telephone: +27 81 049 7595
Website: rosalita.co.za

Information Officer: Talita du Preez

Privacy enquiries and requests may be directed to our Information Officer at hello@rosalita.co.za.

2. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with Rosalita.

This may include:

• Your name and surname

• Email address

• Telephone number

• Billing and delivery addresses

• Information necessary to process and fulfil orders

• Order and transaction history

• Information relating to returns, refunds and customer enquiries

• Correspondence and information you provide when contacting us

• Information supplied when subscribing to our email communications

• Information provided when requesting or downloading free resources

• Names, initials, wording, dimensions or other specifications supplied for personalised products

• IP address, browser, device and website-usage information

• Cookie and similar technology information

• Marketing preferences and communication consent records

• Other information reasonably necessary to provide the products or services you request

Payment information is processed through Shopify and/or the applicable payment service provider.

Rosalita does not ordinarily receive or store complete payment-card details when payments are handled by these providers.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information in the following ways:

Directly from you: When you place an order, contact us, subscribe to communications, request a free download or provide information for a personalised product.

Automatically through our website: When you browse or interact with our website, including through cookies and similar technologies.

Through service providers: When third-party providers process payments, deliver orders, provide website services or assist with other business functions.

From other lawful sources: Where permitted by applicable law or where you have authorised the disclosure.

We collect and process personal information only where there is a lawful basis and a legitimate purpose for doing so.

4. WHY WE PROCESS YOUR PERSONAL INFORMATION

We may process personal information where reasonably necessary to:

• Process and fulfil orders

• Receive and process payments

• Arrange delivery of purchased products

• Provide access to purchased or free digital resources

• Communicate with you regarding orders or enquiries

• Manufacture personalised products according to your instructions

• Manage returns, refunds and customer service

• Operate, maintain and improve our website

• Maintain appropriate business and transaction records

• Protect our website and business against fraud, misuse and security threats

• Comply with accounting, tax and other legal obligations

• Establish, exercise or defend legal rights

• Respond to lawful requests from authorities

• Send marketing communications where permitted by law

• Understand website performance and improve our services, subject to applicable privacy requirements

Depending on the circumstances, processing may be necessary to fulfil a contract, comply with a legal obligation, pursue a legitimate interest recognised by law or give effect to your consent.

Where certain information is required to complete a transaction or manufacture a personalised product, failure to provide that information may prevent us from fulfilling the order.

5. PERSONALISED ORDERS

Where you order a personalised or custom-made product, we may need additional information to manufacture it correctly.

This may include:

• Names or initials

• Wording for embossing or engraving

• Requested dimensions

• Material or finish selections

• Other individual specifications you provide

We use this information primarily to prepare, manufacture and fulfil your order and to maintain appropriate transaction records.

Please avoid providing personal information that is unnecessary for the product you are ordering.

6. SHOPIFY AND OUR ONLINE STORE

Our online store is hosted by Shopify.

Shopify provides the ecommerce infrastructure through which our website and online store operate.

When you browse our website, place an order or interact with the store, Shopify may collect and process personal information, including information about your device, browsing activity, purchases and transactions.

Information submitted through our store may be shared with Shopify and service providers involved in operating the ecommerce platform, processing payments, providing store functionality and supporting related services.

Depending on the Shopify services and features enabled, Shopify may also process information to improve shopping experiences, provide personalised services and support advertising or marketing activities.

Some information may be processed or stored outside South Africa.

For more information about Shopify's handling of consumer information and available privacy choices, please refer to:

Shopify Consumer Privacy Policy

7. SERVICE PROVIDERS AND SHARING OF INFORMATION

We do not sell your personal information to third parties.

We may share personal information with service providers where reasonably necessary to operate our business, fulfil transactions or provide requested services.

These providers may include:

• Shopify

• Payment service providers

• Website hosting, development and technical support providers

• Email and communications providers

• Accounting and professional advisers

• Website analytics and security providers

• Delivery and courier providers, including The Courier Guy

For example, your name, delivery address and contact details may be shared with our courier to arrange delivery of your order.

We may also disclose personal information where required by law, court order or another lawful process, or where reasonably necessary to establish, exercise or defend legal rights.

Where service providers process personal information on our behalf, we take reasonable steps to ensure that appropriate privacy and security arrangements are in place.

8. INTERNATIONAL PROCESSING AND TRANSFERS

Some technology and service providers used by Rosalita, including Shopify and related providers, may process or store personal information outside South Africa.

Where personal information is transferred internationally, we will take reasonable steps to ensure that such transfers comply with applicable requirements of POPIA, including section 72 where applicable.

This may include relying on appropriate contractual protections, adequate data-protection safeguards, consent or another lawful basis recognised under POPIA.

9. EMAIL SUBSCRIPTIONS AND MARKETING COMMUNICATIONS

You may choose to subscribe to Rosalita's email communications or receive updates when requesting certain free resources.

Where permitted by law, we may use your contact information to send communications about:

• New products and Atelier collections

• Sewing patterns and creative resources

• Journals and practical resources

• Scripture-rooted reflections and teachings

• Videos and new website content

• Rosalita news, announcements and occasional promotions

We will obtain consent for electronic direct marketing where required by POPIA and other applicable law.

Where you request a free resource, we may use your email address to provide access to the resource and send necessary delivery or access information.

Requesting or downloading a free resource does not automatically mean you have agreed to receive ongoing marketing communications.

Where marketing consent is required, it will be requested separately.

You may unsubscribe from marketing emails at any time using the unsubscribe link provided in the communication or by contacting us at hello@rosalita.co.za.

Unsubscribing from marketing communications will not prevent us from sending information necessary to fulfil an existing order, provide a requested resource or respond to an enquiry.

10. COOKIES AND WEBSITE TECHNOLOGIES

Our website may use cookies and similar technologies to operate the online store and improve the visitor experience.

These technologies may be used for:

• Essential website functionality

• Shopping cart and checkout functions

• Security and fraud prevention

• Remembering preferences

• Website performance and analytics

• Marketing and advertising, where enabled and legally permitted

Some cookies may be placed or processed by Shopify or other service providers.

Where required by applicable law, we will provide appropriate information and consent or privacy-choice mechanisms.

You may also be able to manage cookies through your browser settings.

Disabling certain cookies may affect the functionality of the website, including shopping cart and checkout features.

11. SECURITY OF PERSONAL INFORMATION

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, interference, alteration, destruction or unauthorised disclosure.

These measures may include the use of secure ecommerce systems, access controls, appropriate service providers and reasonable internal security practices.

Our ecommerce platform and payment service providers maintain their own security measures for the systems they operate.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Where a security compromise involving personal information occurs, we will take the steps required by applicable law, including notifying the Information Regulator and affected individuals where POPIA requires this.

12. RETENTION OF PERSONAL INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for as long as retention is required or permitted by applicable law.

Different types of information may be retained for different periods.

For example, order records, invoices and accounting information may need to be retained to comply with tax, accounting or other legal obligations after an order has been completed.

Information relating to marketing subscriptions may be retained while you remain subscribed, subject to applicable legal requirements and reasonable recordkeeping needs.

Where personal information is no longer lawfully required, we will take appropriate steps to delete, destroy or de-identify it in accordance with applicable law.

13. YOUR PRIVACY RIGHTS

Subject to POPIA and other applicable law, you may have the right to:

• Ask whether we hold personal information about you

• Request access to personal information we hold about you

• Request correction of inaccurate, incomplete, outdated, excessive or misleading information

• Request deletion or destruction of information where we are no longer legally authorised to retain it

• Object to certain processing of your personal information

• Withdraw consent where processing is based on consent, subject to applicable law

• Object to or opt out of direct marketing

• Lodge a complaint with the Information Regulator

We may need to verify your identity before providing access to or changing personal information.

Certain requests may be subject to legal requirements, permitted limitations or mandatory record-retention obligations.

To exercise your rights, please contact our Information Officer at:

hello@rosalita.co.za

14. CHILDREN'S PERSONAL INFORMATION

Our online store and products are not specifically directed at children.

We do not knowingly collect children's personal information for purposes unrelated to lawful business activities.

Where processing a child's personal information requires the consent or authorisation of a competent person or another lawful basis under POPIA, we will process that information only where the applicable legal requirements are satisfied.

If you believe that a child has provided personal information to Rosalita in circumstances that may not comply with applicable law, please contact us.

15. THIRD-PARTY WEBSITES AND SOCIAL MEDIA

Our website may contain links to third-party websites, video platforms, social-media services or other external resources.

These may include YouTube, Facebook, Instagram, Pinterest or other platforms on which Rosalita shares content.

When you visit or interact with these external services, their own privacy policies and practices apply.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

16. PRIVACY COMPLAINTS

If you have a concern about how Rosalita collects, uses or protects your personal information, please contact our Information Officer so that we can investigate the matter.

Information Officer: Talita du Preez
Email: hello@rosalita.co.za
Telephone: +27 81 049 7595

You also have the right to lodge a complaint with the Information Regulator (South Africa).

Information about the Regulator and its complaints procedures is available at:

Information Regulator South Africa

17. ACCESS TO RECORDS AND PAIA

Requests for access to records held by Rosalita may also be governed by the Promotion of Access to Information Act 2 of 2000 (“PAIA”).

Our PAIA Manual provides information about the categories of records held by the business and the procedures for requesting access to those records where PAIA applies.

For enquiries regarding access to records or to request a copy of our PAIA Manual, please contact our Information Officer at:

hello@rosalita.co.za

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers, legal obligations or privacy practices.

The revised policy will be published on our website with an updated revision date.

Where required by applicable law, we will provide additional notice or request consent before introducing material changes to how personal information is processed.

19. CONTACT INFORMATION

For privacy questions, requests or complaints, please contact:

Rosalita Fashion (Pty) Ltd
Trading as Rosalita / Rosalita Atelier

Information Officer: Talita du Preez
Company registration number: 2013/098361/07

Physical and legal service address:
148 Bosuil Road
Kameeldrift East
Pretoria
0039
South Africa

Email: hello@rosalita.co.za
Telephone: +27 81 049 7595
Website: rosalita.co.za