Privacy Policy

Last updated: 23 July 2025

This Privacy Policy describes how Garden Bench (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website, use our services, or make a purchase (collectively, the “Services”). “You” or “your” refers to users of the Services, including customers, website visitors, and others whose personal information we process.

By using our Services, you consent to the collection, use, and disclosure of your personal information as set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Services.


1. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our business operations or legal obligations under the Protection of Personal Information Act, 2013 (POPIA). Updates will be posted on our website with the revised “Last updated” date.


2. What Personal Information We Collect

We collect and process personal information that is reasonably necessary for our business functions. The type of information depends on how you interact with us and may include:

  • Contact Information: Name, email address, phone number, physical or delivery address

  • Order Details: Billing and shipping details, payment confirmation

  • Account Information: Username, password

  • Shopping Activity: Items viewed, added to cart or wishlist

  • Support Interactions: Information you provide when communicating with us

  • Usage Data: IP address, browser/device type, session information, site interaction

  • Cookies: Information collected using cookies or similar tracking tools (see section 6)


3. Purpose for Processing

In terms of POPIA, we only process your personal information for lawful, specific, and explicitly defined purposes, including:

  • Processing and fulfilling your orders

  • Managing your account and user experience

  • Providing customer service and support

  • Sending service-related or promotional communications

  • Complying with legal and regulatory obligations

  • Preventing fraud, abuse, or unlawful activity


4. Legal Basis for Processing

We process personal information based on one or more of the following lawful grounds under POPIA:

  • Your consent

  • Performance of a contract (e.g., fulfilling a purchase)

  • Compliance with legal obligations

  • Legitimate interests in running our business, provided these are not outweighed by your rights


5. Disclosure of Personal Information

We may disclose your personal information to the following parties:

  • Service providers and contractors (e.g., payment processors, couriers, IT and analytics providers)

  • Marketing and advertising partners, to help us personalise and promote our services

  • Government authorities, regulators, or law enforcement when required by law

  • Other parties, with your consent or at your direction

We do not sell your personal information.


6. Use of Cookies

Our website uses cookies and similar technologies to enhance functionality, analyse traffic, and personalise content. You may disable cookies via your browser settings, but this may affect your experience on the site.


7. Storage and Retention

We store your personal information securely using appropriate technical and organisational safeguards. We retain information only as long as necessary for the purpose it was collected or as required by law (e.g., tax, accounting, and legal obligations).


8. Your Rights Under POPIA

As a South African data subject, you have the following rights:

  • Right of Access – to request what personal information we hold about you

  • Right to Correction – to request updates or corrections to inaccurate data

  • Right to Deletion – to request deletion of your personal information when it is no longer needed

  • Right to Object – to object to processing for direct marketing or on grounds relating to your situation

  • Right to Withdraw Consent – at any time where consent is the legal basis for processing

  • Right to Lodge a Complaint – with the Information Regulator (see below)

You can exercise your rights by contacting us at the email addresses below.


9. Children’s Information

Our Services are not intended for children under the age of 18, and we do not knowingly collect personal information from minors. If you believe a child has provided personal information, please contact us to delete it.


10. Third-Party Websites

Our website may contain links to external websites not operated by us. We are not responsible for the privacy practices or content of third-party sites. We recommend reviewing their privacy policies before sharing personal information.


11. Security Measures

We use reasonable safeguards, including encryption and secure servers, to protect your personal information. However, no method of transmission over the internet is 100% secure. You are responsible for keeping your account credentials confidential.


12. Contact Information

For questions, data access requests, or to exercise your rights under POPIA, please contact us:

📧 chris@gardenbench.co.za

📧 charles@gardenbench.co.za


13. Information Regulator (South Africa)

If you are not satisfied with our handling of your request or concern, you may contact the Information Regulator:

  • Email: complaints.IR@justice.gov.za

  • Website: https://www.justice.gov.za/inforeg/