Privacy Policy
Last updated: 26 September 2026
The Treasure Box ("we", "us", "our") respects your privacy. This policy explains how we collect, use, share and protect your personal information when you visit www.thetreasurebox.co.za, place an order, or contact us by WhatsApp, email, phone or Instagram. We process personal information in line with the Protection of Personal Information Act 4 of 2013 ("POPIA").
1. Who we are
The Treasure Box is the responsible party for your personal information. Our Information Officer can be reached at wealthduohq@gmail.com, on 082 677 0660, or at 215 Julius Jeppe Street, Pretoria, Gauteng, 0145, South Africa.
2. Information we collect
- Contact and delivery details – your name, email address, phone number, and billing and delivery addresses.
- Order information – the products you buy, your order history, returns, and any notes or gift messages you add.
- Payment information – payments are processed by our payment providers. We do not see or store your full card number.
- Communications – messages you send us by WhatsApp, email, phone, Instagram or our contact form.
- Technical information – your IP address, device and browser type, and how you use our website, collected through cookies and similar technologies.
- Marketing preferences – whether you have subscribed to our newsletter.
3. How we use your information
- to process, deliver and support your orders, including returns, refunds and warranty claims;
- to communicate with you about your order and answer your questions;
- to send you our newsletter and offers, but only if you have opted in (you can unsubscribe at any time);
- to keep our website secure and prevent fraud;
- to improve our website, products and service; and
- to meet our legal, tax and accounting obligations.
We process your information because it is needed to perform our contract with you, to comply with the law, for our legitimate business interests, or because you have given your consent.
4. Direct marketing
We only send marketing messages to people who have opted in, or to existing customers about similar products, as allowed by section 69 of POPIA. Every marketing email has an unsubscribe link, and you can ask us to stop at any time by WhatsApp or email.
5. Who we share information with
We never sell your personal information. We share it only with trusted service providers ("operators") who help us run our business and who must keep it confidential and secure:
- Shopify, which hosts our online store and checkout;
- payment providers that process your payment;
- courier and delivery companies that deliver your order;
- email and messaging services we use to talk to you, including WhatsApp and Instagram (operated by Meta) when you choose to contact us there; and
- professional advisers, or public authorities where the law requires it.
6. Transfers outside South Africa
Some of our service providers, including Shopify, store information on servers outside South Africa. We only use providers that are subject to laws, binding agreements or policies that give your information a level of protection similar to POPIA, as required by section 72 of POPIA.
7. Cookies
Our website uses cookies to keep your shopping bag and wishlist working, remember your preferences, and understand how the site is used. You can block or delete cookies in your browser settings, but some parts of the site may not work properly without them.
8. How long we keep information
We keep personal information only for as long as we need it for the purposes above. Order and payment records are kept for at least five years, as required by South African tax and accounting law. After that, we delete or anonymise them.
9. How we protect your information
We use reasonable technical and organisational safeguards, including encrypted (SSL) connections and a secure, PCI-compliant checkout. No method of sending information over the internet is completely secure, but we work hard to protect your information, and we will notify you and the Information Regulator if a security compromise affects you.
10. Your rights
Under POPIA you have the right to:
- ask whether we hold personal information about you, and request a copy of it;
- ask us to correct or delete information that is inaccurate, out of date, or that we are no longer allowed to keep;
- object to us processing your information, including for direct marketing; and
- withdraw any consent you have given us.
To make a request, contact us using the details below. We may need to confirm your identity before we respond.
11. Children
Our website is not intended for children under 18. We do not knowingly collect personal information about children without the consent of a parent or guardian.
12. Complaints
If you are unhappy with how we have handled your personal information, please contact us first so we can put it right. You also have the right to lodge a complaint with the Information Regulator (South Africa) – inforegulator.org.za.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
14. Contact us
The Treasure Box
215 Julius Jeppe Street, Pretoria, Gauteng, 0145, South Africa
Phone / WhatsApp: 082 677 0660
Email: wealthduohq@gmail.com