Privacy Policy

Last Updated: 29 April 2026

1. Who We Are

This website, located at https://littletreehugger.cdns.co.za, is operated by Little Treehugger. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner.

2. What Personal Data We Collect

Because we operate a "guest-only" checkout system, we do not require you to create a user profile or account. We only collect the information absolutely necessary to provide our services to you.

Information you provide to us directly:

Order & Shipping Details: When you make a purchase, we collect your name, billing address, physical delivery address, email address, and phone number.
Customer Support & Repairs: If you contact us for a repair, return, or general inquiry, we collect your email address and any information you provide in your correspondence, including photographic evidence of damaged items.

Information we collect automatically:

Technical Data: We collect information about your device and browser, including your IP address, time zone, and how you interact with our website.

(Note: We have disabled public comments and user media uploads on our site, so no personal data is collected through those mechanisms.)

3. Why We Collect This Data

We use your personal information strictly for the following business purposes:

Fulfilling Orders: To process your transactions, arrange for courier delivery, and send you order confirmations and shipping updates.
Providing Support: To manage requests for our free repair service or process returns.
Site Improvement: To understand how visitors navigate our store so we can improve the layout and product offerings.
Legal Compliance: To maintain necessary accounting and tax records as required by South African law.

4. Cookies and Google Analytics

We use cookies (small data files stored on your browser) to ensure our website functions correctly and to analyze site traffic.

Essential E-commerce Cookies: WooCommerce uses temporary cookies to keep track of cart data (what items you have added to your basket) and to ensure the checkout process functions smoothly. These cookies contain no personal data and expire when you close your browser or shortly after.
Google Analytics: We use Google Analytics to monitor website traffic and user behavior. Google Analytics utilizes cookies to collect anonymous data such as session duration, pages visited, and general geographic location. This data is aggregated and does not personally identify you. You can learn more about how Google uses data here, or opt-out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal information. We only share specific data with trusted third parties to facilitate our services:

Payment Processors (Peach Payments): We use Peach Payments to securely process your payments. We do not view or store your credit card or banking details on our servers. When you check out, your payment data is securely handled by Peach Payments. You can review their privacy policy at https://www.peachpayments.com/legal-doc/privacy-cookie-policy/.
Delivery Partners: We share your name, delivery address, and phone number with our designated courier partners to ensure your order reaches you safely.
Analytics Providers: As mentioned above, anonymous site usage data is shared with Google Analytics.

6. How Long We Retain Your Data

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it.

Order Information: We retain basic customer and transaction records for a minimum of five (5) years to comply with South African tax and accounting laws.
Customer Service Correspondence: Emails regarding repairs or support are kept for 12 months to ensure we can reference past interactions if an ongoing issue arises.
Analytics Data: Data collected via Google Analytics is retained according to Google's standard data retention policies.

7. Security & Data Breaches

We implement reasonable technical and administrative security measures, including SSL encryption, to protect your data from unauthorized access, loss, or misuse. In the event of a suspected data breach, we have internal procedures in place to assess the situation and will notify affected individuals and the Information Regulator as legally required.

8. Your Rights Over Your Data

Under the Protection of Personal Information Act (POPIA), you have the right to:

Request details regarding the personal information we hold about you.
Request that we correct any inaccurate information.
Request the deletion of your personal data (excluding data we are legally obliged to retain for administrative, legal, or security purposes).