At Cards & Games Haven (CG Haven), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at cghaven.co.za (the “Site”), make purchases, or interact with our services. We operate as an online retailer specializing in trading card games, board games, tabletop essentials, collector’s items, and related merchandise, fostering a community for gaming enthusiasts.
By using our Site, you consent to the practices described in this policy. If you do not agree, please do not use our Site. This policy complies with the Protection of Personal Information Act (POPIA) of South Africa and other applicable data protection laws.
1. Information We Collect
We collect information to provide the best possible experience for our customers and community. The types of information we may collect include:
Personal Information You Provide
- Account and Contact Details: When you create an account, subscribe to our newsletter, or contact us, we collect your name, email address, phone number, and username.
- Order and Payment Information: To process purchases, we collect billing and shipping addresses, payment card details (processed securely via third-party providers), and order history.
- Communication Data: Information you provide when inquiring about products, requesting support, or participating in community features (e.g., reviews or forums, if available).
Information Collected Automatically
- Usage Data: IP address, browser type, device information, pages visited, time and date of visits, and referral sources.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar tools to enhance functionality, analyze trends, and personalize your experience. See Section 6 for details.
We do not collect sensitive personal information (e.g., racial or ethnic origin, health data) unless voluntarily provided in a support context and only with your explicit consent.
2. How We Use Your Information
We use the collected information for legitimate business purposes, including:
- Processing and fulfilling orders, managing your account, and handling returns or refunds.
- Communicating with you about your purchases, promotions, updates on new releases (e.g., trading card expansions or board game launches), and community events.
- Improving our Site, products, and services through analytics and feedback.
- Personalizing your experience, such as recommending games or accessories based on your browsing history.
- Complying with legal obligations, preventing fraud, and enforcing our terms of service.
- Sending marketing communications, which you can opt out of at any time.
Under POPIA, we process your information based on consent, contract necessity (e.g., for orders), or our legitimate interests (e.g., site security).
3. Sharing Your Information
We do not sell or rent your personal information. We may share it in limited circumstances:
- Service Providers: With trusted third parties who assist us, such as payment processors (e.g., PayFast or Stripe), shipping carriers (e.g., The Courier Guy), email service providers (e.g., Mailchimp), and analytics tools (e.g., Google Analytics). These providers are contractually obligated to protect your data and use it only for our specified purposes.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
- Legal Requirements: If required by law, such as in response to a court order, or to protect our rights, safety, or property.
- With Your Consent: For any other purpose with your explicit approval.
All sharing complies with POPIA’s cross-border transfer rules, ensuring adequate protection.
4. Data Retention
We retain your personal information only as long as necessary:
- Order-related data: For 7 years to comply with tax and accounting laws.
- Account data: Until you delete your account or request removal.
- Marketing data: Until you unsubscribe.
After retention periods, we securely delete or anonymize the data.
5. Your Rights Under POPIA
As a data subject, you have rights regarding your personal information:
- Access: Request confirmation of whether we hold your data and access a copy.
- Correction: Update inaccurate or incomplete information.
- Deletion: Request erasure (subject to legal retention requirements).
- Objection/Restriction: Object to processing or restrict it in certain cases.
- Portability: Receive your data in a structured, machine-readable format.
- Withdraw Consent: At any time, where processing is consent-based.
To exercise these rights, contact us at privacy@cghaven.co.za. We will respond within 30 days. You also have the right to lodge a complaint with the Information Regulator of South Africa.
6. Cookies and Tracking Technologies
Our Site uses cookies to:
- Maintain your session and preferences.
- Analyze site performance and user behavior.
- Deliver targeted ads on third-party sites.
Essential cookies are required for site functionality and cannot be disabled. You can manage non-essential cookies via your browser settings. For more details, visit our Cookie Policy (to be added upon request).
We use Google Analytics for aggregated insights; you can opt out via Google’s tools.
7. Children’s Privacy
Our Site is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If we discover such data, we will delete it promptly. Parents/guardians can contact us to review or remove child data.
8. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption for payment data and secure servers. However, no online transmission is 100% secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
9. International Users
Our Site is hosted in South Africa but may be accessed globally. By using it, you consent to data transfer to and processing in South Africa, which may have different data protection laws.
10. Changes to This Privacy Policy
We may update this policy periodically to reflect changes in our practices or laws. We will notify you via email or Site posting for material changes, effective upon the new “Effective Date.” Continued use of the Site after changes constitutes acceptance.
11. Contact Us
For questions, concerns, or to exercise your rights, reach out to:
Cards & Games Haven at info@cghaven.co.za
Thank you for trusting Cards & Games Haven with your information. We value your passion for gaming and are here to make your experience magical!