PRE-ORDER: ORDERS DISPATCH FROM 20 OCTOBERVISIT US AT MOFFET ON MAINSHOP THE ONLINE STORE 24/7NEW ARRIVALS DROPPING WEEKLY

Legal

Privacy Policy

The Christmas House Shop ("we", "us"). We respect your privacy and handle your personal information in line with South Africa's Protection of Personal Information Act (POPIA). This policy explains what we collect, why, who we share it with, and the rights you have.

What we collect and why

  • When you place an order: your name, email address, phone number, delivery address (or the store you collect from), the items you order and any order notes. We use these to process your order, take payment, deliver it and keep you updated.
  • When you use our contact form: your name, email address and message, used only to reply to you.
  • When you join our newsletter: your email address, used to send you news about new arrivals and promotions. We only add you if you sign up yourself.
  • When you message us on WhatsApp: your name, number and messages, used to help you.

Your card details never reach us. Payments are made on PayFast's secure payment page, and we never see or store your card number.

We don't use analytics, advertising trackers or tracking cookies. Your shopping cart is saved in your own browser so it is still there when you come back, and it is only sent to us when you check out.

Who we share it with

We share only what each service needs to do its job, and we never sell your personal information.

  • PayFast (South Africa) processes your payment. They receive your name, email address and order amount.
  • The Courier Guy (South Africa) delivers your order. They receive your delivery address to quote delivery rates, and your name and phone number when we book your delivery.
  • Our online store system (WordPress and WooCommerce, hosted in Johannesburg, South Africa) stores your order records.
  • Vercel (United States) hosts our website, so the details you enter at checkout and in our forms pass through their servers.
  • Resend (United States) sends your order confirmation email and delivers contact form messages to us.
  • EmailOctopus (United Kingdom) manages our newsletter list, if you sign up.
  • WhatsApp (Meta), if you message us on WhatsApp or we contact you there about your order.

Some of these services store information outside South Africa. We only use providers that are bound by data protection laws or agreements that protect your information to a standard similar to POPIA.

Our homepage also shows photos from Unsplash and our Instagram feed (delivered by Behold and Instagram). Loading those photos shares your IP address with those services, the same as visiting any website. Google Maps only sees your visit if you click one of our map links.

How long we keep it

  • Order records: 5 years, as South African tax law requires.
  • Contact form and WhatsApp messages: only as long as we need to deal with your enquiry.
  • Newsletter: until you unsubscribe.

Keeping it safe

Our website only works over a secure (HTTPS) connection, access to customer records is limited to the people who need it to run the shop, and payment is handled entirely by PayFast.

Your rights

You have the right to:

  • ask what personal information we hold about you;
  • ask us to correct or delete it;
  • object to us using it;
  • unsubscribe from our newsletter at any time, using the link in every email.

To make a request, WhatsApp us on +27 60 997 5451 or use our contact form.

If you're not happy with how we've handled your information, you can complain to the Information Regulator of South Africa at inforegulator.org.za.

We'll update this policy if anything changes. Last updated 1 October 2026.