Privacy Policy

Section 1

Who We Are

WallPrint is a South African business operating the online store at wallprintstore.com. We are the "responsible party" (under South Africa's Protection of Personal Information Act, or POPIA) and the "data controller" (under EU and UK data protection law) in respect of the personal information we collect through our store.

Our store is hosted and powered by Shopify Inc. Where Shopify processes your data on our behalf, it acts as an "operator" or "data processor." Where Shopify processes data for its own purposes as part of its platform, it is an independent responsible party. See Section 6 for more detail.

If you have any questions about this policy or wish to exercise any of your rights, please reach out via our contact page.

Section 2

Information We Collect

Depending on how you interact with our store, we may collect the following categories of personal information:

Information you give us directly

• Contact details — your name, email address, phone number, and delivery or billing address.
• Payment information — card details and billing information. Note: WallPrint does not store your full card number. Payment processing is handled securely by Shopify's payment providers.
• Account information — username, password, and preferences if you create an account.
• Custom order details — wall dimensions, design files, images, or instructions you submit as part of a custom wallpaper or bespoke order.
• Communications — any messages, enquiries, or feedback you send us through our contact form, email, or WhatsApp.

Information collected automatically

• Device and browser information — your IP address, browser type and version, device type, and operating system.
• Usage data — pages you visit, products you view or add to your cart or wishlist, how you navigate the store, and time spent on pages.
• Transaction data — your purchase history, returns, and order status.
• Cookies and tracking data — see Section 5 for full details.

Information from third parties

• From Shopify as part of operating the store platform.
• From payment processors and fulfilment partners in connection with completing your order.
• From social media platforms if you interact with our store through a social login or link.

Section 3

How We Use Your Information

We collect and use your personal information only for specific, legitimate purposes. These include:

Fulfilling your order

Processing payments, producing and dispatching your products, arranging delivery, managing returns or exchanges, and communicating with you about your order status. This is necessary to perform our contract with you.

Running and improving our store

Managing your account, personalising your shopping experience, remembering your preferences, enabling your wishlist, and improving the performance and design of our website.

Customer support

Responding to your enquiries, resolving disputes, and maintaining our relationship with you.

Marketing and promotions

Sending you marketing emails, promotional offers, and product updates — but only where you have given consent or where permitted by applicable law. You can opt out at any time. See Section 10 for more detail.

Security and fraud prevention

Detecting and preventing fraudulent, illegal, or unauthorised activity, verifying your identity, and keeping our store and your account secure.

Legal compliance

Meeting our obligations under applicable law, responding to lawful requests from authorities, enforcing our terms, and resolving legal disputes.

Section 4

How We Share Your Information

We do not sell your personal information. We may share it with third parties only in the following circumstances:

Service providers and operators

We share information with companies that help us operate the store and fulfil orders, including Shopify (our platform provider), payment processors, delivery and logistics partners, and third-party fulfilment suppliers for drop-shipped products. These parties are contractually required to protect your information and may only use it for the purposes we specify.

Marketing and advertising partners

We may share limited information with advertising and analytics partners to show you relevant content and measure campaign performance. This may include data processed by Shopify's advertising tools. Depending on where you live, you may have the right to opt out of this — see Section 9.

Legal and regulatory requirements

We may disclose your information where required by law, court order, or request from a regulatory authority such as the South African Information Regulator, or equivalent bodies in other jurisdictions.

Business transactions

In the event of a merger, acquisition, or sale of our business, your personal information may be transferred as part of that transaction. You will be notified of any such change and your rights will be maintained.

With your consent

We may share your information for any other purpose where you have given explicit consent.

Section 5

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to operate correctly, remember your preferences, and understand how visitors use our store. A cookie is a small text file stored on your device when you visit a website.

Types of cookies we use

• Essential cookies — required for the store to function. These enable your shopping cart, account login, and secure checkout. You cannot opt out of these without disabling core store functions.
• Preference cookies — remember your settings and preferences across visits (e.g. language, currency).
• Analytics cookies — help us understand how visitors use our site so we can improve it. Data collected is aggregated and not used to identify you personally.
• Marketing cookies — used to show you relevant advertising on our site and other platforms based on your browsing activity.

Non-essential cookies (analytics and marketing) are only placed with your consent, which you can manage through our cookie consent banner when you first visit the site. You can also update your preferences at any time via your browser settings.

Section 6

Our Relationship with Shopify

Our store is built on and hosted by Shopify Inc. (headquartered in Canada). When you use our store, your personal information is transmitted to and processed by Shopify as part of providing the platform. Shopify acts as an operator on our behalf for order processing and store management, and as an independent data controller for its own platform operations.

Shopify may also use data from your interactions with our store — alongside data from other Shopify merchants — to improve and provide its platform services. In these cases, Shopify is responsible for those processing activities and your rights in relation to them.

To understand how Shopify processes your personal information and to exercise any rights related to Shopify's own processing, please visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Section 7

International Transfers of Personal Information

WallPrint is based in South Africa. Because we use Shopify and other international service providers, your personal information may be transferred to, stored in, or processed in countries outside South Africa — including Canada, the United States, and other regions where our service providers operate.

South Africa (POPIA)

Under POPIA, we may only transfer your personal information to a country outside South Africa if that country has adequate data protection laws, or where appropriate safeguards are in place — such as a contract between WallPrint and the receiving party that requires protection equivalent to POPIA, or where the transfer is necessary to perform our contract with you (for example, processing your order through Shopify).

European Economic Area and United Kingdom

If your personal information is transferred out of the EEA or UK, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, or the UK's equivalent, to ensure your information remains protected to the standard required under GDPR and the UK GDPR.

Section 8

Data Retention & Security

How long we keep your information

We retain your personal information only for as long as is necessary for the purposes for which it was collected, or as required by law. In practice this means:

• Order and transaction records are retained for a minimum of 5 years for accounting and legal compliance purposes.
• Account information is retained for as long as your account is active and for a reasonable period after closure.
• Marketing preferences and consent records are retained until you withdraw consent or request deletion.
• Customer communications are retained for a period sufficient to resolve any related queries or disputes.

When information is no longer needed, it is securely deleted or anonymised.

How we protect your information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These include encrypted connections (HTTPS), access controls, and secure hosting through Shopify's infrastructure.

Please be aware that no method of transmission over the internet or electronic storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security. We recommend that you do not share account credentials with anyone and that you use secure, private connections when making purchases.

Section 9

Your Rights

Depending on where you live, you have rights in relation to the personal information we hold about you. These rights may vary by jurisdiction, but we extend the following to all customers:

To exercise any of these rights, please contact us via our contact page. We will respond within a reasonable time and in accordance with applicable law. We may need to verify your identity before processing your request.

Section 10

Marketing Communications

We may send you marketing emails, promotional offers, and product updates where you have opted in, or where you are an existing customer and we are communicating about similar products or services — as permitted under POPIA Section 69 and applicable law.

You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting us via our contact page. Opting out of marketing will not affect transactional communications about your orders or account.

Section 11

Children's Privacy

Our store is not intended for use by children under the age of 18, or under the applicable age of majority in your jurisdiction. We do not knowingly collect personal information from minors. If you believe a child has provided us with their personal information without parental consent, please contact us via our contact page and we will take steps to delete it promptly.

Section 12

Third-Party Links

Our store may contain links to third-party websites, social media platforms, or other online services. These links are provided for convenience and do not constitute an endorsement. We are not responsible for the privacy practices or content of those sites, and this Privacy Policy does not apply to them. We encourage you to read the privacy policy of any external site you visit.

Section 13

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you directly. We encourage you to review this policy periodically.

Your continued use of our store after any update constitutes your acceptance of the revised policy.

Section 14

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to raise a concern about how we have handled your personal information, please contact us via our contact page.

We will acknowledge your request promptly and aim to resolve all privacy-related queries within a reasonable timeframe, and no later than required by applicable law.

Regulatory authorities

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority:

• South Africa: Information Regulator (South Africa) — inforegulator.org.za
• European Union: Your national data protection authority (a full list is available at edpb.europa.eu).
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk