Privacy Policy

Last updated: 1 September 2026

Who we are

This Privacy Policy applies to voidgallery.co.za, operated by Ofentse Makamane, trading as Void Gallery, based in Johannesburg, South Africa. For any privacy-related queries, contact us at info@voidgallery.co.za.

This policy is available at: voidgallery.co.za/privacy-policy

What personal data we collect and why we collect it

Orders

When you place an order through our Site, we collect information such as your name, billing and shipping address, email address, phone number, and order details (items purchased, order value). We use this information to process, fulfil, and deliver your order, and to communicate with you about its status. This data is collected on the basis that it is necessary to perform our contract with you when you make a purchase.

We do not store your full payment card details. Payments are processed securely by our payment provider, Yoco, who collects and processes your payment information directly under their own privacy policy.

Accounts

If you create an account on our Site, we store the name, email address, and address information you provide. Account holders can see, edit, or delete their personal information at any time (except changing their username). Site administrators can also see and edit this information.

Comments

When visitors leave comments on the Site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help with spam detection. An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to check whether you are using it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the Site (e.g. as an account holder or contributor), you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the Site can download and extract any location data from images on the Site.

Contact forms

If our Site includes a contact form, submissions may include your name, email address, and message content. We retain contact form submissions for 12 months for customer service purposes and do not use this information for marketing without your separate consent.

Cookies

If you leave a comment on our Site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so you do not have to fill in your details again when you leave another comment. These cookies last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

WooCommerce cookies: Our Site uses WooCommerce, which sets cookies to manage your shopping cart contents and to remember your preferences while browsing the Site. These are essential for the Site’s checkout functionality to work.

Analytics

We use Google Analytics to understand how visitors use our Site. You can opt out of analytics tracking through your browser settings or by installing Google’s opt-out browser add-on. See Google’s Privacy Policy for more information: https://policies.google.com/privacy

Who we share your data with

We share your personal data with the following third parties, only as necessary to operate the Site and fulfil your orders:

Payment processor (Yoco) — to securely process your payment
Courier — depending on the courier used to deliver your order, we share your name, address, and contact number with them so they can complete delivery
Web hosting provider (Xneelo) — to store and serve the Site’s data

We do not sell your personal information to third parties, and we do not share your data for third-party marketing purposes without your consent.

How long we retain your data

Order and customer information is retained for 12 months.
Contact form submissions are retained for 12 months.
Comments and their metadata are retained indefinitely, so we can recognise and approve follow-up comments automatically instead of holding them for moderation.
Account information is retained for as long as an account remains active. Account holders can request deletion at any time.

What rights you have over your data

If you have an account on this Site, or have left comments or placed orders, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, tax, or security purposes (such as completed order records).

Under the Protection of Personal Information Act (POPIA), you have the right to:

Request access to the personal information we hold about you
Request correction of inaccurate or outdated information
Request deletion of your information, subject to our legal retention obligations
Object to the processing of your information for direct marketing
Lodge a complaint with the Information Regulator of South Africa if you believe your information has been mishandled

To exercise any of these rights, contact us at info@voidgallery.co.za.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Your order and account data is stored on servers provided by Xneelo. Where any of our service providers (such as Yoco for payments) store or process data outside South Africa, we rely on their own compliance safeguards and privacy policies to ensure your data continues to receive an adequate level of protection.

Contact information

For any privacy-related questions, concerns, or requests, contact us at info@voidgallery.co.za.

Additional information

How we protect your data

We take reasonable technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access, including SSL encryption at checkout and restricted admin access to customer data. We do not store full payment card details on our own systems — this is handled entirely by our payment processor, Yoco.

What data breach procedures we have in place

In the event of a data breach affecting your personal information, we will notify affected users and the Information Regulator as required under POPIA, and take immediate steps to contain and investigate the breach.

What third parties we receive data from

We do not currently receive personal data about our users from external third parties or advertisers.

What automated decision making and/or profiling we do with user data

We do not use automated decision-making or profiling that produces legal or similarly significant effects on our customers.

Industry regulatory disclosure requirements

Not applicable — Void Gallery is not currently subject to additional industry-specific privacy regulations beyond POPIA.