PRIVACY AND COOKIE POLICY OF Hendler & Hart (Pty) Ltd.

Hart Homeware Privacy and Cookie Policy

Hendler & Hart (Pty) Ltd

Last updated 5 October 2026 | Effective from publication

This policy explains how Hendler & Hart (Pty) Ltd collects, uses, shares, protects and retains personal information in connection with Hart Homeware. It also explains your choices and how to exercise your privacy rights.

1. Who is responsible for your information

Hart Homeware is a brand of Hendler & Hart (Pty) Ltd, registration number 2000/014361/07. Hendler & Hart (Pty) Ltd is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA) for the processing described in this policy. References to “we”, “us” and “our” mean Hendler & Hart (Pty) Ltd.

Physical address: Brakpan Road, Boksburg East Industrial, Boksburg, 1460, South Africa. Website: https://harthomeware.co.za. Telephone: 011 898 6300.

Privacy contact: Shandre Sund, Trade Marketing Manager. Email: info@hendler.co.za, marked “Privacy enquiry for Shandre Sund”. You may also contact us by telephone or write to our physical address, marked for the privacy contact.

2. What this policy covers

This policy applies to our website, newsletters, enquiries, social media interactions, surveys, Hart Homeware competitions and related promotional activities. It includes personal information collected through digital forms and through physical entry forms, trade shows, factory shop activities and events when we determine how that information is used.

Personal information includes information about an identifiable living person and, where applicable under POPIA, an identifiable existing juristic person, such as a company. Processing includes collecting, recording, storing, using, sharing and deleting that information.

Our website does not currently offer online purchasing. We do not ask you to submit payment card details through newsletter or competition forms. Separate notices may apply to employment, supplier administration or other activities outside the scope of this policy.

Each competition has its own terms and conditions and may have an additional privacy notice. Those notices explain the specific entry requirements and uses of information. They supplement this policy and do not remove your statutory rights. Merely browsing our website or accepting competition terms does not constitute blanket consent to marketing.

3. Information we collect

  • Contact and identity information: your name, email address, telephone number and, where relevant, your city, country, company, store or business contact details.
  • Communications: enquiries, complaints, survey responses and information you voluntarily provide when communicating with us.
  • Competition information: entry details, qualifying purchase information or till slips where required, submitted photographs and stories, social media account identifiers, and information needed to check eligibility, select winners and deliver prizes.
  • Winner information: age or identity verification where necessary, delivery or collection details, prize acknowledgement and separately recorded publicity choices. We request only what is reasonably necessary and encourage redaction of unrelated information.
  • Marketing preferences: channels you select, consent or objection records, subscription dates, withdrawal requests and information needed to prevent unwanted messages.
  • Technical and usage information: IP address, browser and device information, pages visited, referral sources, approximate location inferred from technical information, timestamps and interaction data, depending on the tools enabled and your choices.

We do not intentionally request sensitive information, such as health information, religious beliefs or biometric information, through routine marketing forms. Please do not submit such information unless we specifically explain why it is necessary and the applicable lawful basis.

4. Where information comes from

We generally collect information directly from you when you complete a form, subscribe, enter a competition, contact us or interact with our content. Technical information may be collected through website logs, cookies, pixels and similar technologies as explained below.

We may receive information from participating retailers or authorised competition administrators that collect entries on our behalf, and from social media platforms when you interact with our accounts. We will identify the source and purpose in the relevant collection notice where required. Where someone provides another person’s information, they must be authorised to do so; this does not create marketing consent on that person’s behalf.

5. Whether you must provide information

Providing information is generally voluntary. We identify required fields and explain any legal or contractual requirement at collection. Without an email address we cannot send a newsletter; without essential entry or eligibility information we may be unable to process an entry or award a prize. Without contact information we may be unable to answer an enquiry.

Optional marketing consent is separate from information necessary to administer an entry or request. Refusing marketing consent does not disqualify an otherwise valid competition entry or prevent us from responding to your enquiry. Please keep information you provide accurate and notify us of relevant changes.

6. Why we process information

We process personal information only for a specific lawful purpose and on an applicable ground under POPIA. Depending on the activity, this may be your consent, steps necessary to conclude or perform a contract, compliance with a legal obligation, or a legitimate interest permitted by law. Where we rely on legitimate interests, we assess the necessity of the processing and its impact on your rights. Consent is not the basis for every activity.

  • Enquiries and customer support: to respond to questions, resolve complaints and communicate about your request, relying on a relevant contractual obligation or legitimate interest where appropriate.
  • Competitions and events: to administer entries and registrations, verify eligibility, prevent fraud, conduct draws or judging, contact winners, fulfil prizes and maintain required records, relying on the relevant competition arrangement, applicable legal obligations or justified legitimate interests.
  • Newsletters and promotions: to send marketing through the channels for which we have appropriate permission or satisfy a specific legal exception, as explained in section 7.
  • Website operation and security: to deliver the website, maintain essential functionality, diagnose errors and protect against misuse, on an appropriate lawful basis.
  • Analytics and advertising: to understand engagement, measure campaigns and, where enabled, personalise advertising, subject to applicable consent and cookie choices.
  • Legal administration: to meet legal duties, respond to lawful requests and establish, exercise or defend legal claims.

We will assess whether a proposed new use is compatible with the original collection purpose. If a new notice or consent is required, we will provide or obtain it before that use. We do not make decisions with legal or similarly substantial effects on you based solely on automated profiling unless permitted by law and accompanied by the required safeguards.

7. Newsletters and direct marketing

For unsolicited electronic marketing, including email, SMS, WhatsApp and direct messages, we obtain valid consent unless all conditions of the limited existing-customer exception in section 69 of POPIA are met. That exception applies only where we obtained your contact details in the context of a sale, market our own similar products or services and provide the required free opportunities to object at collection and in each marketing communication.

A competition entry, enquiry, social media follow or purchase from an independent retailer does not automatically authorise us to send electronic marketing. We request marketing permission separately, identify the sender, purpose and channels, and record your choice in accordance with applicable requirements. We will not treat silence or a preselected checkbox as consent. Where permitted, a once-off request for consent is subject to the legal restrictions, including previous refusal.

You may unsubscribe through the link in our emails, use the opt-out method provided in other messages, or contact us by email, telephone or post using section 1. We stop the relevant marketing processing following a valid objection or withdrawal and retain the minimum suppression information needed to honour it. Withdrawal does not affect the lawfulness of processing before withdrawal. Necessary messages about your enquiry, entry or prize may continue, but will not be used to bypass your marketing choice.

8. Competitions and winner publicity

Our competitions are restricted to adults aged 18 or older, subject to the eligibility and geographic requirements in each competition’s terms. We collect and use entry information to administer the competition and fulfil legal obligations. Marketing participation is optional and separate.

For entries submitted as public social media comments, the platform may display your profile name, photograph, entry and story to other users. Its own terms and privacy policy also apply. Do not publish identity numbers, contact details, addresses or other private information in public comments. We request sensitive verification or delivery details through an appropriate private channel.

We intend to announce winners on our website or social media. Before publishing identifying winner details, we explain what will be published and obtain appropriate permission. We do not publish identity numbers, private contact details or delivery addresses. Where publicity is optional or must be optional by law, you may decline without forfeiting your prize.

Permission to use a winner’s image, testimonial or story in marketing, or to require participation in marketing activities, is requested separately. We inform winners of their right to decline. Submission of an entry is not unlimited permission to reuse it for unrelated advertising. Where we seek to reuse an entrant’s photograph or story beyond administering the competition, we explain the proposed use and obtain any necessary privacy and content permissions.

9. Who may receive information

We share personal information only where necessary for a stated purpose and on an appropriate lawful basis. Recipients may include authorised staff; website hosting, maintenance and security providers; form and cloud service providers; email and messaging platforms; analytics and advertising providers; and authorised retailers, agencies, competition administrators or prize fulfilment providers involved in the relevant activity.

Our selected platforms include Mailchimp and Everlytic for newsletters and campaigns, Google Forms for information collection, and ManyChat for messaging and related interactions, as applicable to the activity. A platform may process information on our instructions and may also process some information for its own purposes under its terms. Social media, analytics and advertising providers may have their own responsible-party roles. We assess those roles and provide further information where required.

Where a provider acts as our operator, we require appropriate written terms covering confidentiality, security, authorised processing and notification of security compromises. Access is limited to what is necessary. We may disclose information where required by law or reasonably necessary to establish, exercise or defend legal rights, subject to POPIA.

We do not sell personal information. We do not treat consent to Hart Homeware marketing as automatic permission for other companies or brands to send their own marketing. Any such sharing or additional marketing must have an appropriate lawful basis and meet applicable notification and consent requirements.

10. Information processed outside South Africa

Although our current marketing activities focus on South Africa, we may interact with customers in other countries. Our service providers may also store, support or process information outside South Africa. A South African customer base does not mean all data remains in South Africa.

Before a transfer, we establish a lawful basis under section 72 of POPIA, such as adequate protection under the recipient’s law, binding corporate rules or a binding agreement, or another permitted ground. We address onward transfers where required. You may contact us for information about relevant destinations and safeguards. Additional laws may apply to particular cross-border activities; this policy does not exclude those obligations.

11. Cookies and website technologies

Cookies are small files stored on your device. Pixels, tags and similar technologies can also collect information about visits and interactions. Depending on the tools enabled, they may collect device identifiers, IP addresses, pages viewed, referrals and interactions. We distinguish essential functions from optional analytics, advertising and embedded content.

  • Essential technologies support core website delivery, security and recording privacy choices. We use only those genuinely necessary for the relevant function without optional tracking consent, on an appropriate lawful basis.
  • Preference and functional technologies remember optional choices or enable additional features. Where optional, they are subject to the relevant consent controls.
  • Analytics technologies measure visits and content performance, such as through Google Analytics when enabled.
  • Advertising technologies measure campaigns or support audience targeting, such as Meta Pixel and Google Ads tags when enabled.
  • Embedded content and third-party features, such as YouTube videos or reCAPTCHA, may transmit information to their providers. Their actual configuration, purpose and privacy implications determine how they are controlled.

Optional analytics, advertising and other non-essential tracking are disabled until you provide the required consent. Our cookie controls allow you to accept, reject or select optional categories and later change your choices. Rejecting optional tracking does not prevent access to the basic website, although a feature that depends on optional third-party content may be unavailable.

The cookie settings accessible on our website provide the current inventory of technologies, including their names, providers, purposes and storage durations. Session cookies expire when the browser session ends; persistent cookies remain for their specified duration unless deleted earlier. Browser settings also allow you to delete or block cookies. Cookie consent is separate from newsletter or other direct marketing consent.

We use only the tools relevant to an activity and described through the applicable notice or settings. We review notices and controls when we introduce or materially change technologies. If you cannot access cookie controls, contact us using section 1.

12. How long we retain information

We retain identifiable information only as long as necessary for the original lawful purpose, a compatible purpose or an applicable legal requirement. Retention considers the nature of the record, the activity’s duration, statutory obligations, disputes and the need to demonstrate valid consent or honour an objection.

Enquiry records are retained while resolving the matter and for an appropriate period needed for related legal obligations or claims. Competition records are retained through administration and prize fulfilment and for any applicable statutory recordkeeping period. Marketing records are retained while the relevant permission or lawful basis remains valid, with limited evidence and suppression records retained where necessary after opt-out. Technical logs are kept for the period justified by operation, security or investigation; cookie durations are disclosed in the cookie inventory.

We periodically review records and securely delete, destroy or de-identify information no longer needed. Where deletion from backups is not immediate, the information remains protected, is not used for ordinary processing and is removed through the applicable backup lifecycle. An opt-out does not require destruction of the minimal record necessary to prevent further marketing.

13. Security and security compromises

We apply appropriate and reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised destruction and unlawful access or processing. Measures are selected according to the information and risks and may include access restrictions, staff confidentiality obligations, secure transmission, account security, protected storage, backups and provider controls. We review risks and safeguards periodically. No electronic system or transmission can be guaranteed completely secure.

Where there are reasonable grounds to believe that an unauthorised person has accessed or acquired personal information, we investigate, contain the incident and notify the Information Regulator and affected people as required by section 22 of POPIA. Notification is made as soon as reasonably possible, subject to lawful exceptions or delays. We provide the information required to help affected people understand the incident and take protective steps.

14. Your rights and how to exercise them

Subject to POPIA and other applicable law, you may request confirmation that we hold information about you and access to that information; request correction of inaccurate, incomplete, misleading or outdated information; request deletion or destruction where legally justified; object to processing on applicable grounds or to direct marketing; and withdraw consent where processing relies on consent. You may complain to the Information Regulator and exercise applicable protections concerning automated decisions.

Contact us by email, telephone or post using section 1. We will explain any applicable procedure and assist with prescribed forms where relevant. We may request proportionate proof of identity or authority before releasing or changing records. We do not require unnecessary personal information to verify a request. Confirmation that we hold information is free; any permitted access fee will be explained before it is charged.

We respond within the periods required by applicable law and communicate lawful extensions or reasons where a request cannot be granted in full. Some records must be retained to meet legal duties or protect lawful rights. Withdrawal of consent does not stop processing supported by another lawful ground. We explain relevant limitations rather than treating rights as unconditional.

15. Children and third-party services

Our competitions are for adults. We do not knowingly solicit children’s personal information for newsletters or competition entries. If we become aware that a child’s information has been collected without an applicable lawful basis, we take appropriate steps to restrict processing and delete it where required. Please contact us if you believe this has happened.

Our website may link to external websites or social media services. Those services have their own privacy practices. We remain responsible for our own processing and any sharing we initiate; linking to another service does not transfer all responsibility to it. Review the relevant provider’s notice before supplying information directly to that provider.

16. Complaints and changes to this policy

You may raise concerns with our privacy contact. You may also complain directly to the Information Regulator without first exhausting our internal process: POPIAComplaints@inforegulator.org.za; telephone 010 023 5200; website https://inforegulator.org.za; physical address Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Current complaint procedures and forms are available on the Regulator’s website.

We may update this policy to reflect changes in our practices or the law. We publish the revised version and update its date. Where required, we provide additional notice and obtain fresh consent before a new consent-based use. An update does not retrospectively create consent or remove your rights.