Privacy Notice

Last updated 2 August 2026. Issued in terms of the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

Responsible party	UZAN Digital, trading as Kitroom
Information Officer	Muhammad Uwais Bata
Address	6 Congo Road, Emmarentia, Randburg, 2195, Gauteng
Email	hello@kitroom.co.za
Phone	062 786 5555

2. What we collect and why

Information	Why we need it	Lawful basis
Your name and surname	To identify you and address the order	Performance of a contract
Email and phone number	To send quotes, mockups and delivery updates	Performance of a contract
Organisation name	To identify the school, club or society ordering	Performance of a contract
Delivery address	To deliver the goods	Performance of a contract
Artwork, logos, crests	To print your order	Performance of a contract
Name and size lists	To print personalised garments and produce the right sizes	Performance of a contract
Payment reference	To reconcile payment	Legal obligation, contract

We do not collect or store your card details. Card payments are processed by Yoco, a licensed South African payment provider. Your card number never reaches us or our systems.

3. Name lists, learners and children

Many of our orders — matric hoodies, Grade 7 farewell shirts, team kit — involve lists of names, sometimes of children under 18. We take this seriously.

• We collect first names and surnames only, plus a garment size. We do not ask for ID numbers, dates of birth, contact details or any other information about learners, and you should not send them to us.
• When a school, club or committee sends us a name list, we rely on that organisation having obtained the necessary permission from parents or guardians. Please make sure you have it before sending.
• Name lists are used solely to produce the garments and for nothing else.
• Name lists are deleted within 60 days of delivery unless you ask us to keep them for reordering.
• Name lists are never used for marketing, never shared beyond the printer producing your order, and never sold.

4. Who we share it with

We share the minimum necessary, with:

• Our printing partners — they receive your artwork, quantities, sizes and any name list, because they physically make the goods
• Couriers — they receive the recipient's name, address and phone number
• Yoco — our payment processor, for card payments
• SARS or other authorities where the law requires it

We do not sell your personal information to anyone, ever. We do not share it with advertisers or data brokers.

5. Where it is stored, and transfers outside South Africa

Order records and correspondence are stored in cloud services which may process data outside South Africa. Where that happens, we only use providers that offer protection substantially similar to POPIA, as required by section 72. Our printing partners and couriers are South African.

6. How long we keep it

Name and size lists	60 days after delivery, unless you ask us to retain them for reorders
Artwork and logos	Kept while you remain a customer, so reordering is quick. Deleted on request.
Order and payment records	5 years, as required by South African tax law
Quote enquiries that don't become orders	12 months, then deleted

7. Your rights under POPIA

You have the right to:

• Ask what we hold about you, and receive a copy
• Correct or update anything that is wrong
• Ask us to delete your information, where we are not legally required to keep it
• Object to us processing your information
• Withdraw consent to marketing at any time
• Complain to the Information Regulator

To exercise any of these, email hello@kitroom.co.za. We will respond within 30 days and we will not charge you for it.

8. Marketing

We only send marketing to people who have asked for it or who have ordered from us. Every message includes a way to stop receiving them. We do not buy contact lists, and we do not send bulk unsolicited messages.

If you contact us for a quote, we will reply about that quote. That is not marketing — it is us answering your question.

9. Security

We protect your information with:

• Encrypted connections (HTTPS) across the whole website
• Payment handled entirely by Yoco, a licensed South African payment provider — we never see or store card data
• Access limited to the people who need it to fulfil your order
• Prompt deletion of name lists once they are no longer needed

If a breach occurs that creates a real risk to you, we will notify you and the Information Regulator as soon as reasonably possible, as POPIA requires.

10. Cookies

Our website uses only what is strictly necessary to make it work. We do not run advertising trackers, and we do not build profiles of visitors. If we add analytics in future, we will update this notice and ask for consent where required.

11. Changes

If we change this notice we will update the date at the top. Material changes affecting how we use your information will be communicated to customers directly.