Privacy Policy
Last updated: 18 October 2026
Stokehouse JBay (Pty) Ltd, trading as The Blank Brand (we, us, our), respects your privacy. This policy explains what personal information we collect through www.theblankbrand.co.za, why, who we share it with, and the rights you have. We follow the Protection of Personal Information Act 4 of 2013 (POPIA). For POPIA, we are the responsible party for the personal information described here.
1. Who we are and who to contact
- Stokehouse JBay (Pty) Ltd trading as The Blank Brand
- Email: info@theblankbrand.co.za
- Telephone: +27 82 643 6707
- Address: 3a Da Gama Road, Jeffreys Bay, 6330, Eastern Cape, South Africa
- Our Information Officer is the head of the business. You can reach them for anything in this policy at info@theblankbrand.co.za.
2. What personal information we collect
- Contact and delivery details: your name, email address, telephone number, and delivery and billing addresses, when you order, create an account or contact us.
- Business details if you buy for a business: the business name and contact person.
- Order information: what you bought, the price, the order reference and the history of your orders.
- Payment information: whether a payment succeeded and its reference. Your card details go straight to our payment provider and we never see or store your full card number.
- Account information: your login details if you create an account. Passwords are stored in encrypted form.
- Messages: what you send us through the contact form or by email or phone.
- Technical information: your IP address and basic details of your browser and device, which our servers receive whenever you visit.
3. How we collect it
- From you, when you order, create an account, fill in the contact form or write to us.
- Automatically, when your browser connects to the Website.
- From our payment provider, which tells us whether your payment went through.
4. Why we use it
| What we do | Why we may (POPIA section 11) |
|---|---|
| Take, pack, deliver and support your order, including emailing you order updates | It is needed to carry out the contract with you |
| Take payment and check for fraud | Contract, and our legitimate interest in preventing fraud |
| Keep tax, accounting and other records we must keep | A legal obligation |
| Answer your enquiries and quote for bulk or decorated orders | Taking steps at your request, and our legitimate interest |
| Keep the Website working and secure | Our legitimate interest |
We only use your information for the purposes above, or for a purpose closely related to them. We do not sell your personal information.
5. Who we share it with
We share personal information only where we need to, with service providers (called operators in POPIA) that process it for us under their own security commitments, and with authorities where the law requires:
- Paystack, our payment provider, to take payment and process refunds.
- Zoho Inventory (Zoho Corporation), our stock and order system. We send it your name, email address and the details of your order so that the order can be recorded and fulfilled. We do not send it your address, telephone number or payment details.
- Flywheel, which hosts the Website and the data it holds.
- Google, which provides our business email (so your emails to us pass through it), and which serves the fonts used on the Website. When your browser loads those fonts, Google receives your IP address.
- Couriers and delivery partners, with your name, delivery address and telephone number, to deliver your order.
- Professional advisers, our accountants and authorities such as SARS, where the law requires or where needed to protect our legal rights.
6. Sending information outside South Africa
Some of these providers store or process information outside South Africa. For example, we use Zoho’s United States data centre, and our hosting and email providers operate internationally. Where that happens we rely on the protections POPIA allows for under section 72: the recipient is bound by law, binding corporate rules or an agreement that gives similar protection, or the transfer is necessary to carry out our contract with you. We choose providers with recognised security practices.
7. How we keep it safe
We use reasonable technical and organisational measures to protect personal information from loss, damage and unauthorised access. These include encrypted connections (HTTPS), restricted access to our systems, and secure hosting and payment providers. No system on the internet is completely secure, so we cannot promise absolute security. If we have reasonable grounds to believe your information has been accessed without authority, we will tell you and the Information Regulator as POPIA requires.
8. Cookies
We use only the cookies the shop needs to work. We do not use advertising, tracking or analytics cookies.
- Cart and checkout cookies (for example woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session) remember what is in your cart.
- Login cookies (wordpress_logged_in and wordpress_test_cookie) keep you signed in if you have an account.
- Third parties: when you pay, Paystack’s payment window may set its own cookies under its own policy.
You can block cookies in your browser settings, but the cart, checkout and login will not work without the ones above.
9. How long we keep it
- Order, invoice and payment records: for between 5 and 7 years, as tax law (5 years) and company law (7 years for accounting records) require.
- Your account: until you ask us to delete it, unless we must keep some of the information for the reasons above.
- Enquiries and messages: for as long as we need to deal with your enquiry and a reasonable time afterwards.
When we no longer need information, we delete it or remove anything that identifies you.
10. Your rights
Under POPIA you have the right to:
- ask whether we hold personal information about you, and to see it;
- ask us to correct information that is wrong, or to delete information we are no longer allowed to keep;
- object to us processing your information, on reasonable grounds;
- withdraw consent you have given, at any time (this does not affect what we did before);
- not receive direct marketing from us unless you have agreed to it; and
- complain to the Information Regulator (clause 13).
To use any of these rights, email info@theblankbrand.co.za. We may need to check who you are first. You may also ask for access to records under the Promotion of Access to Information Act 2 of 2000 by writing to the same address.
11. Marketing
We do not currently send marketing emails. If we start, we will only send them to people who have agreed to receive them, and every message will have a way to unsubscribe. Emails about your order or your account are not marketing.
12. Children
The Website is for businesses and adults. It is not aimed at anyone under 18, and we do not knowingly collect information from children.
13. Complaints
If you are unhappy with how we handle your personal information, please tell us first at info@theblankbrand.co.za. You may also complain to the Information Regulator (South Africa): inforegulator.org.za, complaints.IR@inforegulator.org.za.
14. Changes to this policy
We may update this policy. The current version is always on this page, with its date at the top.