PRIVACY POLICY

Last updated: 15 July 2026

1. Introduction

Tummies Full Of Love respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Tummies Full Of Love collects, uses, stores and shares personal information when you:

visit or use our website;
create an account;
place an order;
contact us;
subscribe to marketing communications;
complete an enquiry, competition, advertisement or lead form;
interact with us through social media, WhatsApp, email, telephone or another communication channel; or
otherwise make use of our products or services.

This Privacy Policy applies together with our Terms and Conditions, Cookie Policy and any other notices displayed on our website.

Tummies Full Of Love processes personal information in accordance with the Protection of Personal Information Act 4 of 2013, commonly referred to as POPIA, and other applicable South African laws.

2. Responsible party

For purposes of POPIA, the responsible party is:

Business name: Tummies Full Of Love
Email address: hello@tummiesfulloflove.co.za
Website: www.tummiesfulloflove.co.za

References in this Privacy Policy to “Tummies Full Of Love”, “we”, “us” or “our” mean the business identified above.

3. Personal information we collect

Depending on how you interact with us, we may collect the following personal information:

3.1 Identity and contact information

This may include:

your full name;
email address;
telephone or mobile number;
billing address;
delivery address;
account username or login details; and
other contact information you provide to us.

3.2 Order and transaction information

This may include:

the products you purchase;
order numbers;
invoice information;
delivery instructions;
order history;
payment status;
refunds, credits or adjustments;
communications relating to your order; and
proof of delivery or courier records.

3.3 Payment information

Payments may be processed by third-party payment service providers.

Depending on the payment method used, these providers may collect payment-card details, banking details, billing information or other information required to process the transaction.

Tummies Full Of Love may receive transaction confirmations, payment references and limited payment information from the payment provider. Complete card or banking details are generally processed directly by the payment provider and are not intended to be stored by Tummies Full Of Love.

3.4 Account information

When you create an account, we may process:

your account details;
order history;
saved addresses;
preferences;
login activity; and
communications linked to your account.

You are responsible for keeping your account information accurate and your login details confidential.

3.5 Communications and enquiries

We may retain information that you provide when contacting us through:

email;
telephone;
WhatsApp;
social media;
website forms;
Meta or other advertising-platform forms; or
customer-service channels.

This may include the content of your message and any documents, photographs or other information you submit.

3.6 Website and technical information

When you use our website, we may automatically collect certain technical information, including:

your internet protocol address;
browser and device type;
operating system;
approximate location;
pages visited;
referring website or advertisement;
time spent on the website;
website interactions; and
cookie and similar technology information.

This information may be collected through website logs, cookies, analytics services, advertising tools or similar technologies.

3.7 Information relating to children

Our products are intended for babies and children, but purchases and website accounts should be completed by a parent, guardian or other competent adult.

We do not intentionally request personal information directly from children.

A parent or guardian may voluntarily provide limited information about a child, such as the child’s age, food preferences, dietary requirements or allergies, when asking for product guidance or customer support.

By providing this information, the person submitting it confirms that they are authorised to do so. Information about children will only be used for the specific purpose for which it was supplied and will be handled with appropriate care.

Please do not provide unnecessary medical or sensitive information through the website or social-media forms.

4. How we collect personal information

We may collect personal information:

directly from you;
when you create an account or place an order;
when you complete a website or advertising form;
when you contact us;
when you interact with our social-media pages or advertisements;
automatically through cookies and website technologies;
from payment providers;
from couriers and delivery providers;
from marketing or advertising platforms;
from service providers acting on our behalf; or
from publicly available sources where legally permitted.

5. How we use personal information

We may use your personal information to:

create and manage your customer account;
process and fulfil orders;
confirm payments;
prepare invoices and order records;
arrange collection or delivery;
provide your details to the relevant courier;
communicate delivery dates, delays or delivery problems;
contact you if information supplied with an order appears incorrect;
respond to questions, complaints and enquiries;
resolve incorrect, incomplete, damaged or missing orders;
maintain customer and transaction records;
prevent fraud and unauthorised transactions;
improve our website, products and customer service;
understand how customers use our website;
measure the effectiveness of advertising;
personalise website or advertising content;
conduct competitions or promotions;
send marketing communications where permitted;
comply with legal, tax, accounting and regulatory obligations;
establish, exercise or defend legal claims; and
protect our business, customers, employees and service providers.

We will not use personal information for a purpose that is materially different from the purpose for which it was originally collected unless the further use is permitted by law or we obtain appropriate consent.

6. Information required to place an order

Certain personal information is necessary to process and deliver an order, including your name, contact number, delivery address and payment information.

Providing other information may be voluntary.

Where required order information is not provided, or where incorrect information is supplied, we may be unable to:

process the order;
verify payment;
contact you;
deliver the order correctly; or
assist with an order-related query.

Customers are responsible for ensuring that the information submitted during checkout is complete and accurate.

7. Sharing personal information

We may share personal information with trusted third parties where this is reasonably necessary to operate our business, fulfil an order or comply with the law.

These parties may include:

7.1 Couriers and delivery providers

We may provide a courier with information required to deliver an order, including:

the customer’s name;
delivery address;
telephone number;
order or parcel reference;
delivery instructions; and
information needed to obtain proof of delivery.

Couriers may contact customers directly to arrange or complete delivery.

7.2 Payment service providers

We may share information with payment gateways, banks, card networks, fraud-prevention services and other payment providers where necessary to process, verify or refund a transaction.

7.3 Website and technology providers

We may use third parties for:

website hosting;
email services;
cloud storage;
website maintenance;
customer support;
analytics;
security;
advertising;
database management; and
other technical services.

7.4 Professional and regulatory parties

Information may be disclosed to:

accountants;
auditors;
legal advisers;
insurers;
regulators;
government departments;
law-enforcement authorities; or
other parties where disclosure is required or permitted by law.

7.5 Business changes

If Tummies Full Of Love is sold, reorganised, merged or transferred, personal information may be disclosed to relevant advisers and prospective or actual business owners, subject to appropriate confidentiality and legal protections.

We do not sell personal information to third parties.

8. Advertising, social media and Meta lead forms

We may advertise through Meta platforms, including Facebook and Instagram, and through other advertising services.

When you complete an advertising lead form, the information requested on that form may be supplied to Tummies Full Of Love so that we can:

contact you about your enquiry;
provide information about our products;
process a requested quotation or order;
send promotional information where you have consented; or
measure and improve our advertising.

Meta and other advertising platforms process information under their own terms and privacy policies. We encourage you to review the privacy settings and policies of the platform concerned.

Completing an enquiry or lead form does not automatically require you to make a purchase.

9. Direct marketing

Where permitted by law, we may use your contact information to send you information about:

products;
new ranges;
promotions;
competitions;
special offers;
availability;
educational content; or
other Tummies Full Of Love news.

We may communicate through email, SMS, WhatsApp, telephone, social media or another electronic channel.

Where consent is required, marketing communications will only be sent after the necessary consent has been obtained.

Existing customers may receive marketing about similar products or services where permitted by law.

You may opt out at any time by:

using the unsubscribe option in an email;
following the opt-out instructions in the message; or
contacting us at [INSERT EMAIL ADDRESS].

Opting out of marketing will not prevent us from sending essential service communications relating to an existing order, payment, delivery or customer-service matter.

10. Cookies and website tracking

Our website may use cookies and similar technologies to:

make the website function correctly;
remember preferences;
maintain shopping-cart or login sessions;
understand website traffic;
identify technical problems;
improve performance;
measure advertising results; and
provide more relevant advertising.

Cookies are small files stored on your browser or device.

Some cookies are necessary for the website to function. Other cookies, including analytics and advertising cookies, may be controlled through the website’s cookie settings or your browser settings.

Disabling certain cookies may affect how parts of the website work.

Where enabled on our website, third-party tools such as Meta Pixel, Google Analytics or similar technologies may collect information in accordance with the provider’s own privacy terms.

11. Legal grounds for processing

We process personal information where:

you have provided consent;
processing is necessary to enter into or perform a contract with you;
processing is required to comply with a legal obligation;
processing protects a legitimate interest of Tummies Full Of Love, a customer or another person;
processing is necessary for the proper operation and protection of our business; or
another lawful basis recognised under POPIA applies.

Where we rely on consent, you may withdraw that consent, subject to any lawful reason why certain information must continue to be retained or processed.

12. Retention of personal information

We retain personal information only for as long as reasonably necessary to:

complete the purpose for which it was collected;
manage customer accounts and orders;
maintain business and transaction records;
comply with tax, accounting and legal obligations;
resolve disputes or complaints;
detect fraud or security incidents; and
establish, exercise or defend legal claims.

When personal information is no longer required and there is no lawful reason to retain it, it will be deleted, destroyed or de-identified using reasonably appropriate measures.

Backup copies may remain for a limited period as part of normal system backup and disaster-recovery procedures.

13. Security

We take reasonably appropriate technical and organisational measures to protect personal information against:

loss;
damage;
unauthorised destruction;
unlawful access;
unauthorised disclosure;
alteration; and
misuse.

These measures may include access controls, password protection, security software, staff confidentiality obligations, secure service providers and reasonable website-security practices.

No internet transmission or electronic storage method is completely secure. Although we take reasonable precautions, we cannot guarantee that unauthorised access or a security incident will never occur.

Where a security compromise affects personal information, we will take the steps required by applicable law, which may include notifying affected individuals and the Information Regulator.

14. International transfers

Some technology, website, cloud-storage, analytics, email, payment or advertising providers may process information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonably appropriate steps to ensure that the information receives an adequate level of protection as required by POPIA.

15. Your rights

Subject to applicable law, you may have the right to:

ask whether we hold personal information about you;
request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion or destruction of information that we are no longer authorised to retain;
object to certain processing;
withdraw consent where processing is based on consent;
object to direct marketing;
request that processing be restricted in appropriate circumstances; and
lodge a complaint with the Information Regulator.

We may request proof of identity before processing a request. This is necessary to protect personal information against unauthorised disclosure.

Some requests may be limited where we are legally required or permitted to retain the information.

Requests may be sent to:

Email: [INSERT PRIVACY OR CUSTOMER-SERVICE EMAIL ADDRESS]

16. Keeping information accurate

Please ensure that personal information provided when creating an account or placing an order is complete and accurate.

You may update certain information by logging into your account. You may also contact us to request that incorrect information be updated.

Tummies Full Of Love will not be responsible for delivery or communication problems caused by incorrect information supplied by a customer, subject to applicable law.

17. Third-party websites

Our website or social-media pages may contain links to third-party websites, payment platforms or services.

We do not control the privacy practices of these third parties. Their collection and use of personal information are governed by their own privacy policies.

We encourage you to review the privacy policy of any third-party service before providing personal information.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes to our website or services;
new service providers or technologies;
legal or regulatory developments; or
changes to how we process personal information.

The updated version will be published on our website with a revised “Last updated” date.

Material changes may also be communicated through the website, email or another appropriate channel.

19. Contact us

Questions, requests or complaints regarding this Privacy Policy or the processing of personal information may be directed to:

Tummies Full Of Love
Responsible party or Information Officer: [INSERT NAME OR TITLE]
Email: [INSERT EMAIL ADDRESS]
Telephone: [INSERT TELEPHONE NUMBER]
Address: [INSERT PHYSICAL ADDRESS]

We will attempt to address privacy-related questions and complaints within a reasonable period.

20. Complaints to the Information Regulator

You have the right to lodge a complaint with the Information Regulator of South Africa if you believe that your personal information has been processed unlawfully.

Information Regulator South Africa

Email for POPIA complaints: POPIAComplaints@inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
Telephone: 010 023 5200
Toll-free telephone: 0800 017 160
Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191

Who we are

Our website address is: https://tummiesfulloflove.co.za.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Privacy Policy