Privacy policy

Privacy Policy

Last updated: 18/04/2026

1. Introduction

Original Gifts ZA, a brand of Medura (Pty) Ltd, respects your right to privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African data protection laws.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you access our website, make a purchase, or interact with our services.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal information as described herein.

2. Purpose of This Policy

The purpose of this policy is to:

Describe the types of personal information we collect
Explain how and why we collect and use your information
Outline how your information is stored and protected
Identify the third parties with whom we may share your information
Inform you of your rights in terms of applicable legislation

3. Personal Information We Collect

We may collect and process the following categories of personal information:

3.1 Personal and Contact Information

Full name and surname
Email address
Telephone number
Billing and delivery addresses

3.2 Transaction and Order Information

Products viewed, added to cart, or purchased
Order history and transaction records
Delivery and fulfilment details

3.3 Payment Information

Payment details are processed securely via third-party payment providers. We do not store full credit or debit card details on our systems.

3.4 Account Information

Username and password
Preferences and settings

3.5 Technical and Usage Information

IP address
Browser type and version
Device type and operating system
Website interaction data (pages visited, time spent, clicks)

3.6 Communication Information

Customer service queries
Feedback, reviews, or correspondence

4. Sources of Personal Information

We collect personal information from:

You directly, when you interact with our website or services
Automatically, through cookies and tracking technologies
Third-party service providers such as Shopify and payment gateways
Partners or service providers acting on our behalf

5. Lawful Basis for Processing

We process your personal information:

To fulfil contractual obligations (e.g. processing orders)
With your consent (e.g. marketing communications)
To comply with legal obligations
For our legitimate business interests, including improving our services and preventing fraud

6. How We Use Your Personal Information

We use your personal information for the following purposes:

6.1 Order Fulfilment and Service Delivery

Processing and delivering orders
Managing returns, exchanges, and refunds
Providing customer support

6.2 Account Management

Creating and maintaining your account
Managing preferences and settings

6.3 Marketing and Communications

Sending promotional emails or offers (where consent has been given)
Providing updates on products and services

6.4 Website Improvement and Personalisation

Analysing user behaviour
Improving website functionality and user experience
Recommending products based on browsing or purchase history

6.5 Security and Fraud Prevention

Detecting and preventing fraudulent or unlawful activity
Ensuring the integrity and security of our systems

6.6 Legal and Regulatory Compliance

Complying with applicable laws and regulations
Responding to lawful requests from authorities

7. Disclosure of Personal Information

We may disclose your personal information to:

Shopify, our eCommerce platform provider
Payment processors and financial institutions
Delivery and logistics partners
IT, analytics, and marketing service providers
Legal and regulatory authorities when required by law

All third parties are required to process your personal information securely and in accordance with applicable data protection laws.

We do not sell or rent your personal information to third parties.

8. International Transfers

Your personal information may be transferred to and processed in countries outside South Africa. Where this occurs, we take reasonable steps to ensure that your information is protected and handled in accordance with applicable data protection standards.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Enable core website functionality
Enhance your browsing experience
Analyse traffic and performance
Support marketing and advertising efforts

You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of the website.

10. Direct Marketing and Opt-Out

We may send you marketing communications if you have opted in.

You may opt out at any time by:

Clicking the unsubscribe link in emails
Contacting us directly

We will respect your communication preferences in accordance with applicable laws.

11. Retention of Personal Information

We retain personal information only for as long as necessary to:

Fulfil the purposes for which it was collected
Comply with legal and regulatory requirements
Resolve disputes and enforce agreements

Where information is no longer required, it will be securely deleted or anonymised.

12. Security of Information

We take reasonable technical and organisational measures to safeguard your personal information against:

Loss
Unauthorised access
Disclosure or misuse

Despite these measures, no system can be guaranteed to be completely secure.

13. Your Rights

In terms of POPIA, you have the right to:

Access your personal information
Request correction of inaccurate information
Request deletion of your information (subject to legal limitations)
Object to the processing of your information
Withdraw consent where processing is based on consent

Requests can be submitted using the contact details below.

14. PAIA (Promotion of Access to Information Act)

In accordance with the Promotion of Access to Information Act, 2000 (PAIA), you may request access to records held by us.

Requests must be made in writing and may be subject to prescribed fees.

15. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors without parental consent.