Privacy policy
Last updated: 22 September 2026
This policy explains what personal information KAK LARNEY collects, why, and what you can do about it. It is written under the Protection of Personal Information Act 4 of 2013 (POPIA).
Who is responsible
KAK LARNEY is a partnership between Stefan Van Veijeren and Raymond Van Niekerk, and is the responsible party for the personal information described here.
Address: 81 Mahogany Street, Pretoria, Gauteng, 0081, South Africa
Information Officer: Stefan Van Veijeren
Email: kak.larney@gmail.com
POPIA requires every responsible party to appoint an Information Officer and to register that person with the Information Regulator before they carry out their duties.
What we collect
| Information | Why we need it | Lawful basis |
|---|---|---|
| Name, delivery address, phone, email | To print, address and deliver your order, and to contact you about it | Performance of our contract with you |
| Order and payment records | To process the sale, handle returns, and keep tax records | Contract and legal obligation |
| Email address for marketing | To send you new releases, if you asked us to | Your consent, or the existing-customer basis in POPIA section 69 |
| Device, browser, IP address, pages viewed | To keep the store working, detect fraud, and understand what people look at | Our legitimate interest |
We do not collect or store your full card number. Payment card data goes directly to the payment provider.
We do not knowingly collect information from children under 18. If you believe a child has given us information, email us and we will delete it.
Who we share it with
Only the parties that make an order happen, and only what they need:
- Shopify — hosts this store and processes orders on our behalf.
- OTC Printing, our printing supplier — receives your name, delivery address and the item, so your shirt can be printed and sent.
- Couriers — receive your name, address and phone number to deliver the parcel.
- Payment providers — process your payment directly.
Each of these is an operator under POPIA, required to treat your information as confidential and to process it only on our instruction. We do not sell your personal information, and we do not rent or trade mailing lists.
Information leaving South Africa
Shopify and some of our other service providers store data on servers outside South Africa. Section 72 of POPIA permits this where the receiving country or the recipient offers comparable protection, or where the transfer is necessary to perform our contract with you. Both apply here.
Marketing
We will only send you marketing email if you opted in, or if you bought from us and we are contacting you about similar products — which POPIA section 69 permits for existing customers. Every marketing email identifies us as the sender and carries a working unsubscribe link. One click and we stop. Unsubscribing never affects your order or your rights.
How long we keep it
Order and tax records: five years, as South African tax law requires. Marketing contact details: until you unsubscribe. Website analytics: no longer than we need it. After that we delete or de-identify.
Security
The store runs over HTTPS. Access to order data is limited to the two partners and to the suppliers who need it to fulfil orders. Payment data never reaches us. No system is perfectly secure, and we do not pretend otherwise — but if a breach affects your personal information we will notify you and the Information Regulator as section 22 of POPIA requires.
Your rights
Under POPIA you may:
- Ask what personal information we hold about you, and get a copy.
- Ask us to correct or delete information that is wrong, misleading, or no longer needed.
- Object to processing based on legitimate interest.
- Withdraw consent at any time, including for marketing.
- Complain to the Information Regulator.
Email kak.larney@gmail.com to exercise any of these. We respond as soon as reasonably possible and will not charge you for a reasonable request. We may need to confirm your identity first, so that nobody else can ask for your data.
The Information Regulator
If you are not satisfied with how we have handled your information, you may complain directly:
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Complaints: complaints.IR@justice.gov.za
General enquiries: inforeg@justice.gov.za
Cookies
This store uses cookies to keep your cart working, remember your session, and measure traffic. You can block or delete cookies in your browser, but the cart will not work properly without the essential ones.
Changes
We will post any update here and change the date at the top. If a change materially affects how we use your information, we will tell you directly.