Legal · Privacy
Privacy policy.
How Bennetts for Babies collects, uses and protects your personal information under POPIA. We only collect what we need, and we never sell it.
Last updated 23 October 2026.
Who we are
Bennetts for Babies is the trading name of Bennett Brothers CC (Registration Number: 1992/026088/23), a family-owned South African business operating from 16–18 Galaxy Avenue, Linbro Office Park, Linbro Park, Johannesburg, South Africa.
For the purposes of this Privacy Policy, “Bennetts”, “we”, “us” and “our” refer to Bennett Brothers CC, trading as Bennetts for Babies.
Bennett Brothers CC is the responsible party, as defined in section 1 of the Protection of Personal Information Act 4 of 2013 (“POPIA”), in respect of personal information for which it determines the purpose and means of processing.
We are committed to protecting the personal information of our customers, consumers, website visitors and other individuals whose information we process, in accordance with POPIA and other applicable South African legislation. Our POPI Act manual sets out our policies and procedures in full.
Our Information Officer
Our Information Officer is David Bennett. You may contact our Information Officer regarding this Privacy Policy or the processing of your personal information at:
- Email: info@bennettsforbabies.co.za
- Telephone: +27 11 608 3733
- Postal or physical address: 16–18 Galaxy Avenue, Linbro Office Park, Linbro Park, Johannesburg, South Africa.
What personal information we collect
We collect personal information that is reasonably necessary to operate our online shop, process orders, provide customer support, communicate with customers and comply with our legal obligations.
The information we collect depends on how you interact with us.
2.1 When you place an order
We may collect your name, email address, telephone number, delivery address, order details, products purchased, payment status, transaction references, records of all the orders you have placed with us and other information reasonably necessary to process and fulfil your order.
Our online shop uses Stitch as its payment provider. Your card details are entered on Stitch’s secure payment page and processed by Stitch. We do not collect or store full payment card details on our own systems: we receive only the payment’s status and reference.
We process this information to fulfil your order, arrange delivery, communicate with you about your purchase, address returns or complaints and maintain records required by law.
If you start an order at checkout but the payment is not completed, we may send you one email reminding you of the items in your basket, with a link to finish the order. We send only one such reminder per basket, and not at all if you have since completed an order.
2.2 When you contact us
If you contact us through our website or by email, we may collect your name, email address, order number, contact details and the contents of your message, together with information reasonably necessary to respond to your enquiry.
We use this information to respond to you, provide customer support, investigate complaints and maintain appropriate records of our communications.
2.3 When you subscribe to our newsletter
If you subscribe to our newsletter, we may collect your email address, the date and method of subscription, your marketing preferences and a record of the consent you provided.
We use this information to send you newsletters and promotional communications where we have a lawful basis to do so.
You may unsubscribe at any time using the unsubscribe link in our emails or by contacting us directly.
2.4 When you create an account
If you create an account, we may collect your name, email address, password authentication information, saved delivery addresses, communication preferences and Subscribe & Save selections.
Your password is stored only as a secure one-way hash, never in plain text. We do not know your original password and cannot recover it; if you forget it, you can set a new one.
Orders you place while signed in, or with the email address of your account, are shown in your account’s order history.
We use this information to maintain your account, process your preferences, facilitate future purchases and provide relevant customer support.
2.5 When you visit our website
Our website counts visits: the pages viewed, products added to your cart, checkout activity, completed orders and the website or referral source through which you arrived. This count uses no cookies and does not record your name or email address. As with any website, the servers that deliver our pages also receive technical information such as your IP address and browser type.
We use this information to operate and maintain the online shop, understand its performance, troubleshoot errors, improve the shopping experience and protect against fraud or misuse.
Where usage information is not linked to an identifiable person and cannot reasonably be used to identify them, it may not constitute personal information under POPIA. However, technical identifiers, IP addresses, server logs or other data may constitute personal information where they can be linked to an identifiable individual.
2.6 Cookies and browser storage
Our website uses your browser’s storage to support the shopping experience, including remembering your cart, discount code, region, currency, checkout progress and the name and email address of the account you are signed in to.
Information kept in browser storage stays on your browser or device, where it may be accessible to anyone using that device, until it expires or is cleared.
We use one cookie of our own, and only when you sign in to an account. It keeps you signed in for up to 30 days, is needed for your account to work, holds nothing about you and is not used for advertising or tracking. Signing out removes it.
Meta cookies, only if you agree. When you first visit, we ask whether we may use Meta’s (Facebook and Instagram) advertising tools on our website. If you accept, the Meta Pixel sets Meta’s cookies and tells Meta which pages you view, which products you look at or add to your cart, when you start checking out, and your purchases (the products and order value, not your name, email or address), together with technical information such as your IP address and browser. We use this to see which of our ads help and to show relevant ads to you and to people like you; Meta also processes it under its own privacy policy. If you decline, or don’t answer, nothing is sent to Meta and the shop works exactly the same. You can change your choice at any time with “Cookie settings” at the foot of every page.
You can manage or clear cookies and browser storage through your browser settings. Clearing them may remove saved preferences or affect the operation of certain website features.
We will disclose any non-essential analytics, advertising or other tracking technologies if these are introduced or used on our website.
Why we process personal information
We process personal information only where we have a lawful justification under POPIA and for purposes that are specific, defined and legitimate.
Depending on the circumstances, we may process personal information for the following purposes:
- To receive, confirm, process and fulfil orders and arrange delivery.
- To process or verify payments and address payment-related queries.
- To manage customer accounts, saved addresses and Subscribe & Save preferences.
- To respond to enquiries, provide customer support and handle complaints, returns and refunds.
- To send newsletters and promotional communications where permitted by law.
- With your consent, to measure and improve our advertising on Facebook and Instagram.
- To maintain website functionality, troubleshoot errors, protect our systems and prevent fraud.
- To maintain accounting, tax, transaction and other records required by law.
- To establish, exercise or defend legal rights and comply with lawful requests from competent authorities.
Depending on the purpose, our lawful justification may include performing a contract with you, complying with a legal obligation, pursuing a legitimate interest that does not unjustifiably prejudice your rights, or obtaining your consent where consent is required.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal, and we may retain or continue processing information where another lawful justification applies.
Where information is necessary to fulfil an order or comply with a legal obligation, failure to provide it may mean that we cannot complete the transaction or provide the relevant service.
Direct marketing and newsletters
We may send you marketing communications where you have consented to receive them or where the requirements for marketing to existing customers under section 69 of POPIA are satisfied.
Where we rely on the existing-customer exception, we will ensure that the relevant statutory conditions are met, including those concerning the collection of contact details in connection with a sale, marketing of our own similar products or services, and providing an appropriate opportunity to object when the details are collected and in each marketing communication.
We will not treat the placement of an order or the creation of an account, by itself, as consent to receive all promotional communications.
Every marketing email will provide an appropriate way to unsubscribe. You may also contact us at info@bennettsforbabies.co.za to object to direct marketing.
Unsubscribing from marketing will not prevent us from sending essential transactional communications, such as order confirmations, payment updates or delivery notifications.
Transfers of personal information outside South Africa
Some of our website and service providers store or process personal information outside South Africa, in countries where their infrastructure, support services or systems are located. Our online order, account and messaging services run on Netlify’s servers in the United States, and Neon and Resend also store or process information on servers outside South Africa, as does Meta if you accept its cookies.
Where personal information is transferred to a third party in another country, we will ensure that the transfer complies with section 72 of POPIA. Depending on the circumstances, this may require an adequate level of protection under the recipient country’s laws, binding corporate rules or an appropriate binding agreement, or another lawful basis recognised by section 72, such as the data subject’s consent or necessity for the performance of a contract.
We will take reasonable steps to identify relevant overseas processing arrangements, assess the applicable legal basis for each transfer and ensure that appropriate safeguards are in place.
How long we keep personal information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal retention obligations and the need to establish, exercise or defend legal rights.
Our retention practices include the following:
- Order and accounting records: retained for the period required by applicable tax, accounting and other legislation, which may include a minimum five-year retention period under applicable tax recordkeeping rules. Longer retention may be necessary where another law applies, an audit is ongoing or a dispute or legal claim requires the records.
- Customer enquiries and messages: retained for five years, then deleted, or longer where a complaint, dispute or legal requirement makes it necessary.
- Customer accounts: retained while the account remains active and as otherwise reasonably necessary for account administration, legal compliance and the protection of our rights. You may request account closure. Closure does not necessarily require the immediate deletion of every record associated with your account.
- Newsletter information: retained while you remain subscribed or while otherwise necessary for lawful marketing administration. Following an unsubscribe request, we may retain the minimum information necessary to record your preference and prevent further unwanted marketing.
- Security and technical logs: retained for a proportionate period necessary for security, troubleshooting, fraud prevention and legal compliance.
When personal information is no longer required, we will take reasonable steps to delete, destroy or de-identify it in accordance with POPIA, unless its retention is authorised or required by law.
How we protect personal information
We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration, disclosure or destruction.
These measures may include secure website connections, access controls, appropriate password protection, restricted access to information, service-provider security arrangements and procedures for identifying and responding to security incidents.
Payments are processed through our payment provider’s payment facilities. We will take reasonable steps to ensure that the payment arrangements used for our online shop meet applicable security requirements.
No website, electronic transmission or storage system can be guaranteed to be completely secure. We will nevertheless take reasonable steps to maintain appropriate safeguards and review them as necessary.
Where a security compromise occurs that triggers section 22 of POPIA, we will notify the Information Regulator and affected data subjects as soon as reasonably possible, in accordance with the Act. The notification will be subject to the statutory requirements and any applicable lawful directions.
Your rights
Subject to applicable law and any lawful limitations, you may:
- Request access to personal information we hold about you.
- Request a description of the personal information we hold and the purposes for which it is processed.
- Request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully, as applicable.
- Object to certain processing of your personal information on grounds relating to your particular situation, where the requirements of POPIA are met.
- Object to the processing of your personal information for direct marketing.
- Withdraw consent where processing is based on consent.
- Request that we stop processing personal information where you have a valid legal basis to do so.
- Lodge a complaint with the Information Regulator.
These rights are subject to applicable legal requirements. For example, we may be required to retain certain transaction or accounting records even after an account is closed or a deletion request is received.
To exercise your rights, contact us at info@bennettsforbabies.co.za. We may need to verify your identity and request sufficient information to locate the relevant records. Requests will be handled in accordance with applicable legal procedures and time limits. Any applicable access-request fees will be dealt with in accordance with the relevant law.
If you are dissatisfied with our response, you may lodge a complaint with the Information Regulator of South Africa through its official website at inforegulator.org.za or use the contact details published there.
Children’s personal information
Our online shop is intended for adults, including parents and caregivers purchasing products for babies and children. We do not knowingly invite children under the age of 18 to create customer accounts or subscribe to our newsletter.
If we process personal information relating to a child, we will do so only where a lawful justification under POPIA applies, including any consent or authorisation requirements applicable to children’s personal information.
If you believe that a child has provided personal information to us without the required authorisation, please contact us so that we can assess the circumstances and take appropriate action.
Third-party websites and services
Our website may contain links to, or embedded content from, third-party websites and services. When you interact with such content, the relevant third party may process information in accordance with its own privacy policy and practices.
For example, YouTube content is loaded from YouTube’s privacy-enhanced domain when you choose to play a video. This does not necessarily mean that no information is processed by YouTube or that no connection is made to its systems.
We do not control the independent privacy practices of third-party services. We encourage you to review their privacy notices where appropriate.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website functionality, service providers or applicable law.
The latest version will be published on our website with its updated date. Where a material change requires further communication or action under applicable law, we will take appropriate steps to inform affected individuals.
Our Terms and Conditions govern the relevant terms of sale and should be read together with this Privacy Policy.
Contact us
For questions about this Privacy Policy, requests relating to your personal information, or concerns about how we process personal information, please contact:
- Bennett Brothers CC trading as Bennetts for Babies
- Physical address: 16–18 Galaxy Avenue, Linbro Office Park, Linbro Park, Johannesburg, South Africa
- Email: info@bennettsforbabies.co.za
- Telephone: +27 11 608 3733
- Information Officer: David Bennett
You may also contact the Information Regulator of South Africa through inforegulator.org.za if you wish to raise a complaint concerning the processing of your personal information.