Privacy Policy

Last updated: 25 October 2026

1. Introduction

At iNdima Kids, we value your privacy and are committed to treating your personal information responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, purchase our products, enquire about our services, or interact with us.

This policy is intended to comply with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.

By using our website or providing us with your personal information, you acknowledge that you have read this policy. Where consent is required by law, we will request it separately.

2. Who We Are

iNdima Kids is a South African children's brand offering children's books and event childcare services.

For purposes of applicable data protection law, the responsible party is:

• Trading name: iNdima Kids
• Email: indimakids@gmail.com

The person responsible for privacy matters is our Information Officer or duly appointed representative. Contact details must be provided here once confirmed.

3. Personal Information We Collect

Depending on how you interact with us, we may collect the following information:

Information you provide

• Name and surname
• Email address and telephone number
• Billing and delivery address
• Order details and purchase history
• Event date, venue, duration, and type
• Number and age ranges of children attending an event
• Details about your childcare or activity requirements
• Information submitted through contact, booking, or partnership forms
• Correspondence, feedback, and customer service enquiries
• Payment transaction references and payment status

Please do not submit unnecessary sensitive information through general enquiry forms.

Information relating to children

Where necessary to arrange event childcare, a parent or legal guardian may need to provide limited information relating to a child, such as their age and relevant care requirements.

Any information concerning a child's health, allergies, or other sensitive needs must only be requested where necessary for the service and handled with appropriate safeguards and lawful authorisation.

We ask parents and legal guardians to provide information about children only when they are authorised to do so. We do not intend for children to provide personal information directly through our website.

Information collected automatically

When you visit our website, certain technical information may be collected, depending on the website's configuration. This may include your IP address, browser type, device information, pages visited, and website usage data.

Cookies and analytics technologies may also be used where enabled. We will provide appropriate information and choices where required by law.

4. How We Use Your Information

We may use personal information to:

• Process and deliver book orders.
• Respond to enquiries and provide customer support.
• Prepare event childcare quotations and manage bookings.
• Understand the requirements of parents and event organisers.
• Communicate booking confirmations, changes, and service information.
• Process payments, refunds, and related transactions.
• Manage relationships with business and community partners.
• Improve our website, products, and services.
• Send marketing communications where legally permitted.
• Prevent fraud, protect our business, and maintain appropriate records.
• Meet applicable legal, tax, accounting, and regulatory obligations.

We will process personal information only where we have a lawful basis to do so, such as consent, contractual necessity, a legal obligation, or another basis permitted by POPIA.

5. Marketing Communications

We may share news about iNdima Kids books, events, services, and initiatives where we are legally permitted to do so.

We will obtain consent where required and comply with applicable rules governing electronic direct marketing. You may unsubscribe from marketing emails using the unsubscribe link, where available, or by contacting us.

Unsubscribing from marketing will not prevent us from sending essential communications relating to an existing order or booking.

6. Sharing Personal Information

We do not sell your personal information.

Where necessary, we may share relevant information with service providers who help us operate our business, including:

• Website hosting and technology providers
• Payment processors
• Delivery and courier providers
• Email and communication platforms
• Booking administration or customer management providers
• Professional advisers and relevant authorities where legally required

For example, a delivery provider may need your name, telephone number, and delivery address to deliver a book.

We require appropriate safeguards for personal information shared with service providers, subject to the applicable legal and contractual arrangements.

7. Children's Personal Information

Because iNdima Kids works with children, we recognise the importance of protecting children's privacy.

We will limit the collection of children's information to what is reasonably necessary for the relevant service. Where applicable, we will obtain the consent or authorisation required under POPIA before processing children's personal information.

We will not use children's personal information for unrelated marketing purposes or publicly share identifying details without an appropriate lawful basis and the required permissions.

Parents or legal guardians may contact us with questions or requests concerning information they have provided about a child.

8. Payment Security

Payments may be processed through third-party payment providers, depending on the payment methods available on our website.

Where a third-party payment provider is used, its own terms and privacy practices may also apply.

We do not intend to collect or store full payment card details directly unless a properly secured and compliant arrangement has been established. Customers should not send card details or banking passwords to us by email or ordinary contact forms.

9. Data Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration, or disclosure.

These measures may include access controls, secure systems, appropriate staff or contractor access restrictions, and the use of suitable service providers.

No online system can be guaranteed completely secure. If a security compromise occurs, we will take appropriate steps and notify affected individuals and the Information Regulator where required by law.

10. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for a period required or permitted by law.

Retention periods may differ for:

• Orders and financial records
• Event booking records
• Customer correspondence
• Marketing preferences and consent records
• Legal or dispute-related records

We may retain certain records after a transaction ends where required for tax, accounting, legal, or regulatory purposes. Information that is no longer required will be securely deleted, destroyed, or de-identified where appropriate.

11. International Transfers

Some website or business service providers may store or process information outside South Africa.

Where personal information is transferred outside South Africa, we will take appropriate steps to ensure that the transfer complies with POPIA, including its requirements for cross-border transfers.

12. Your Rights

Subject to applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Request correction or updating of inaccurate information.
• Request deletion or destruction of information where legally appropriate.
• Object to certain forms of processing.
• Withdraw consent where processing is based on consent.
• Object to direct marketing.
• Lodge a complaint with the Information Regulator.

To exercise a right, contact us using the details in this policy. We may need to verify your identity before processing a request.

We may retain information where the law requires it or where another lawful basis applies.

13. Cookies and Third-Party Websites

Our website may use essential cookies and, if configured, analytics or other optional technologies.

You can manage cookies through your browser settings. Where required, we will provide appropriate consent controls before using non-essential cookies.

Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to read their policies separately.

14. Complaints and the Information Regulator

If you have a concern about how we process personal information, please contact us first so we can attempt to resolve it.

You may also contact the Information Regulator of South Africa through its official website: https://inforegulator.org.za/

15. Changes to This Policy

We may update this policy as our services, website, or legal obligations evolve. The latest version will be published on our website with an updated revision date.

16. Contact Us

For privacy-related enquiries or requests:

iNdima Kids
Email: indimakids@gmail.com