Privacy Policy (POPIA)

Last updated: 29 September 2026

EDU-STOREZA (Pty) Ltd, trading as Fire & Ash ("we", "us"), respects your privacy. This policy explains how we collect, use and protect your personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

Who is responsible for your information

EDU-STOREZA (Pty) Ltd (registration number 2026/494311/07) is the responsible party for the personal information collected through this website. You can contact our Information Officer at eugenevdw001@gmail.com about anything in this policy.

What we collect

Contact and delivery details: your name, email address, phone number and delivery and billing addresses.
Order details: the products you buy, order history and communications with us.
Payment information: handled directly by our payment providers. We never see or store your full card details.
Website usage: your device, browser, IP address and how you use the site, collected through cookies and similar technologies.
Marketing preferences: whether you've agreed to receive our emails.

Why we use it

To process, deliver and support your orders, including sharing your delivery details with our courier.
To respond to your questions and complaints.
To send you news and offers, but only if you've opted in. Every marketing email has an unsubscribe link, as required by section 69 of POPIA.
To keep the website secure, prevent fraud and improve how it works.
To meet our legal obligations, such as tax record-keeping.

We process your information because it's necessary to fulfil your order, because you've given consent, to protect our legitimate interests or to comply with the law.

Who we share it with

We never sell your personal information. We share it only with service providers who help us run the store and who must keep it confidential and secure. These are our e-commerce platform (Shopify), payment providers, courier companies and, if you've subscribed, our email marketing service. We may also disclose information where the law requires it.

Information stored outside South Africa

Our e-commerce platform and some service providers store information on servers outside South Africa. We only use providers bound by laws, contracts or binding rules that give your information a level of protection comparable to POPIA, as required by section 72.

Cookies

We use cookies that the website needs to work (such as your cart) and, with your consent, cookies for analytics and marketing. You can change your cookie choices at any time through the cookie banner or your browser settings.

How we protect and keep it

We use reasonable technical and organisational measures to keep your information safe. We keep it only as long as we need it for the purposes above or as the law requires. For example, tax law requires us to keep transaction records for at least five years.

Your rights

Under POPIA you can ask us to:

confirm whether we hold your personal information and give you a copy of it;
correct or delete information that's inaccurate, out of date or no longer needed;
stop using your information for direct marketing, at any time;
object to other processing on reasonable grounds, or withdraw your consent.

To make a request, email our Information Officer. We may need to verify your identity first, and we'll respond within a reasonable time.

Complaints

If you're unhappy with how we've handled your information, please contact us first so we can put it right. You also have the right to lodge a complaint with the Information Regulator (South Africa) via inforegulator.org.za.