Privacy Policy (POPIA)

1. Responsible party and Information Officer

Old McDonald's TCG Farm is the responsible party for your personal information. The store owner acts as our Information Officer and can be reached through our Contact page.

2. What we collect

• Identity and contact details: name, email address and cellphone number.
• Delivery details: your chosen PUDO locker or pickup preference.
• Order details: items purchased, amounts, payment method and order history.
• Account details: login information and wishlist items.
• Technical information: basic device and usage data collected through essential and (if you agree) analytics cookies.

3. Why we use it

We only process information that is adequate, relevant and necessary for these purposes. We do not send direct marketing without your consent, and you can opt out at any time.

• To process, fulfil and deliver your orders.
• To communicate with you about orders, payments and support queries.
• To manage your account, invoices and wishlist.
• To prevent fraud and keep the site secure.
• To improve the site (only with your consent for analytics cookies).

4. Who we share it with

We share only what is needed with trusted operators who help us run the store:

• Yoco – card payment processing (we never see or store your full card details).
• The Courier Guy / PUDO – delivery of your parcel.
• Our website hosting and email providers – to run the site and send order emails.

5. Cross-border transfers

Some of our service providers may store information on servers outside South Africa. Where this happens, we rely on providers that offer an adequate level of protection as required by section 72 of POPIA.

6. Security and retention

We use reasonable technical and organisational measures to protect your information, including secure logins and restricted admin access. We keep order and invoice records for as long as required by tax and consumer law (generally 5 years) and delete or de-identify other information when it is no longer needed.

7. Cookies

We use essential cookies and local storage to keep you signed in and remember your cart and wishlist. With your consent we may also use analytics cookies to understand how the site is used. You can change your choice at any time using "Cookie settings" in the footer.

8. Your rights

To exercise any of these rights, please contact us via the Contact page. We may need to verify your identity before acting on a request.

• Ask whether we hold your personal information and request a copy.
• Ask us to correct or delete inaccurate or outdated information.
• Object to processing, including direct marketing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

9. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page.