Version 2, 25 October 2026. This policy is written under the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who we are
1.1 Lighthouse Mill (Pty) Ltd, registration number 2026/770330/07, is the responsible party for your personal information. Our address is Tierkloof Centre, Betty’s Bay, 7141, Western Cape. Email: info@lighthousemills.co.za.
1.2 Our Information Officer is Gailyn Wessels, who is registered with the Information Regulator. Write to her at info@lighthousemills.co.za.
1.3 This policy explains what personal information we collect when you use shop.lighthousemills.co.za and www.lighthousemills.co.za, why we collect it, who sees it, how long we keep it, and what you can do about it.
2. What we collect
| What | Examples |
|---|---|
| Order details | Your name, email address, telephone number, delivery address and billing address, and what you ordered. |
| Payment confirmation | PayFast tells us that your payment succeeded and gives us a reference. We never see or store your card details. |
| Personalise | Text you want engraved, logo files you upload, your choices of font and knob, and the proofs and approvals. |
| Papers of Provenance | The layout you choose and the message you want us to write by hand. |
| The Register | The way you choose to appear (town or city, name, or Private), your consent for a name to be shown, and the wording, date and time of your choice. |
| Notify me | Your email address, if you ask us to tell you when a design opens. |
| Messages | Emails you send us and our replies. |
| Technical information | Cookies the shop needs to keep your cart and checkout working, and logs that protect the shop. |
3. Why we use it, and our legal basis
| Purpose | Information used | Basis under POPIA |
|---|---|---|
| To take, make, pack, deliver and refund your order | Order details, payment confirmation, Personalise, Papers | It is needed to carry out our agreement with you |
| To keep accounting and tax records | Order and payment records | A law requires it |
| To show your number on the Register | Your display choice and your name if you agree | Your consent |
| To tell you when a design opens | Your email address | Your consent |
| To prevent fraud and keep the shop secure | Technical information, order details | Our legitimate interest and yours |
| To answer your questions and complaints | Messages, order details | Our legitimate interest and our agreement with you |
4. The Register
4.1 Every mill has a number. When your payment is confirmed, your number appears on the public Register at www.lighthousemills.co.za/register/ as Commissioned. Anyone on the internet can see the Register, and search engines may copy it.
4.2 You choose how you appear: by your town or city (the default), by your name (only if you tick a separate box that is not ticked for you), or as Private, which shows only that the number is Commissioned.
4.3 We check the text before it appears. We store the wording of your choice with its date and time, so that we can show what you agreed to.
4.4 You can change or withdraw your display at any time by emailing info@lighthousemills.co.za. When you sell or give your mill to someone else, we can transfer the number to them. The Register may then show earlier owners of a number, each with their own consent.
5. Who we share it with
5.1 We share your information only as far as needed:
(a) PayFast, which takes your payment;
(b) The Courier Guy, which receives your name, address, telephone number and email address so that it can deliver your parcel;
(c) Truehost, which hosts our website, shop and email; and
(d) our workshop team, who see only your order number and your first name or the name you chose for the Papers of Provenance. Your address and telephone number stay with dispatch.
5.2 We do not sell your information. We may also have to share it when the law requires it.
5.3 These companies use your information only for the purpose we give it to them and must keep it safe.
6. Outside South Africa
6.1 Our website and email are hosted by Truehost. Your information may be stored on servers outside South Africa. When it is, we take steps to make sure that it is protected to a standard like that in POPIA.
7. How long we keep it
| What | How long |
|---|---|
| Order and payment records | 5 years |
| Logo files that were uploaded but never ordered | 3 days |
| Logo files of orders that were cancelled, failed or refunded | 30 days |
| Logo files of orders that were delivered | 12 months after delivery |
| Register and Papers of Provenance records | For as long as the edition exists |
| Notify me email addresses | Until the design opens or you ask us to stop |
| Messages and complaints | 3 years |
8. Cookies
8.1 We use only the cookies that the shop needs to work: to keep your cart, to complete checkout, to keep you signed in, and to protect the site. We do not use advertising cookies.
8.2 When our cookie banner is switched on, it will let you read about the cookies and decline those that are not essential.
9. Keeping it safe
9.1 We take reasonable steps to keep your information safe. Our shop uses HTTPS. Logo files go into a private folder under random file names, and links to them are signed and expire. We check uploaded files for scripts. We limit how many files one person can upload. We keep backups. Only the people who need your information to do their work can see it.
9.2 If your information is lost or accessed by someone who should not have it, we will tell you and the Information Regulator as the law requires.
10. Your rights
10.1 You may ask us to tell you what we hold about you, to correct it, to delete it, or to stop using it. You may also withdraw a consent you gave. Email info@lighthousemills.co.za. We will answer as soon as we reasonably can.
10.2 Some information we must keep by law, for example order and payment records. We cannot delete that until the period in section 7 ends.
10.3 If you think we have not handled your information properly, please tell us first. You may also complain to the Information Regulator:
| Address | Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 |
| General enquiries | enquiries@inforegulator.org.za |
| POPIA complaints | POPIAComplaints@inforegulator.org.za |
| Telephone | 0800 017 160 (toll free) or 010 023 5200 |
11. Marketing
11.1 We send marketing messages only if you ask for them. At launch the only message of this kind is a single Notify me email, sent once when a design you asked about opens. Each message tells you how to stop them.
12. Children
12.1 Our shop is for people who are 18 or older. We do not knowingly collect information from children.
13. Changes
13.1 We may change this policy. The version on the shop is the current one, and we show the date of the latest change at the top.