Privacy policy

Last updated: 30 September 2026

Forest Art & Frame cc ("Forest Art & Frame", "we", "us") respects your privacy. This policy explains what personal information we collect when you visit forestframes.co.za, place an order, book a consultation or contact us, why we collect it, who we share it with, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

Forest Art & Frame cc is the responsible party for your personal information.

12 Thelma Crescent, Bagleyston, Johannesburg, Gauteng, 2192, South Africa
Email: info@forestframes.co.za
Phone: +27 11 640 3442

Questions about this policy, or requests about your personal information, can be sent to our Information Officer at info@forestframes.co.za.

2. Information we collect

Information you give us

  • Contact details: your name, email address and phone number.
  • Order details: billing and delivery addresses, the products you buy and your order history.
  • Enquiry, booking and trade details: what you tell us in our contact, consultation, commercial and trade forms, such as your project, room, preferred dates, company details and any photos or measurements you send us.
  • Messages: emails, WhatsApp messages and live chat conversations with our team.

Payment information

Payments are processed by Shopify and our payment providers, Payfast and Payflex. We do not see or store your full card number.

Information collected automatically

When you use our site, we and our service providers collect device and usage information through cookies and similar technologies, such as your IP address, browser and device type, the pages you view, how you interact with them and how you arrived at our site.

3. How we use your information

  • To process, make, deliver and install your order, and to keep you updated about it.
  • To respond to your enquiries, schedule consultations and review trade applications.
  • To provide customer service, handle returns and resolve problems.
  • To detect and prevent fraud and keep our site secure.
  • To understand how our site is used and improve it.
  • To send you marketing, where you have agreed to receive it or where you are an existing customer and have not opted out.
  • To meet our legal, tax and accounting obligations.

We process your information because it is needed to conclude or perform a contract with you, to comply with the law, for our legitimate interests in running and improving our business, or with your consent, as permitted by section 11 of POPIA.

4. Who we share it with

We do not sell your personal information. We share it only with service providers who help us run our business and who must keep it confidential and secure:

  • Shopify, which hosts our online store and checkout.
  • Payfast and Payflex, which process payments.
  • Courier and delivery partners, which deliver your order.
  • Google, including Google Analytics, Google Tag Manager, Google Ads, Google Merchant Center and Google Calendar for consultation bookings.
  • Microsoft Clarity, which helps us understand how visitors use our site.
  • Meta (Facebook and Instagram), for advertising and measuring our adverts.
  • Klaviyo and Omnisend, which power our sign up forms and email marketing.
  • Our live chat and WhatsApp messaging tools, which let you message our team.

We may also disclose information where the law requires it, to protect our rights, or in connection with a sale or restructure of our business.

5. Information stored outside South Africa

Some of our service providers store or process information outside South Africa. When this happens, we rely on providers that are subject to laws, binding agreements or binding corporate rules that give your information a level of protection similar to POPIA, as required by section 72 of POPIA.

6. Cookies and tracking

We use cookies that are needed to run the store, for example to remember your cart and complete checkout, as well as analytics and advertising cookies that help us understand site traffic and show you relevant adverts on other sites. You can block or delete cookies in your browser settings, although parts of the store may not work without them.

You can control personalised adverts in Google Ad Settings and in your Facebook and Instagram ad preferences, and you can opt out of Google Analytics with the Google Analytics opt out browser add on.

7. Marketing

We send marketing emails or messages only if you have agreed to receive them, or if you are an existing customer and we are telling you about similar products or services. Every marketing message includes a way to unsubscribe, and you can ask us to stop at any time by emailing info@forestframes.co.za.

8. How long we keep it

We keep personal information only for as long as we need it for the purposes above, or for as long as the law requires, for example for tax and accounting records. After that we delete it or remove anything that identifies you.

9. How we protect it

We take reasonable technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. Payments are processed by PCI DSS compliant providers. No method of sending information over the internet is completely secure, but we work hard to protect your information, and we will notify you and the Information Regulator if a security compromise affects you, as POPIA requires.

10. Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you, and request a copy of it;
  • ask us to correct or update information that is inaccurate or incomplete;
  • ask us to delete information we no longer have a lawful reason to keep;
  • object to us processing your information, including for direct marketing;
  • withdraw your consent at any time, where we rely on consent;
  • lodge a complaint with the Information Regulator.

To exercise any of these rights, email info@forestframes.co.za. We may need to confirm your identity before we act on a request.

If you are not satisfied with how we handle your information, you may complain to the Information Regulator of South Africa at inforegulator.org.za.

11. Children

Our site is intended for adults. We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian.

12. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top.