1. Introduction

Bernina Paarl (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, protect and share personal information when you visit our website, enquire about our products or services, register for sewing classes, make payments or communicate with us.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African legislation.

By using our website or services, you acknowledge this Privacy Policy. Where consent is required by law, we will request it separately.

2. Responsible Party

For purposes of POPIA, the responsible party for the personal information described in this policy is:

Business name: Bernina Paarl

Website: https://berninapaarl.co.za

Email: [email protected]

Physical address: 271 Main Street, Paarl 7646

Information Officer: Karike Conradie

Telephone: +27 (83) 448-4502

3. Personal Information We Collect

Depending on your interactions with Bernina Paarl, we may collect:

• Full name and surname.

• Email address and telephone number.

• Billing and contact information.

• Class booking details, including selected class, date, time and instructor.

• Payment status, transaction references and payment history.

• Information supplied through website forms or enquiries.

• Communication preferences and records of correspondence.

• Technical information such as IP address, browser type and website usage information.

We aim to collect only the information reasonably necessary for the purposes described in this policy.

4. How We Collect Information

We may collect personal information when you:

• Visit or interact with our website.

• Complete an online enquiry or contact form.

• Register for a sewing class, workshop or event.

• Make a payment using PayFast or electronic funds transfer (EFT).

• Subscribe to newsletters or promotional communications.

• Contact us by email, telephone or other communication channels.

• Provide information directly to our staff.

Certain technical information may also be collected automatically through website functionality, cookies and related technologies.

5. How We Use Your Information

Class bookings and administration

To register customers for sewing classes, manage class availability and capacity, allocate instructors, confirm reservations and communicate changes to bookings.

Payments and financial administration

To process or verify payments, issue receipts, reconcile transactions and maintain financial records.

Customer communications

To respond to enquiries, send booking confirmations, payment notifications, class reminders and other service-related messages.

Marketing communications

To provide information about classes, workshops, products, promotions and special events where permitted by applicable law.

Website operations

To maintain website functionality, improve the customer experience, identify technical problems and protect our systems.

Legal obligations

To comply with applicable accounting, tax, consumer protection and data protection requirements.

Our processing is based on an appropriate lawful justification under POPIA, including consent where required, contractual necessity, legal obligations or legitimate interests recognised by law.

6. Online Class Bookings and HighLevel

Bernina Paarl uses HighLevel (GoHighLevel) to operate parts of its website, manage customer relationships, process online class bookings and automate communications.

When you submit a class booking, relevant personal information may be processed and stored within HighLevel. This may include:

• Customer name and contact details.

• Class name and selected session.

• Booking date and time.

• Instructor or venue information.

• Booking and payment status.

• Records of confirmations, reminders and related communications.

We use this information to administer classes and provide the services requested. Where applicable, booking confirmation may depend on successful payment verification.

HighLevel and its relevant service providers may process information on infrastructure located outside South Africa. We take reasonable steps to ensure that international processing and transfers comply with applicable POPIA requirements.

7. Payments Through PayFast

Bernina Paarl uses PayFast as an online payment service provider.

When you choose to pay online, you may be directed to a PayFast payment interface or use a payment facility integrated with our website. PayFast processes payment information in accordance with its own privacy and security practices.

Bernina Paarl may receive and retain transaction-related information, including:

• Customer name and contact details.

• Transaction reference.

• Payment amount.

• Date and time of payment.

• Payment status.

• Relevant payment confirmation details.

We do not intentionally collect or store complete payment card numbers, card security codes or online banking passwords in our own customer records.

Payment information is used to verify transactions, confirm bookings, issue receipts, manage refunds and comply with financial recordkeeping obligations.

For further information, consult PayFast’s Privacy Policy.

8. Electronic Funds Transfer (EFT) Payments

Where EFT is offered as a payment option, customers may be requested to provide a payment reference or proof of payment.

We use this information to:

• Identify incoming payments.

• Reconcile payments with class bookings.

• Verify payment status.

• Confirm reservations.

• Resolve payment discrepancies.

We may retain relevant transaction records for accounting, audit and legal purposes. Customers should avoid including unnecessary sensitive personal information in payment confirmations.

9. Email and Other Communications

Bernina Paarl may use HighLevel and other communication service providers to send transactional and service-related messages. These may include:

• Booking confirmations.

• Payment confirmations and receipts.

• Class reminders.

• Booking changes or cancellations.

• Responses to customer enquiries.

• Important information concerning registered classes.

These communications are necessary for administering requested services and are distinct from promotional marketing.

We may also send promotional communications about new classes, workshops, products or special offers where permitted by law. Where consent is required for direct marketing, we will obtain it before sending such communications.

Customers may unsubscribe from promotional emails using the unsubscribe facility provided or by contacting us directly. Unsubscribing from marketing communications will not necessarily prevent essential messages relating to an existing booking or transaction.

10. Cookies and Website Technologies

Our website may use cookies and similar technologies to support its operation and improve the visitor experience. These may include:

• Essential cookies required for website functionality.

• Cookies supporting forms, sessions and bookings.

• Analytics cookies, where enabled.

• Marketing or advertising cookies, where enabled.

Certain cookies may be placed by third-party services integrated with the website. Where required, we will provide appropriate information and choices concerning non-essential cookies.

Visitors may also manage cookies through their browser settings. Disabling certain cookies may affect website functionality.

11. Sharing of Personal Information

We do not sell customer personal information.

We may share information with third parties where reasonably necessary to operate our business, including:

• HighLevel, for website hosting, customer management, bookings and communications.

• PayFast, for payment processing.

• Banking and financial service providers, for payment reconciliation.

• Email and messaging service providers, for customer communications.

• Accounting, technical support and professional service providers.

• Regulatory or law enforcement authorities where disclosure is required or permitted by law.

We take reasonable steps to ensure that service providers process personal information securely and for appropriate purposes.

12. International Transfer of Information

Some of our technology and payment service providers may operate or store information outside South Africa.

Where personal information is transferred internationally, we will take reasonable steps to ensure that the transfer is permitted under section 72 of POPIA, including through appropriate contractual protections, applicable legal safeguards or another lawful basis.

13. Information Security

Bernina Paarl takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, disclosure, alteration or destruction.

Such measures may include access restrictions, password protection, secure communication channels and the use of reputable service providers. Access to customer information is limited to persons who require it for legitimate business purposes.

Although reasonable precautions are taken, no internet-based system can be guaranteed to be completely secure.

Where a security compromise occurs, we will investigate and provide notifications to affected persons and the Information Regulator when required by POPIA.

14. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required or permitted by applicable law.

Retention periods may differ depending on the type of information. For example:

• Booking information may be retained for customer service and administrative purposes.

• Financial records may be retained for the periods required by tax and accounting legislation.

• Marketing contact information may be retained while a lawful basis for continued communication exists.

• Enquiry information may be deleted or anonymised when no longer required.

When personal information is no longer required, we will securely delete, destroy or de-identify it, subject to applicable legal requirements.

15. Your Rights Under POPIA

Subject to applicable legal requirements, you may have the right to:

1. Request confirmation of whether we hold personal information about you.

2. Request access to your personal information.

3. Request correction of inaccurate, incomplete or outdated information.

4. Request deletion or destruction of information where legally appropriate.

5. Object to certain processing of your personal information.

6. Withdraw consent where processing is based on consent.

7. Object to or opt out of direct marketing communications.

8. Lodge a complaint with the South African Information Regulator.

To exercise these rights, please contact us using the details in Section 2. We may request reasonable proof of identity before disclosing or modifying personal information.

Requests will be handled in accordance with POPIA and other applicable legislation.

16. Children's Personal Information

Some sewing classes or workshops may be suitable for children.

Where we collect personal information relating to a child, we will comply with applicable POPIA requirements, including obtaining authorisation from a competent person, such as a parent or legal guardian, unless another lawful exception applies.

We will collect only the information reasonably necessary to administer the child's participation.

17. Third-Party Websites

Our website may contain links to external websites, including payment providers and social media platforms.

These third parties operate under their own privacy policies and terms. Bernina Paarl is not responsible for the privacy practices of external websites that we do not control.

We encourage visitors to review the relevant privacy policies before providing personal information.

18. Complaints and the Information Regulator

If you have concerns about how Bernina Paarl processes your personal information, please contact us first so that we can investigate and address the matter.

You may also lodge a complaint with the South African Information Regulator.

Information Regulator (South Africa)

Website: inforegulator.org.za

Email: [email protected]

Telephone: 010 023 5200

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business operations, technology, service providers or legal requirements.

The latest version will be published on our website, together with its effective or revision date. Where required by law, we will provide additional notice or obtain consent for material changes to how personal information is processed.

20. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or your personal information, please contact us using the details in Section 2.

We are committed to handling your personal information responsibly and respecting your privacy.