Privacy Policy

Last updated: 19 October 2026

This Privacy Policy explains how Kharah Co (Pty) Ltd (registration number 2024/779400/07), trading as BokkiePop – Baby & Kids (“we”, “us”, “our”), collects, uses, shares and protects your personal information when you use bokkiepop.co.za (“the Shop”). We comply with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who is responsible for your information

Kharah Co (Pty) Ltd is the “responsible party” under POPIA.

2. What information we collect

  • Information you give us: your name, email address, phone number, delivery and billing address, account login details, order details, and anything you tell us when you contact us by form, email or WhatsApp.
  • Payment information: payments are processed by PayFast. We do not receive or store your full card, bank or wallet details. We receive confirmation of whether the payment was successful and basic transaction details.
  • Technical information: your IP address, browser and device type, pages viewed and how you use the Shop, collected through cookies and similar technologies.
  • Marketing preferences: whether you have agreed to receive updates and offers.

3. Why we use your information

  • To process, deliver and support your orders (this is necessary to carry out our contract with you).
  • To communicate with you about your order and answer your questions.
  • To keep the records we must keep by law, for example for tax and accounting.
  • To prevent fraud and keep the Shop secure.
  • To understand how the Shop is used and improve it (our legitimate interest).
  • To send you news, updates and special offers, only if you have given us your consent.

4. Who we share your information with

We share information only with the service providers that help us run the Shop, and only what they need:

  • PayFast, to process your payment.
  • The Courier Guy, to deliver your order (your name, delivery address, phone number and email).
  • Website hosting, security and email providers that keep the Shop running.
  • Google, for website analytics (Google Analytics through Site Kit) and spam protection on our contact form (reCAPTCHA).
  • Meta (Facebook and Instagram) and WhatsApp, where you contact us through WhatsApp or where we use Facebook and Instagram tools to show our products.

We do not sell your personal information. We may also disclose information where the law requires it.

5. Information sent outside South Africa

Some of the service providers listed above, such as Google and Meta, process information on servers outside South Africa. Where this happens, we only use providers that are subject to laws or agreements that protect your information to a similar standard to POPIA.

6. How long we keep your information

  • Order and accounting records: for as long as the law requires, which is generally 5 years.
  • Your account details: until you ask us to delete your account.
  • Marketing information: until you withdraw your consent.
  • Enquiries: for as long as needed to deal with your enquiry.

7. Keeping your information safe

We take reasonable technical and organisational steps to protect your information, including secure payment processing, access controls and security monitoring on our website. No online system is completely secure. If there is a security breach that affects your information, we will notify you and the Information Regulator as required by POPIA.

8. Marketing messages

We will only send you marketing by email or WhatsApp if you have opted in. Every marketing email includes an unsubscribe link, and you can stop WhatsApp updates at any time by replying STOP. Order and delivery messages are not marketing and will still be sent.

9. Cookies

Cookies are small files stored on your device. We use:

  • Essential cookies that keep your cart, login and checkout working.
  • Analytics cookies that help us understand how the Shop is used.
  • Marketing cookies that help us measure and show relevant ads on Facebook and Instagram.

You can accept or decline non-essential cookies using our cookie notice, and you can also block or delete cookies in your browser settings. If you block essential cookies, parts of the Shop may not work.

10. Your rights

Under POPIA you have the right to:

  • ask what personal information we hold about you and get a copy,
  • ask us to correct or delete information that is inaccurate, outdated or no longer needed,
  • object to us processing your information, and withdraw consent you have given us, and
  • complain to the Information Regulator.

To use these rights, email our Information Officer at hello@bokkiepop.co.za. We may need to confirm your identity first. If you are unhappy with how we have handled your information, you can contact the Information Regulator at inforegulator.org.za.

11. Children

The Shop is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, please contact us and we will delete it.

12. Links to other websites

The Shop may link to other websites. We are not responsible for their privacy practices, so please read their policies before sharing your information.

13. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.

14. Contact us

Questions about this policy or your information? Email hello@bokkiepop.co.za or call or WhatsApp 068 619 1917.