Privacy Policy

What we do with your information, and what we never touch.

Last updated 15 September 2026

This notice explains what personal information 25SE (Pty) Ltd collects when you buy a shirt, why we need it, who else sees it and what you can do about it. It is written to meet the Protection of Personal Information Act 4 of 2013 (POPIA).

What we collect

When you order

Your name, delivery address, phone number and email address, together with what you ordered, what you paid and the payment reference.

When you contact us

Whatever you put in the email or WhatsApp message, and your address on that channel.

Automatically

Standard web server logs kept by our host, including IP address and browser type. We do not use them to build a profile of you.

We never collect your card details. Card number, expiry and CVV are entered on Yoco's or Payfast's own systems. They are not transmitted to us, not shown to us and not stored by us at any point.

We do not knowingly collect information from children, and we do not collect any special personal information as POPIA defines it.

Cookies

This site sets no cookies of its own and uses no analytics, advertising or tracking scripts. It stores nothing in your browser. The only third-party request the page makes is to Google Fonts for the typefaces.

Why we need it, and on what basis

• To perform the contract — we cannot print and courier a shirt without a name, an address and a way to reach you.
• To comply with the law — the Companies Act and the Tax Administration Act require us to keep records of what we sold and to whom.
• Legitimate interest — answering your queries and dealing with returns.

We do not sell your information, rent it, or trade it. We will not send you marketing unless you have asked us to, and if you ever do, every message will carry a way to stop.

Who else sees it

Yoco and Payfast	Process the payment. They receive the amount and your order reference. They are the ones who hold your card data, under their own privacy policies.
Our courier	Receives your name, delivery address and phone number, so they can deliver the parcel and call you if they cannot find you.
Our printer	Receives what to print and, where they ship direct, the delivery address.
Microsoft	Hosts our email, which is where your order confirmation is sent from and where our copy is kept.
Netlify	Hosts this website.

Each of these gets only what it needs to do its job. Beyond them, we share your information only if the law requires it.

Where it goes

Our email and our website hosting are provided by Microsoft and Netlify, which means some of your information is stored on servers outside South Africa. POPIA permits this where the receiving party is bound by rules that give substantially similar protection, and both operate under contractual data-protection terms that meet that standard.

How long we keep it

Order records are kept for five years from the end of the financial year in which the order was placed, because tax and company law require it. Emails and WhatsApp messages that are not tied to an order are deleted once the matter is closed. After that, we remove it.

Keeping it safe

Orders reach us over an encrypted connection (HTTPS). Our email is protected by two-factor authentication. Access is limited to the two people who run 25SE. No system is perfectly secure, but if a breach ever affected your information we would tell you and the Information Regulator, as POPIA requires.

Your rights

You may ask us, at any time, to:

• tell you what personal information we hold about you;
• correct anything that is wrong;
• delete it, where we are not required by law to keep it;
• object to us using it; or
• stop sending you anything.

Email admin@25se.net and we will answer within a reasonable time and at no charge. If you are not satisfied with how we have handled it, you may complain to the Information Regulator:

Changes

If this notice changes we will update the date at the top of the page. Material changes will be flagged on the shop page.