Privacy policy

Controller/responsible business and contact

• Controller/responsible business: TINY BEENS (PTY) LTD (Private Company), registration number 2022 / 202266 / 07.
• Physical and legal-notices address: 8 Horsham Bend, Parklands, Cape Town, 7441, South Africa.
• Privacy and customer-support requests: hello@tinybeens.co.za.
• Website: https://www.tinybeens.co.za.

What information the site handles

• Checkout information: name, email address, phone number, delivery address and optional delivery notes.
• Support information: name, email address, optional phone number, subject and message submitted through the Contact page.
• Newsletter information: a normalized email address, consent timestamp, consent state, source and context when you explicitly join the Tiny Beens list.
• Local browser information: the cart and wishlist are kept in the browser so the storefront can remember them. This is not an account or an automatic marketing opt-in.

Why information is used

Checkout information is used to quote delivery, create and support an order, coordinate fulfilment and handle payment. Support information is used to respond to your enquiry. Newsletter information is used only for the agreed Tiny Beens updates and first-order offer.

Tiny Beens does not add checkout customers to the marketing list automatically. Marketing consent is a separate, explicit choice.

Services involved in the current flows

• Supabase is used as the server-side data store for catalogue, order, support and newsletter records.
• Yoco handles the hosted payment checkout and payment confirmation flow. Tiny Beens checkout forms do not collect a full card number.
• Bob Go is the configured delivery-rate integration where a parcel requires that rate path. A standard R89 route remains available for qualifying standard products.
• WhatsApp is an external service opened through the verified support link. WhatsApp handles information according to its own terms and privacy notices.

Newsletter consent and withdrawal

The first-order offer uses explicit opt-in, records the consent state and timestamp, and keeps one subscriber record per normalized email. You can withdraw marketing consent through the Unsubscribe page. The current Tiny Beens project has no verified transactional email provider configured for this offer, so the code is displayed after signup rather than claiming an email was sent.

Your rights and requests

Under the Protection of Personal Information Act 4 of 2013, you may ask what personal information is held about you and request correction, deletion or withdrawal of consent where the law allows. Email hello@tinybeens.co.za, use the Contact page or contact WhatsApp support to start a request and include enough detail for us to identify the relevant record. No separate Information Officer contact has been published; use this verified support address for privacy requests.

Sharing, security and retention

Tiny Beens does not sell or share marketing lists. Information is shared with service providers only where needed for the stated storefront, support, delivery or payment purpose, or where required by law. Server-side access controls are used for private order and support records; no online system can promise absolute security.

Records are retained only for as long as needed for the relevant order, support, legal, accounting or consent purpose. Retention depends on the purpose and obligations connected to the relevant record.