Privacy Policy
Silver Starfish Trading (Pty) Ltd
Website: https://www.silverstarfishtrading.co.za/
Email: sales@silverstarfishtrading.co.za
Last updated: 20 August 2026
1. Introduction
Silver Starfish Trading (Pty) Ltd (“Silver Starfish Trading”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:
-
visit or use our website and online store;
-
create a customer account;
-
purchase or enquire about our products;
-
communicate with us;
-
subscribe to marketing communications; or
-
otherwise interact with Silver Starfish Trading.
We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”), the Consumer Protection Act 68 of 2008 and other applicable South African laws.
2. Responsible party
For the purposes of POPIA, the responsible party is:
Legal name: Silver Starfish Trading (Pty) Ltd
Registration number: Pending
Registered or business address: Parys, South Africa
Website: https://www.silverstarfishtrading.co.za/
Email: sales@silverstarfishtrading.co.za
Telephone: 065 074 2922
The responsible party determines why and how personal information collected through the website is processed.
3. Personal information we collect
Depending on how you interact with us, we may collect the following information:
3.1 Identity and contact information
-
First and last name;
-
Business or company name;
-
Email address;
-
Telephone or mobile number;
-
Billing address;
-
Delivery address; and
-
VAT or company details where applicable.
3.2 Order and transaction information
-
Products ordered or considered;
-
Order number, date, value and status;
-
Billing and delivery information;
-
Payment method;
-
Payment confirmation and transaction reference;
-
Refunds, returns and warranty information; and
-
Communications concerning an order.
Online payments may be processed by an independent payment gateway. Silver Starfish Trading generally receives payment confirmation and transaction information rather than complete bank-card credentials. The relevant payment provider processes payment information under its own privacy and security terms.
3.3 Customer-account information
If customer accounts are available, we may collect:
-
Username or email address;
-
Encrypted account password;
-
Saved addresses;
-
Order history;
-
Wishlist or saved-product information; and
-
Account preferences.
You are responsible for keeping your login credentials confidential and notifying us if you suspect unauthorised access to your account.
3.4 Enquiry and communication information
We may retain information you provide through:
-
Contact and enquiry forms;
-
Email;
-
Telephone calls;
-
WhatsApp or other messaging services;
-
Product reviews;
-
Customer-support enquiries; and
-
Social-media interactions.
3.5 Website and device information
When you use the website, certain technical information may be collected automatically, including:
-
Internet Protocol address;
-
Browser and device type;
-
Operating system;
-
Referring website;
-
Pages and products viewed;
-
Date, time and duration of visits;
-
Approximate location derived from an IP address;
-
Shopping-cart activity; and
-
Cookie and analytics identifiers.
3.6 Marketing information
Where applicable, we may collect:
-
Your marketing consent;
-
Email or SMS subscription preferences;
-
Responses to promotions;
-
Advertising interactions; and
-
Records of when consent was granted, refused or withdrawn.
We do not intentionally collect special personal information unless it is necessary, permitted by law and appropriately protected.
4. How we collect personal information
We may collect information:
-
Directly from you when you place an order, register an account, complete a form or contact us;
-
Automatically through cookies, server logs and similar website technologies;
-
From payment processors, banks or fraud-prevention providers;
-
From couriers and delivery providers;
-
From marketing, analytics or advertising platforms, subject to applicable consent requirements;
-
From publicly available sources; or
-
From another person authorised to provide information on your behalf.
Where providing information is mandatory, failure to provide it may prevent us from completing an order, delivering products, responding to an enquiry or meeting a legal obligation.
5. Why we process personal information
We may process personal information to:
-
Create and administer customer accounts;
-
Receive, verify and fulfil orders;
-
Process payments and refunds;
-
Arrange collection or delivery;
-
Send order confirmations and delivery updates;
-
Provide quotations, invoices and tax records;
-
Respond to product and customer-service enquiries;
-
Manage returns, exchanges and warranties;
-
Detect or prevent fraud, abuse and security incidents;
-
Maintain and improve the website and online store;
-
Analyse website performance and customer behaviour;
-
Personalise website content where permitted;
-
Maintain accounting, operational and legal records;
-
Establish, exercise or defend legal claims;
-
Comply with tax, consumer-protection and other legal requirements;
-
Send marketing where we have the necessary consent or another lawful basis; and
-
Protect our customers, business, systems and legal rights.
We will not process personal information for a purpose that is materially incompatible with the purpose for which it was collected unless permitted by law or authorised by you.
6. Grounds for processing
Depending on the circumstances, we process personal information because:
-
It is necessary to enter into or perform a contract with you;
-
You have consented to the processing;
-
We must comply with a legal obligation;
-
Processing protects your legitimate interests;
-
Processing protects our legitimate business interests or those of a third party, provided that your rights are appropriately considered; or
-
Another ground recognised under POPIA applies.
You may withdraw consent at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn, and it does not prevent processing based on another lawful ground.
7. Marketing communications
We may send marketing communications only where permitted by law.
Where prior consent is required, we will request it before sending electronic marketing. If you are an existing customer, we may communicate with you about our own similar products where permitted by POPIA, provided that you were given a reasonable opportunity to object.
You can unsubscribe at any time by:
-
Selecting the unsubscribe option in an email;
-
Replying “STOP” where that facility is provided; or
-
Contacting sales@silverstarfishtrading.co.za.
Opting out of marketing does not prevent us from sending essential service messages, such as order confirmations, payment notices, delivery updates or product-safety communications.
We do not sell personal information or customer mailing lists.
8. Cookies and similar technologies
Cookies are small data files placed on a device when a website is visited. We may use:
8.1 Strictly necessary cookies
These enable essential functions such as:
-
Maintaining website security;
-
Remembering shopping-cart contents;
-
Processing checkout steps;
-
Maintaining logged-in sessions; and
-
Remembering privacy choices.
The store may not function correctly without these cookies.
8.2 Preference cookies
These remember selections such as language, location, display settings or other preferences.
8.3 Analytics cookies
These help us understand how visitors use the website and identify areas that can be improved.
8.4 Advertising cookies
If used, these cookies may measure advertising performance or help present relevant advertisements. Non-essential advertising and analytics cookies will be used subject to applicable consent requirements.
You can manage non-essential cookies through the website’s cookie-consent facility, where available, or through your browser settings. Blocking certain cookies may affect website functionality.
9. Sharing personal information
We may disclose personal information only where reasonably necessary and lawful, including to:
-
Payment gateways and financial institutions;
-
Courier, logistics and delivery providers;
-
Website hosting, maintenance and security providers;
-
E-commerce, accounting and customer-management service providers;
-
Email, messaging and customer-support providers;
-
Analytics and advertising providers, subject to consent requirements;
-
Professional advisers, including accountants, auditors, attorneys and insurers;
-
Regulators, courts, law-enforcement bodies and government authorities;
-
A buyer, investor or adviser involved in a proposed business sale, restructuring or merger; and
-
Other parties authorised by you or required by law.
Service providers that process personal information on our behalf are expected to process it only for authorised purposes and apply appropriate security safeguards.
We do not allow service providers to use personal information for their own unrelated marketing unless you have separately authorised them to do so.
10. Cross-border processing
Some website, hosting, cloud, payment, analytics, communication or support providers may process information outside South Africa.
Where personal information is transferred outside South Africa, we will take reasonably practicable steps to ensure that the recipient is subject to:
-
A law, binding corporate rule or agreement providing an adequate level of protection;
-
Contractual obligations requiring appropriate protection;
-
Your consent, where consent is an appropriate ground; or
-
Another cross-border transfer ground permitted under POPIA.
11. Information security
We use reasonable technical and organisational safeguards appropriate to the nature of the information we process. These may include:
-
Secure website connections;
-
Access controls and authentication;
-
Restricted staff and service-provider access;
-
Password protection;
-
Software and security updates;
-
Backups;
-
Anti-malware and security monitoring;
-
Secure payment providers; and
-
Incident-response procedures.
No internet transmission or electronic storage method is completely secure. We therefore cannot guarantee absolute security, but we will take reasonable measures to prevent loss, misuse, unauthorised access, interference, alteration or disclosure.
Where we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected data subjects in accordance with POPIA, subject to any lawful delay or restriction.
12. Retention of personal information
We retain personal information only for as long as reasonably necessary to:
-
Fulfil the purpose for which it was collected;
-
Complete and support customer transactions;
-
Meet tax, accounting, warranty and recordkeeping requirements;
-
Resolve disputes;
-
Prevent fraud;
-
Enforce agreements; and
-
Comply with applicable law.
Retention periods vary according to the record and relevant legal requirements. When personal information is no longer required, we will delete, destroy or de-identify it in a reasonably secure manner, unless continued retention is required or permitted by law.
Information retained for legal, accounting or fraud-prevention purposes may remain in restricted records even after an account is closed or a deletion request is received.
13. Your rights under POPIA
Subject to applicable law, you may:
-
Ask whether we hold personal information about you;
-
Request access to personal information we hold;
-
Request correction of inaccurate or incomplete information;
-
Request deletion or destruction of information that we are no longer authorised to retain;
-
Object to certain processing on reasonable grounds;
-
Withdraw consent where processing depends on consent;
-
Object to direct marketing;
-
Request information about the identities or categories of third parties that have accessed your information;
-
Complain to us about our processing practices; and
-
Submit a complaint to the Information Regulator.
We may need to verify your identity before responding. Certain requests may be refused or limited where permitted by law, including where disclosure would affect another person’s rights or where information must be retained to meet a legal obligation.
Requests may be submitted to the Information Officer using the contact details in section 2.
14. Automated processing
We may use automated tools to help identify suspicious transactions, website abuse or potential fraud. We do not intend to make decisions that have legal or similarly significant effects based solely on automated processing unless it is permitted under POPIA and appropriate safeguards are provided.
15. Children’s personal information
The online store is intended for persons legally capable of entering into a transaction or persons acting with the assistance or consent of a competent adult where required.
We do not knowingly collect personal information directly from children without the consent of a competent person or another lawful ground. If you believe a child has provided personal information without appropriate authorisation, please contact us so that we can investigate and take appropriate action.
16. Product reviews and public content
If the website allows reviews, comments or other public submissions, information posted in those areas may be visible to other users.
Do not publish sensitive personal information in a review or public comment. We may moderate or remove content that violates our website rules, the law or another person’s rights.
17. Third-party websites
Our website may contain links to websites, social-media platforms or services operated by third parties. We do not control their privacy practices and this Privacy Policy does not apply to information collected directly by them.
You should review the privacy policy of a third-party service before providing it with personal information.
18. Changes to this Privacy Policy
We may update this policy to reflect changes to our services, website technology, suppliers or legal obligations.
The revised policy will be published on this page with an updated revision date. Material changes may also be communicated through the website or by email where reasonably appropriate.
19. Contacting us
For questions, access requests, corrections, objections, deletion requests or complaints concerning personal information, contact:
The Information Officer
Silver Starfish Trading (Pty) Ltd
Email: sales@silverstarfishtradi.co.za
General email: sales@silverstarfishtrading.co.za
Telephone: 065 074 2922
Address: Parys, South Africa
20. Complaints to the Information Regulator
If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa).
Information Regulator (South Africa)
Website: https://inforegulator.org.za/
Complaints portal: https://inforegulator.org.za/complaints/
Email: POPIAComplaints@inforegulator.org.za
Telephone: 010 023 5200
We encourage you to contact us first so that we have an opportunity to address your concern.
