Privacy Policy

• Account information — your name, email address, password (stored encrypted) and, if you add one, your phone number.
• Order and delivery information — the items you buy, delivery address, delivery method, order notes and order history.
• Payment information — the payment method you choose and a payment reference or proof of payment. We do not store full card numbers or crypto private keys on our servers.
• Support and marketing — messages you send through the contact form, WhatsApp or email, and your newsletter preference.
• Technical information — device type, browser, pages viewed and approximate location derived from your IP address. Analytics data is only collected if you accept analytics cookies.

• To create and secure your account and keep you signed in.
• To process, pack, deliver and track your orders and handle returns or refunds.
• To send transactional emails such as order confirmations and password resets.
• To answer your questions and resolve complaints.
• To detect fraud, prevent abuse and meet our legal and tax obligations.
• To measure how the shop is used and improve it — only where you have accepted analytics cookies.

We process your information because it is necessary to perform our contract with you (your order), because we have a legitimate interest in running a safe and useful shop, because the law requires it (for example keeping tax records), or because you gave consent (for example marketing emails and analytics cookies). You may withdraw consent at any time.

We share only what is needed, with:

• Our overseas fulfilment partners (the warehouses that pack your item) — the recipient's name, delivery address, contact number and the items ordered, so your parcel can be packed and labelled.
• International and local courier partners — the recipient's name, address and phone number, so the parcel can be shipped, cleared and delivered.
• Customs authorities — the recipient's name, address and a description and value of the goods, where the law of the destination country requires it.
• Payment providers and banks — the amount and payment reference.
• Our email delivery provider — your email address, so order and account emails reach you.
• Our hosting and database providers, who store the data on our behalf.
• Law enforcement or regulators where we are legally required to do so.

Fulfilment and courier partners receive only what is needed to deliver your parcel. They never receive your password, your card or crypto details, your order history or your marketing preferences, and they may not use your details for their own marketing. We never sell your personal information.

Because your items are shipped from overseas warehouses, your delivery details are necessarily sent outside South Africa to the fulfilment partner, courier and customs authority handling your parcel. POPIA permits this transfer because it is necessary to perform the contract you asked us to carry out — your order.

Some of our other service providers, such as hosting and email, also host data outside South Africa. Where that happens we only use providers who apply a level of protection comparable to POPIA, supported by their own contractual safeguards. If you would rather your details were not sent abroad, we are unfortunately not able to ship your order.

Order and invoice records are kept for five years to meet South African tax and consumer law requirements. Account information is kept while your account is open and for 12 months after you close it. Contact-form messages are kept for 24 months. Analytics data is retained for 14 months.

All traffic to nekseyshop.com is encrypted with HTTPS. Passwords are hashed and never visible to us. Access to customer data is limited to staff who need it, protected by row-level database security. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect unauthorised access to your account.

• Ask what personal information we hold about you and get a copy.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your account and data, unless we must keep records for legal reasons.
• Object to direct marketing and unsubscribe at any time.
• Withdraw cookie consent through our cookie settings.
• Lodge a complaint with the Information Regulator of South Africa if you believe we have handled your information unlawfully.

To exercise any of these, email us at nekseyshop@gmail.com. We respond within 30 days.

Our shop is intended for people aged 18 and over. If you are under 18, please use Neksey Shop only with the involvement of a parent or guardian, who is responsible for the order.

Cookies and similar technologies are covered in our Cookie Policy, which also lets you change your choices.

Questions about this policy? Email nekseyshop@gmail.com or use our contact page. We may update this policy from time to time; the date at the top always shows the current version.