Legal

Privacy Policy

We collect as little as an order requires, and we do not sell or rent personal data to anyone.

Who is responsible

House of MBALI, Cape Town, South Africa, is the controller of the personal data described here. Privacy enquiries: admin@houseofmbali.com.

What we collect

Account details (name, email address); order details (pieces, hides, personalisation, delivery and billing address, phone number); correspondence you send us; and basic technical data such as IP address and device type when you use the site.

Card details are never stored by us. Payments are handled by our payment provider, which receives the payment data directly.

Why we use it

To take, make and deliver your order and to meet our legal and export obligations (performance of a contract and legal obligation); to maintain the Origin Register and provide authentication and restoration (legitimate interests); and, only with your consent, to send occasional news about the house.

Who we share it with

Couriers and customs authorities for shipping and export; our payment provider; and service providers who host the site and send our transactional emails, all under contract and only for those purposes. Some of these providers operate outside your country; transfers are made under appropriate safeguards.

How long we keep it

Order, invoice and export records are kept for the period required by tax and customs law. Origin Register entries are retained indefinitely, because they authenticate the piece for its lifetime. Marketing consent is kept until you withdraw it. Account data is deleted on request where no legal obligation requires us to keep it.

Your rights

You may request access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and you may withdraw marketing consent at any time. Write to admin@houseofmbali.com. You may also complain to your local data protection authority.