Privacy Policy

Last updated: 20 August 2026

This policy explains what personal information Kaboo Kids collects, why we collect it, and what you can do about it. We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1. Who is responsible for your information

The responsible party is Beehop (Pty) Ltd (registration number 2026/612977/07), trading as Kaboo Kids, of Unit 21 Old Mill Park, 15 Sucrose Crescent, Mount Edgecombe, Durban, KwaZulu-Natal, 4032.

2. What we collect

  • Order information: your name, email address, telephone number, delivery address and billing address.
  • Payment information: handled by our payment provider. We receive confirmation that a payment succeeded and the last four digits and type of card. We never receive or store your full card number, expiry date or CVV.
  • Account information: if you create an account, your username and an encrypted password.
  • Communications: emails and messages you send us, and our replies.
  • Marketing: your email address, if you choose to subscribe.
  • Technical information: IP address, browser and device type, pages visited and referring site, collected through cookies and server logs.

3. Why we process it, and on what basis

  • To fulfil your order — to take payment, pack, deliver and support it. Basis: necessary to perform our contract with you.
  • To meet legal obligations — tax and accounting records, and consumer-protection obligations. Basis: compliance with a legal obligation.
  • To protect against fraud and to keep the site secure. Basis: our legitimate interests.
  • To send marketing — only if you asked us to, or if you are an existing customer and we are telling you about similar products. Basis: your consent, or section 69 of POPIA. You can opt out at any time.
  • To improve the shop — understanding which pages and products people look at. Basis: our legitimate interests.

We do not sell your personal information, and we do not use it for automated decision-making that has a legal effect on you.

4. Who we share it with

We share the minimum necessary with operators who help us run the shop, each of whom is required to keep it confidential and to process it only on our instructions:

  • Courier companies — your name, delivery address and phone number, so they can deliver your parcel.
  • Payment providers — to process your payment securely.
  • Our hosting and email providers — who store the site and our correspondence.
  • Our accountants, and SARS or other authorities — where the law requires it.

5. Information sent outside South Africa

Some of the services we use may store or process information outside South Africa. Where that happens, section 72 of POPIA requires that the recipient is subject to laws or a binding agreement giving your information a level of protection substantially similar to POPIA, and we contract on that basis.

6. Children

We sell toys for children, but we sell to adults. This site is not intended for use by children, and we do not knowingly collect the personal information of a child under 18. If you believe a child has given us personal information, please contact our Information Officer and we will delete it.

7. Cookies

We use cookies that are strictly necessary to run the shop — keeping you logged in and remembering what is in your cart — and analytics cookies that tell us how the site is used. You can block or delete cookies in your browser settings, but the cart and checkout will not work properly without the necessary ones.

8. How long we keep it

  • Order and transaction records: five years from the end of the tax year, as tax law requires.
  • Account information: until you ask us to close your account.
  • Marketing subscriptions: until you unsubscribe.
  • Enquiries that did not lead to an order: up to 12 months.

9. How we protect it

As section 19 of POPIA requires, we maintain appropriate safeguards: the site runs over an encrypted HTTPS connection, passwords are stored hashed, administrative access is limited to the people who need it and protected by strong, unique credentials, and payment card data is handled entirely by our PCI-compliant payment provider. If a security compromise affects your personal information, we will notify you and the Information Regulator as section 22 requires.

10. Your rights

Under POPIA you have the right to:

  • ask what personal information we hold about you, and receive a copy of it;
  • ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date or obtained unlawfully;
  • object to our processing of your information on reasonable grounds;
  • withdraw your consent to marketing at any time, and to unsubscribe from every marketing email we send;
  • complain to the Information Regulator; and
  • institute civil proceedings over a breach of your rights under POPIA.

To exercise any of these, email privacy@kabookids.co.za. We will respond within a reasonable time and may ask you to verify your identity first. Formal access requests may be made on Form 2 under the Promotion of Access to Information Act 2 of 2000.

11. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you may complain to:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Complaints: complaints.IR@inforegulator.org.za
Enquiries: enquiries@inforegulator.org.za
inforegulator.org.za

12. Changes to this policy

We may update this policy from time to time. The current version is always the one published on this page, and the date at the top tells you when it last changed.