Privacy policy
Effective Date: 01/09/2025 | Last Updated: 09/09/2025
Picot & Moss ("we", "us", or "our") is committed to safeguarding the personal data of all individuals who interact with us. This Privacy Policy outlines how we collect, use, disclose, store, and protect your information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA), the General Data Protection Regulation (GDPR) applicable in the European Union, and the Electronic Communications and Transactions Act 25 of 2002 (ECTA) of South Africa.
By accessing our website, engaging with our services, or providing us with your personal information, you agree to the practices described in this policy.
1. Information We Collect
We collect personal information directly and automatically when you browse our website; make purchases or create an account; subscribe to newsletters or promotions; contact our customer service; or participate in surveys, competitions, or social media engagement.
Categories of data collected may include: Identity Data (full name, title, ID/passport number), Contact Data (email, phone number, postal address), Financial Data (payment card details, billing information), Transaction Data (order history, receipts), Technical Data (IP address, browser type, cookies, device identifiers), and Marketing Preferences and Communication History.
2. Purpose of Processing
Your data may be processed to: provide goods or services requested; manage transactions and payment processing; for internal record-keeping and analytics; send marketing communications (with consent); comply with legal and regulatory obligations; secure our systems and prevent fraud.
Processing is always aligned with the lawful bases under POPIA, GDPR (Article 6), and ECTA, such as: consent, contractual necessity, legal obligation, legitimate interests, and vital interests (where applicable).
3. Data Subject Rights
Under POPIA (South Africa): right to access personal information; right to request correction or deletion; right to object to processing; right to withdraw consent; right to lodge a complaint with the Information Regulator.
Under GDPR (EU/EEA residents): right to be informed; right to data portability; right to restrict or object to processing; right to erasure ("right to be forgotten"); right to lodge a complaint with the Data Protection Authority in your EU country.
To exercise any of these rights, please email our Information Officer at .
4. Data Sharing and Transfers
We may share personal data with trusted third parties such as payment processors and banking institutions, courier and logistics partners, IT service providers (e.g., web hosting, email systems), and marketing platforms (with consent).
Where data is transferred outside South Africa or the EU, we ensure compliance with Section 72 of POPIA and Chapter V of the GDPR, including Binding Corporate Rules, Standard Contractual Clauses, and adequacy decisions.
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your browsing experience, analyze usage, and deliver targeted advertising. By using our site, you consent to the placement of these cookies. You may adjust your browser settings to disable cookies, although this may impact website functionality.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable laws (e.g., tax and accounting regulations). Data is securely disposed of when no longer needed.
7. Security Measures
We implement appropriate technical and organizational security measures to protect your personal information against loss or theft, unauthorized access, and disclosure or alteration. This includes encryption, firewalls, secure storage, access control, and employee data protection training.
8. Marketing and Consent
You will only receive electronic communications (emails, SMS, etc.) if you have provided consent, in compliance with POPIA Section 69, ECTA Section 45, and GDPR Article 7. You may withdraw your consent at any time by clicking "unsubscribe" in our emails or contacting our Information Officer.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their content or privacy practices.
10. Contact Information
Information Officer: Picot & Moss Email: Phone: 011 669 0500 Address: 6th Floor Katherine & West, 114 West Street, Sandton 2196
11. Changes to This Policy
We reserve the right to update this privacy policy periodically to reflect changes in law or our business practices. The latest version will always be available on our website, with the effective date clearly stated.
