Privacy Policy

Last updated: 27 August 2026

DecorMe respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and how we protect it in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.

1. Who we are

This website and the services described on it are operated by:

• Legal business name: DecorMe Cape Town Pty Ltd
• Trading name: DecorMe
• Company registration number: 2022/856583/07
• Physical address: 21 Tanka Street, Graanendal, Durbanville
• Telephone: +27 76 576 6578
• Email: karmien@decorme.co.za
• Website: https://decorme.co.za

For purposes of POPIA, DecorMe is the responsible party for the personal information described in this Privacy Policy.

Information Officer

• Name: Karmien Joubert
• Email: Karmien@decorme.co.za
• Telephone: 076 576 6578

The Information Officer is responsible for handling privacy-related enquiries and requests concerning your personal information.

2. What DecorMe does

DecorMe provides services including:

• Monthly rental and rotation of artificial/silk flower arrangements.
• Delivery and collection of rented arrangements.
• Flower arrangement services for businesses and other spaces.
• Sale of real trees and related products.
• Customer enquiries, quotations and support.
• Payment and subscription administration.

3. Personal information we collect

Depending on how you interact with DecorMe, we may collect:

• Your first name and surname.
• Email address.
• Telephone or mobile number.
• Business or organisation name.
• Physical, delivery or collection address.
• Information about the space or service you are enquiring about.
• Information required to arrange flower rental, delivery or collection.
• Payment or debit-order information where required.
• Information contained in emails, enquiries, quotations or other communications.
• Marketing preferences and consent records.

We only ask for information that is reasonably necessary for the relevant purpose.

Information collected through the subscription sign-up form

The sign-up form on our website is used to set up a silk flower subscription and the associated debit-order mandate. Because it authorises a recurring payment, this form collects more information than our other forms, namely:

• The subscription option selected.
• Business name, company registration number and VAT number.
• Contact person, first name and surname.
• Telephone number and email address.
• Delivery or business address.
• South African identity number of the person authorising the debit order.
• Banking details required for the debit-order mandate: account holder name, bank, branch name, branch code, account number and account type.
• An electronic signature, drawn by you on the form, confirming the mandate.
• The date and time the form was submitted.

This information is collected only where you choose to sign up for a subscription. It is used to set up your subscription and to authorise and administer the debit order, and for no other purpose. We do not use the identity number, banking details or signature for marketing.

Information collected automatically

When you visit our website, certain technical information may also be collected automatically, including:

• IP address.
• Browser and device information.
• Operating system.
• Pages visited.
• Approximate location.
• Date and time of visits.
• Website interactions.
• Referring website or marketing campaign.
• Cookie and similar technology identifiers.

Some of this information may constitute personal information where it can reasonably be linked to an identifiable person.

4. How we collect your information

We may collect personal information when you:

• Complete a form on our website.
• Sign up for our services.
• Request a quotation.
• Contact us by email, telephone, WhatsApp or another communication channel.
• Purchase a product or service.
• Enter into a rental or subscription arrangement.
• Make or arrange a payment.
• Subscribe to marketing communications.
• Visit or interact with our website.

We may also receive information from service providers that assist us with website hosting, payment processing, delivery, communication, analytics or advertising.

5. Why we use your personal information

DecorMe may use your personal information to:

• Respond to enquiries.
• Provide quotations.
• Set up and manage your rental or subscription.
• Arrange deliveries, collections and flower rotations.
• Process orders and payments.
• Communicate with you about your services or orders.
• Provide customer support.
• Improve our website and services.
• Maintain website security.
• Detect fraud, abuse or technical problems.
• Measure website traffic and marketing performance.
• Send marketing communications where permitted by law and where appropriate consent has been obtained.
• Keep accounting, business and transaction records.
• Comply with legal and regulatory obligations.
• Protect and enforce our legal rights.

We will not use your personal information for an unrelated purpose unless permitted by law or, where required, we obtain your consent.

6. Legal basis for processing

DecorMe processes personal information where there is a lawful basis under POPIA, including where:

• You have given consent.
• Processing is necessary to provide a service you have requested.
• Processing is necessary to perform a contract with you.
• Processing is necessary to comply with a legal obligation.
• Processing is necessary to protect a legitimate interest, where permitted by law.
• Another lawful basis under POPIA applies.

POPIA requires personal information to be processed lawfully, fairly and for a specific purpose, with appropriate limits on collection and retention.

7. Website forms and consent

When you submit information through a DecorMe website form, the information you provide may be used to respond to your enquiry, provide a quotation, arrange a service or otherwise deal with the request you have made.

Where marketing consent is required, marketing consent should be obtained separately. A marketing checkbox should not be pre-selected. For example:

☐ I would like to receive marketing communications from DecorMe about our products, services, promotions and special offers. I understand that I can unsubscribe at any time.

You should keep a record of marketing consent where consent is used as the lawful basis for sending electronic direct marketing.

8. Cookies and website analytics

Our website may use cookies and similar technologies to operate the website, understand how visitors use it and improve our marketing.

Essential cookies

Some cookies are necessary for the website to function properly. These may include cookies required for security, website functionality or features requested by visitors.

Google Analytics

DecorMe may use Google Analytics to understand how visitors use our website. This may provide information such as:

• Number of visitors.
• Pages visited.
• Approximate geographic information.
• Device and browser information.
• Website interactions.
• Traffic sources.

Meta Pixel

DecorMe may use Meta Pixel to measure the effectiveness of advertising, understand website interactions following advertising and measure relevant advertising audiences.

Cookie choices

Where consent is required for non-essential analytics or advertising technologies, these technologies should only be activated after the visitor has made the appropriate choice through the website's cookie-consent mechanism. Visitors should be given the ability to reject non-essential cookies and, where applicable, change or withdraw their cookie preferences.

9. Who we may share your information with

We may share personal information with trusted service providers where this is necessary to operate our business or provide our services. These may include:

• Website hosting providers, including Hostinger.
• Website and technical-support providers.
• EmailJS, the service that transmits our website form submissions to us.
• Google, as the provider of the email account to which form submissions are delivered.
• Google and Google Analytics.
• Meta Platforms and Meta advertising services.
• Payment or debit-order providers.
• Email or customer-management providers.
• Delivery and collection providers.
• Accountants, auditors, lawyers and professional advisers.
• Government authorities, regulators or law-enforcement agencies where required or permitted by law.

We do not sell your personal information to third parties. Where we use service providers to process personal information on our behalf, we take reasonable steps to ensure that appropriate confidentiality and security measures are in place.

10. Payment and debit-order information

Where payment or debit-order information is required, DecorMe may collect and process the information necessary to administer the payment arrangement.

Banking details and the electronic signature you provide on the subscription sign-up form are collected for one purpose only: to set up and administer the debit-order mandate authorising your subscription payments. They are used to instruct the debit order and are not used for any other purpose.

These details are submitted through our website form and delivered to DecorMe by email. They are not stored on the website itself, and the website does not keep a copy of your submission. Access to the mailbox that receives sign-up forms is limited to the people at DecorMe who need it to set up your subscription.

DecorMe does not collect or store card numbers, card security codes, online banking passwords or online banking login details. We will never ask you for these, and you should not send them to us.

Debit-order collection is carried out through DecorMe's bank and its debit-order provider, Direct Debit. Where a third-party provider processes your payment or banking information, that provider may process your information in accordance with its own terms and privacy policy.

11. Information processed outside South Africa

Some of our technology and service providers may process or store personal information outside South Africa. This may include providers used for:

• Website hosting.
• Analytics.
• Advertising.
• Email.
• Payment processing.
• Other cloud-based business services.

In particular, our website form submissions — including subscription sign-up forms — are transmitted using EmailJS and delivered to an email account provided by Google. Both are based in the United States, which means information submitted through our forms is processed outside South Africa.

Where personal information is transferred outside South Africa, DecorMe will take reasonable steps to ensure that the transfer is permitted under POPIA and that appropriate protection is in place. POPIA section 72 regulates transfers of personal information outside South Africa.

DecorMe itself operates only in South Africa, and its services are offered in the Western Cape. The only processing that takes place outside South Africa is by the technology providers listed above, namely EmailJS and Google, both of which are based in the United States.

12. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law. For example, information may be retained for as long as:

• You are an active DecorMe customer.
• We need it to provide a service or manage your account.
• We need it for accounting or legal purposes.
• It is necessary to resolve a dispute.
• We are required to retain it by law.
• We need evidence of marketing consent or an unsubscribe request.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it.

Debit-order mandates, including the identity number, banking details and electronic signature provided on the sign-up form, are kept for as long as the debit-order arrangement is in place, and afterwards for as long as we are required to retain proof of the mandate for accounting, banking or legal purposes. Mandate records are commonly kept for five years. Once that period has passed, they are securely deleted.

13. How we protect your information

DecorMe takes reasonable technical and organisational measures to protect personal information against:

• Loss.
• Damage.
• Unauthorised access.
• Unlawful processing.
• Unauthorised disclosure.
• Alteration.
• Destruction.

Security measures may include appropriate passwords, access controls, software updates, secure website connections, backups and limiting access to personal information to people who reasonably need it.

Information submitted through the subscription sign-up form is sent over an encrypted connection, and the mailbox that receives it is protected by two-factor authentication with access limited to the people who need it to set up your subscription.

No online system can be guaranteed to be completely secure. If DecorMe becomes aware of a security compromise involving personal information, we will take the steps required by POPIA and applicable law.

14. Your rights

Subject to applicable legal limitations, you have the right to:

• Ask whether DecorMe holds personal information about you.
• Request access to your personal information.
• Request correction or updating of inaccurate information.
• Request deletion where the law allows it.
• Object to certain processing.
• Withdraw consent where processing is based on consent.
• Object to direct marketing.
• Lodge a complaint with the Information Regulator.

To make a request, contact:

• Information Officer: Karmien Joubert
• Email: Karmien@decorme.co.za
• Telephone: 076 576 6578

We may need to verify your identity before processing certain requests.

15. Direct marketing

DecorMe may use email, telephone, SMS, WhatsApp or other electronic communication to communicate with customers or prospective customers about our products and services where permitted by POPIA. Where consent is required, DecorMe will obtain consent before sending electronic direct marketing. Every marketing communication should provide a simple way to opt out or unsubscribe.

You may withdraw your marketing consent at any time by:

• Using the unsubscribe link provided in an email.
• Replying "unsubscribe" where that option is available.
• Contacting DecorMe at karmien@decorme.co.za.

Withdrawing marketing consent does not prevent DecorMe from sending communications that are necessary to provide an existing service, process an order, administer a payment or comply with a legal obligation.

The Information Regulator's current guidance confirms that electronic direct marketing includes communications such as email, SMS and telephone marketing and that POPIA section 69 regulates unsolicited electronic direct marketing.

16. Children's information

DecorMe's website and services are primarily intended for adults and businesses. We do not knowingly collect personal information from children where POPIA requires the consent of a competent person. If you believe that a child has provided personal information to us unlawfully, please contact our Information Officer.

17. Third-party websites and services

Our website may contain links to third-party websites, social-media platforms, payment services or other external websites. DecorMe is not responsible for the privacy practices or security of third-party websites. You should review the relevant third party's privacy policy before providing personal information to them.

18. Automated decision-making

DecorMe does not currently make decisions about customers solely through automated processing that produce legal or similarly significant effects.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our business, website, technology, service providers or legal obligations change. The latest version will always be made available on our website and will include the date on which it was last updated. Where a significant change affects how we use personal information, we will provide an appropriate notice and obtain consent where required.

20. Contact us

If you have any questions about this Privacy Policy or how DecorMe handles personal information, please contact us.

• DecorMe
• Legal name: DecorMe Cape Town Pty Ltd
• Information Officer: Karmien Joubert
• Email: karmien@decorme.co.za
• Telephone: +27 76 576 6578
• Physical address: 21 Tanka Street, Graanendal, Durbanville

21. Complaints

If you believe that your personal information has been handled unlawfully, please contact DecorMe first so that we can investigate and attempt to resolve the matter.

You may also lodge a complaint with the Information Regulator of South Africa.

Information Regulator

• Website: https://inforegulator.org.za/
• Email: enquiries@inforegulator.org.za
• Telephone: 010 023 5200
• Postal address: P.O. Box 31533, Braamfontein, Johannesburg, 2017, South Africa