Privacy policy

Last update: March 2026

Heat & Stone ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This policy explains what information we collect, how we use it, and your rights as a data subject.

Who We Are

Heat & Stone is a partnership owned and operated by Tristan Mc Donald and Magdalena Mc Donald, trading as Heat & Stone, located at 89 Main Road, Green Point, Cape Town, 8051. For any privacy-related queries, you may contact us at hello@heatandstone.com.

What Personal Information We Collect

When you place an order or contact us, we may collect:

Your full name and contact details (email address, phone number)
Your delivery address
Payment information (processed securely by our payment provider — we do not store card details)
Order history and communication records
Information you voluntarily provide when contacting us

Why We Collect Your Information

We collect and process your personal information for the following lawful purposes:

To process and fulfil your order
To communicate with you about your order, including lead times and shipping updates
To handle queries, complaints, or warranty claims
To comply with our legal obligations
To send you marketing communications, where you have opted in (you may unsubscribe at any time)

Sharing of Information

We do not sell your personal information to third parties. We may share your information with:

Courier and logistics partners (name and delivery address only, for the purpose of delivering your order)
Our payment processing provider (for the purpose of processing your payment securely)
SARS or other regulatory bodies, where required by law

How Long We Keep Your Information

We retain your personal information for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Order records are typically retained for a period of five (5) years for accounting and legal compliance purposes.

Your Rights as a Data Subject

Under POPIA, you have the right to:

Request access to the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your information (subject to legal retention obligations)
Object to the processing of your information
Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us at hello@heatandstone.com. We will respond within a reasonable time.

Marketing communications

From time to time we may send you promotional emails about new products, offers, or updates. You can opt out of marketing emails at any time by clicking the unsubscribe link in any email we send you. Please note that even if you opt out of marketing communications, you will still receive transactional emails related to your orders, such as order confirmations and delivery notifications.

Cookies

Our website is hosted on Shopify, which automatically collects certain information when you visit our store. This includes your IP address, browser type, device information, and how you interact with our pages. This data is collected through cookies and similar tracking technologies and is used to enable core store functionality, analyse traffic, and improve your browsing experience. You may manage or disable cookies through your browser settings, though doing so may affect certain features of the store. By continuing to use our website, you consent to the use of cookies as described here.

Security

We take reasonable steps to protect your personal information from unauthorised access, loss, or misuse. All payments are processed through a secure, PCI-DSS compliant payment gateway.

Children

Our store is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with their personal information, please contact us at the details below and we will delete it promptly.

Updates to This Policy

We may update this policy from time to time. The most current version will always be available on our website. We encourage you to review this policy periodically. Continued use of our website following any changes indicates your acknowledgement of the updated policy.