Your information, and your child’s

Who we are

finmi is a trading name of Dalu Digital (Pty) Ltd, Reg No. 2026/834121/07, South Africa. We are the “responsible party” for your information under the Protection of Personal Information Act (POPIA).

Our Information Officer is Katlego Phokela. Contact: info@finmi.co.za.

Your child’s information

Every label carries a child’s name, so we treat children’s information with extra care:

• What: only what you type on the labels: the child’s name and, if you add them, a grade, class, school or subject.
• Consent: the parent or guardian placing the order (or someone with their permission) agrees at checkout. We keep a record of that agreement with the order.
• Use: only to print, check, pack and deliver your order, and to help if something is wrong with it.
• Never: used for marketing, sold, shared with advertisers, shown publicly, or used to contact a child.
• Who sees it: only the people who make your labels. Couriers get your name and address, not your child’s name.
• How long: we keep the names for 12 months after delivery so you can reorder the same labels easily. Then they are deleted automatically. Ask us and we’ll delete them sooner.

What we collect about you

• Your name, email, cellphone and WhatsApp number (if you choose WhatsApp updates).
• Your delivery address or pickup point and any delivery notes.
• What you ordered and paid. Card payments go through PayFast: we never see or store your card details.
• Your choices about order updates and news & offers, with the date and wording you agreed to.
• Messages you send us by email or WhatsApp.

Why we use it

• To make, deliver and support your order (the reason you gave it to us).
• To send order updates: always by email, and on WhatsApp only if you chose it.
• To send news, back-to-school reminders and offers, only if you ticked the box. Every message tells you how to stop.
• To keep financial records the law requires.

Who we share it with

Only the services we need to run the shop, and only what each one needs:

• PayFast: to take card and Instant EFT payments.
• The Courier Guy (and Pudo or Pargo if you choose them): your name, cellphone, email and delivery address, to deliver your parcel.
• Supabase: our secure order database.
• Resend: sends our emails. Meta (WhatsApp): sends WhatsApp messages if you chose them.

Some of these services store information outside South Africa (for example in the United Kingdom or United States). We only use providers that are bound by data-protection laws or agreements that protect your information at least as well as POPIA. We never sell your information.

How long we keep it

• Children’s names, grades, classes and subjects: 12 months after delivery, then deleted automatically.
• Order and payment records (without children’s names): 5 years, because tax law requires it.
• Your news & offers choice and consent records: for as long as we need to show what you agreed to.
• Things saved in your own browser (your bag and checkout details) stay on your device until you clear them.

Keeping it safe

The site uses encrypted connections, our order system is locked so only finmi can read orders, admin access is password protected, and payments are handled by PayFast.

Your rights

• Ask what information we hold about you or your child, and get a copy.
• Ask us to correct it or delete it.
• Stop marketing any time: tap “unsubscribe”, reply STOP on WhatsApp, or use Email & WhatsApp preferences.
• Complain to us first at info@finmi.co.za, or to the Information Regulator at inforeg.org.za.

Changes

If we change this policy we’ll update the date at the top, and tell you by email if the change is important.