Privacy Policy

How we collect, use and protect your information.

Effective date: 13 October 2026

1. Introduction

ODSY is an online jewellery store based in South Africa. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website, create an account or purchase products.

The business responsible for processing your information is sole proprietor, trading as ODSY, online only

2. Information We Collect

Account information: Your name, email address, authentication identifiers and account details.

Order information: Products purchased, quantities, transaction references, order history and order status.

Delivery information: Your delivery address, phone number and delivery instructions where provided.

Technical information: Information such as IP addresses, browser details, session information and website usage data, to the extent collected by our website and service providers.

Support information: Information you provide when contacting us through an available support channel.

3. How We Use Your Information

We process personal information to create and manage customer accounts, authenticate users, process purchases, arrange deliveries, provide customer support and maintain transaction records.

We may also process information to protect our website, prevent fraud, comply with legal obligations and improve our services where permitted by law.

Information required to create an account or fulfil an order must be provided for those services to work. Optional information will be identified where applicable.

4. Payments

ODSY uses Paystack to initiate and process online payments.

Payment-related information, including transaction references and payment statuses, may be retained in our order and payment records.

Payment details entered into Paystack's payment interface are handled through that payment service. ODSY does not intentionally collect or store complete payment card numbers in its application database.

5. Service Providers

ODSY uses Supabase for customer authentication and database services, Vercel for website hosting, Cloudinary for product image hosting and Paystack for payment processing.

We also use PAXI for order delivery. Information necessary to arrange delivery may be shared with the courier.

These providers may process information according to their roles, contractual arrangements and applicable privacy obligations.

6. Data Storage and Security

We aim to protect personal information using appropriate technical and organisational security measures, including authentication, access restrictions and secure communications.

No internet-based service can guarantee absolute security. We review our security arrangements as the website develops.

7. International Data Transfers

Some service providers may process or store information outside South Africa.

Where personal information is transferred internationally, ODSY will assess and apply the applicable requirements of South African data protection law, including section 72 of POPIA.

8. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining transaction records and meeting applicable legal obligations.

Information that is no longer required will be deleted, destroyed or de-identified where appropriate and legally permitted.

9. Your Privacy Rights

Subject to applicable legal requirements, you may request access to personal information held about you, ask for inaccurate information to be corrected, request deletion where permitted, or object to certain processing.

You may also lodge a complaint with South Africa's Information Regulator.

To exercise your rights, contact ODSY using the privacy contact details provided below. We may need to verify your identity before responding.

10. Cookies and Browser Storage

Our website uses authentication-related browser storage and may use cookies or similar technologies to support essential website functionality.

Further information about the technologies used, their purposes and available controls will be provided in our Cookie Policy once our production configuration has been reviewed.

11. Website Analytics

ODSY uses Vercel Web Analytics to understand how visitors interact with our website and to improve its performance and usability.

Analytics information may include pages visited, referral sources, approximate geographic location, device type, operating system, browser information and visit timestamps.

Vercel Web Analytics is designed to provide aggregated, anonymized statistics without using traditional tracking cookies. We do not use these analytics reports to identify individual customers.

Analytics information is processed by Vercel as our website analytics provider.

12. Changes to This Policy

We may update this Privacy Policy when our services, technology or legal obligations change.

The latest version will be published on this page with an updated effective date.

13. Contact Us

For privacy enquiries, contact info@odsy.co.za. You can also visit our Contact Us page for general contact information.