The fine print, kept honest
Privacy
Do Not Touch is built on restraint — and that includes how we treat your information. This page explains what we collect, why we collect it, and what we will never do with it. Effective 8 July 2026.
Who we are
Do Not Touch is a textured artwear brand based in Cape Town, South Africa. For anything privacy-related, email hello@donottouch.co.za. This notice is written to comply with the Protection of Personal Information Act (POPIA).
What we collect, and why
When you place a preorder — we collect your name, email address, phone number, delivery address, and the details of what you ordered. We need these to reserve your piece, arrange payment, deliver your order, and contact you about it. Without them we simply can't fulfil a preorder.
If you start the form but don't finish — the details you've typed so far may be saved so we can follow up once, in case something went wrong. If you tell us you're not interested, that's the end of it.
While you browse — we record anonymous usage signals (pages viewed, which designs get attention) tied to a random session identifier, not to your name. We use Google Analytics for aggregate statistics, which sets cookies in your browser. This helps us understand what works on the site; it does not identify you.
Where it lives
Order and contact information is stored in Google Firebase (Firestore), protected by access rules that prevent anyone other than us from reading it. Analytics data is processed by Google Analytics. When card payments go live they will be processed by Paystack — your card details will go directly to them and never touch our servers.
What we never do
We do not sell, rent, or trade your information. We do not send marketing you didn't ask for. We only share what's necessary with the services that make the brand run: our hosting and database provider (Google), our payment processor (Paystack, when live), and the courier who delivers your order.
How long we keep it
Order information is kept for as long as we need it to fulfil your order and meet our legal and tax obligations. Abandoned form drafts and analytics events are kept only as long as they are useful, then cleared.
Your rights
Under POPIA you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@donottouch.co.za and we'll sort it out — no forms, no runaround. You can also lodge a complaint with the Information Regulator of South Africa if you believe we've mishandled your information.
Changes
If this notice changes, the new version will live on this page with an updated effective date. We won't quietly move the goalposts.
