PRIVACY
POLICY.

Uncles Craft (Pty) Ltd ("Uncles", "we", "us", or "our") is a South African company registered and operating from Cape Town. Our registered address is Beach Road, Cape Town, South Africa. We operate an online store and brand platform accessible at uncles.co.za. This Privacy Policy applies to all personal information collected through our website, store, and related services. For any privacy-related queries, you can reach us at admin@uncles.co.za.

We may collect the following categories of personal information: • Identity information: full name, username or similar identifier. • Contact information: email address, physical delivery address, telephone number. • Financial information: payment card details (processed securely via our payment provider — we do not store card details on our servers). • Transaction information: details of purchases made through our store, including products ordered, order values, and order history. • Technical information: IP address, browser type and version, time zone, browser plug-in types, operating system and platform. • Usage data: information about how you use our website and services. • Communications: any correspondence you send to us, including support queries and enquiries.

We collect personal information directly from you when you: • Create an account or register on our platform. • Place an order or make a purchase through our store. • Subscribe to our newsletter or marketing communications. • Contact us directly via email or through any contact form. • Interact with our website (via cookies and similar tracking technologies). We may also receive information about you from third-party service providers such as payment processors, analytics providers, and delivery partners, where such sharing is necessary to provide you with our services.

We use the personal information we collect for the following purposes: • To process and fulfil your orders, including delivery and payment processing. • To manage your account and provide customer support. • To send you transactional communications (order confirmations, shipping updates). • To send you marketing and promotional communications where you have opted in or where we have a legitimate interest to do so. • To improve our website, products, and services. • To comply with legal and regulatory obligations under South African law, including POPIA. • To prevent fraud and ensure the security of our platform. We will only use your personal information for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.

We do not sell your personal information to third parties. We may share your personal information with: • Service providers: third-party companies that assist us in operating our business, such as payment processors, courier and logistics partners, email service providers, and website hosting providers. These parties are contractually obligated to keep your information confidential and to use it only for the purposes for which it was disclosed. • Legal and regulatory authorities: where required by law, court order, or governmental authority. • Business transfers: in the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred as part of that transaction. We will notify you of any such change. We require all third parties to respect the security of your personal information and to treat it in accordance with applicable data protection law.

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include: • Secure Socket Layer (SSL) encryption for data transmitted via our website. • Restricted access to personal information on a need-to-know basis. • Regular review of our information collection, storage, and processing practices. Despite our efforts, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a security breach that is likely to result in harm to you, we will notify you as required by applicable law.

Under the Protection of Personal Information Act, 2013 (POPIA), you have the following rights in relation to your personal information: • The right to be notified that your personal information is being collected. • The right to access the personal information we hold about you. • The right to request correction of any inaccurate or outdated personal information. • The right to request deletion of your personal information, subject to certain legal exceptions. • The right to object to the processing of your personal information. • The right to lodge a complaint with the Information Regulator of South Africa. To exercise any of these rights, please contact us at admin@uncles.co.za. We will respond to your request within a reasonable timeframe and in accordance with applicable law. You may also contact the Information Regulator of South Africa at inforeg@justice.gov.za.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us: Uncles Craft (Pty) Ltd Beach Road, Cape Town, South Africa Email: admin@uncles.co.za We take all privacy queries seriously and will endeavour to respond promptly and helpfully.

For the purposes of this Privacy Policy: "Personal information" means information relating to an identifiable, living, natural person or an existing juristic person, as defined in POPIA. "Processing" means any operation or set of operations concerning personal information, including collection, receipt, recording, organisation, storage, updating or modification, retrieval, alteration, consultation, use, dissemination, distribution, merging, linking, blocking, degradation, erasure, or destruction. "POPIA" means the Protection of Personal Information Act 4 of 2013 (South Africa). "Responsible party" means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information. "Data subject" means the natural or juristic person to whom personal information relates.