Privacy policy

Your details, kept safe.

What we collect when you shop with us, why, who we share it with and your rights under POPIA.

Only what we need

Your contact and delivery details to get your order to you, and nothing we do not use.

Never sold

We do not sell or rent your information. Card details never reach our site.

Your rights

Ask to see, correct or delete your information at any time.

Who we are

King Kong Candy is an online and in-store sweet shop based at 64 Blaauwberg Road, Table View, Cape Town, 7441. We are the "responsible party" for the personal information described here.

This policy explains what personal information we collect when you visit kingkongcandy.co.za, create an account, place an order or contact us, why we collect it, who we share it with and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

What we collect

  • Contact details: your name, email address and phone number.
  • Billing and delivery details: street address, suburb, city, province and postal code, or your chosen Pudo locker.
  • Order details: what you bought, prices, delivery method, order notes and order history.
  • Account details, if you create an account: your email address and a password, which is stored only in encrypted (hashed) form.
  • Payment confirmation: the payment method, amount and payment reference from our payment provider. We never see or store your full card details.
  • Technical information: your IP address, browser type and the pages you visit, recorded in our server logs for security and to keep the site running.
  • Messages you send us by email, phone or social media.

Why we use it

  • To process, pack and deliver your order, and to send you order and delivery updates.
  • To take payment and handle refunds, returns and queries.
  • To run your account, if you have one.
  • To keep the site secure, prevent fraud and fix problems.
  • To keep the accounting and tax records the law requires.
  • To send you news and specials, but only if you have agreed to receive them. You can opt out at any time.

We only use your information for these purposes, and only as much of it as we need.

Who we share it with

We do not sell or rent your personal information. We share only what each service needs to do its job:

  • Bob Pay, our payment provider, to process your payment securely.
  • Our delivery partners (Pudo, The Courier Guy and Bob Go), who receive your name, phone number and delivery address or locker to deliver your parcel.
  • The companies that host our website, email and security services (including Cloudflare, which protects the site), under agreements that require them to keep your information safe.
  • Authorities such as SARS or the police, where the law requires it.

Some of these services may store or process information outside South Africa. Where they do, we use providers that are bound by data protection laws or agreements offering protection similar to POPIA.

Cookies

We use a small number of essential cookies so the shop works: to remember what is in your cart, keep you logged in and protect the site from abuse. We do not use advertising cookies. You can clear or block cookies in your browser, but the cart and checkout will not work without them.

How long we keep it

We keep order and invoice records for at least five years, as South African tax law requires. Account details are kept while your account is open; you can ask us to close it. Server logs are kept for a short period for security. When information is no longer needed, we delete it or make it anonymous.

How we protect it

The whole site runs over an encrypted (HTTPS) connection. Passwords are stored in hashed form, access to our systems is limited to the people who need it, and payments are handled by our payment provider so card details never reach our servers. If a security breach affects your personal information, we will tell you and the Information Regulator as POPIA requires.

Your rights

Under POPIA you may:

  • Ask whether we hold personal information about you and request a copy of it.
  • Ask us to correct or update information that is wrong or out of date.
  • Ask us to delete your information, where we are not required by law to keep it.
  • Object to us using your information, including for direct marketing.
  • Lodge a complaint with the Information Regulator (South Africa): inforeg.org.za, [email protected].

To make a request, contact us using the details below. We may ask you to confirm your identity first.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page. Last updated: 26 September 2026.