KIDSROCK PRIVACY POLICY

Last updated: 17 September 2026

Kidsrock respects your privacy and is committed to protecting the personal information that you provide to us.

This Privacy Policy explains how Kidsrock collects, uses, stores, shares and protects personal information when you:

• Visit www.kidsrockgroup.co.za
• Purchase products from us
• Create or submit an online order
• Contact us by telephone, email or WhatsApp
• Visit our physical store
• Request a quotation
• Request a return, refund or exchange
• Subscribe to marketing communications
• Interact with our advertising or social-media channels

This Privacy Policy is intended to comply with applicable South African privacy legislation, including the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1. WHO WE ARE

The Kidsrock website is operated under the Kidsrock brand.

Trading name: Kidsrock
Registered legal entity: Brand Architecture Media Pty Ltd
Registration number:2013/117460/07

Physical address:

Kidsrock
Silvermall, Shop 33
Pretoria Road
Silverton
0184
South Africa

Shop telephone: +27 12 004 0952
Mobile & WhatsApp: +27 60 525 1679
Returns & Refunds: returns@kidsrockgroup.co.za
Website: www.kidsrockgroup.co.za

For purposes of POPIA, Kidsrock is the responsible party in relation to personal information processed for our business activities.

2. OUR PRIVACY COMMITMENT

Kidsrock aims to process personal information:

• Lawfully;
• Fairly;
• Transparently;
• For specific and legitimate purposes;
• Only to the extent reasonably necessary;
• Accurately where reasonably possible;
• Securely; and
• Only for as long as reasonably required.

We do not sell customer contact information to third parties.

3. WHAT IS PERSONAL INFORMATION?

Personal information is information that relates to an identifiable person or, where applicable under POPIA, an identifiable juristic person.

Depending on how you interact with Kidsrock, personal information may include:

• Name and surname;
• Telephone number;
• Mobile number;
• WhatsApp number;
• Email address;
• Billing address;
• Delivery address;
• Order information;
• Purchase history;
• Payment-related information;
• Communication history;
• Return and refund information;
• Product preferences;
• Customisation instructions;
• Information submitted through website forms;
• Device and browser information;
• IP address;
• Website usage information; and
• Marketing preferences.

We aim to collect only information reasonably necessary for the purpose for which it is required.

4. INFORMATION YOU PROVIDE TO US

You may provide personal information when you:

• Place an order;
• Request a quotation;
• Contact Kidsrock;
• Send us a WhatsApp message;
• Send us an email;
• Telephone our store;
• Request product information;
• Request a return, refund or exchange;
• Arrange delivery;
• Submit a complaint;
• Participate in a promotion;
• Subscribe to marketing; or
• Visit our physical store.

The information collected will depend on the service you request.

5. INFORMATION COLLECTED WHEN YOU PLACE AN ORDER

When you place an order, we may collect information such as:

• Full name;
• Email address;
• Telephone or mobile number;
• Billing address;
• Delivery address;
• Products ordered;
• Order value;
• Delivery instructions;
• Payment status;
• Transaction reference information; and
• Relevant communication regarding the order.

This information is used to process and fulfil your purchase.

6. PAYMENT INFORMATION

Payments may be processed through third-party payment providers.

Depending on the payment method selected, the payment provider may collect information such as:

• Card details;
• Bank information;
• Transaction information;
• Payment authentication information; and
• Billing details.

Kidsrock does not intend to store customers’ complete card numbers, PINs or online banking passwords on our own systems.

Payment providers process payment information according to their own privacy and security practices.

Customers should never send their bank PIN, online banking password or full card-security credentials to Kidsrock by email or WhatsApp.

7. INFORMATION COLLECTED AUTOMATICALLY

When you use our website, certain technical information may be collected automatically.

Depending on the technology enabled on our website, this may include:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Pages viewed;
• Time spent on pages;
• Referring website;
• Approximate location derived from IP information;
• Shopping-cart activity;
• Conversion information; and
• Cookie identifiers.

This information may be used to operate, secure, analyse and improve the Kidsrock website.

8. HOW WE USE PERSONAL INFORMATION

Kidsrock may process personal information for purposes including:

• Processing orders;
• Confirming payments;
• Manufacturing custom products;
• Preparing quotations;
• Arranging delivery;
• Communicating about orders;
• Providing customer support;
• Managing returns and exchanges;
• Processing refunds;
• Managing warranties and complaints;
• Preventing fraud;
• Maintaining accounting and transaction records;
• Improving our products and services;
• Analysing website performance;
• Improving website functionality;
• Responding to enquiries;
• Complying with legal and regulatory requirements;
• Protecting Kidsrock’s legitimate business interests; and
• Conducting lawful marketing activities.

We will not intentionally use personal information for purposes that are materially incompatible with the purpose for which it was collected unless permitted by law.

9. OUR BASIS FOR PROCESSING PERSONAL INFORMATION

Depending on the circumstances, Kidsrock may process personal information because:

• It is necessary to enter into or perform a transaction with you;
• You have consented to the processing;
• Processing is required by law;
• Processing protects your legitimate interests;
• Processing is necessary to pursue Kidsrock’s legitimate interests or those of a third party, subject to applicable law; or
• Another lawful basis recognised by POPIA applies.

Consent will be obtained where required.

10. WHATSAPP COMMUNICATION

Customers may contact Kidsrock through WhatsApp at:

+27 60 525 1679

When you communicate with us through WhatsApp, we may receive:

• Your mobile number;
• WhatsApp profile information made available to us;
• Messages;
• Photographs;
• Product enquiries;
• Order information; and
• Other information you choose to send.

This information will be used to respond to your enquiry or provide the requested service.

WhatsApp is operated by a third party, and customers should also review the privacy practices applicable to that service.

11. PHOTOGRAPHS AND VIDEOS

Customers may send Kidsrock photographs or videos for purposes such as:

• Reporting damaged products;
• Reporting defects;
• Confirming measurements;
• Requesting custom products;
• Providing artwork;
• Requesting assistance; or
• Showing installation or product issues.

We will use these materials for the purpose for which they were supplied and for related customer-service, evidentiary or operational purposes where reasonably necessary.

Kidsrock will not intentionally use identifiable customer photographs or images of individuals in advertising without appropriate permission.

12. CHILDREN’S PERSONAL INFORMATION

Kidsrock sells children’s products, but our online store is intended to be used by adults, parents, guardians and other persons legally capable of completing a purchase.

We do not intentionally require children to provide personal information in order to purchase products from our website.

Where a personalised product requires a child’s name or similar information, the adult placing the order is responsible for supplying that information appropriately.

Kidsrock will process children’s personal information only where permitted by law and where reasonably necessary for the applicable product or service.

Parents and guardians should avoid sending unnecessary personal information about children.

13. CUSTOM AND PERSONALISED PRODUCTS

Customers purchasing personalised products may provide information including:

• Names;
• Initials;
• Wording;
• Artwork;
• Photographs;
• Colour preferences;
• Dimensions; or
• Other customisation details.

This information is used to manufacture the requested product.

Please only provide information reasonably necessary for the custom order.

14. SERVICE PROVIDERS

Kidsrock may use third-party service providers to help operate our business.

These may include:

• Payment processors;
• Banks;
• Courier companies;
• Furniture transport providers;
• Website hosting companies;
• E-commerce platforms;
• Email providers;
• Cloud-storage providers;
• IT service providers;
• Accounting providers;
• Marketing platforms;
• Analytics providers; and
• Professional advisers.

These service providers may process personal information only to the extent reasonably necessary to provide their services, subject to applicable law and appropriate arrangements.

15. COURIERS AND DELIVERY PROVIDERS

To deliver an order, Kidsrock may provide a courier or transport provider with information such as:

• Customer name;
• Delivery address;
• Contact number;
• Order or delivery reference; and
• Delivery instructions.

This information is shared only to the extent reasonably necessary to arrange and complete delivery.

16. GOOGLE SERVICES

Kidsrock may use Google products or services in connection with our website, advertising and business operations.

Depending on the services enabled, these may include services such as:

• Google Merchant Center;
• Google Shopping;
• Google Ads;
• Google Analytics;
• Google Search;
• Google Business Profile; and
• Other Google services.

These services may process technical or usage information according to Google’s applicable privacy terms and settings.

Where customer data is used for advertising, remarketing or other personalised services, Kidsrock will seek to comply with applicable consent and privacy requirements.

17. SOCIAL MEDIA AND ADVERTISING PLATFORMS

Kidsrock may maintain accounts or advertise through platforms such as:

• Facebook;
• Instagram;
• TikTok;
• Google; and
• Other social-media or advertising services.

When you interact directly with these platforms, their own privacy policies also apply.

Kidsrock may receive aggregated advertising or performance information from these services.

Where advertising technologies process personal information, Kidsrock will use them in accordance with applicable privacy requirements.

18. COOKIES

Cookies are small files or technologies that websites may place on a user’s device.

Kidsrock may use cookies and similar technologies for purposes such as:

• Keeping the website functioning;
• Remembering shopping-cart contents;
• Maintaining website security;
• Remembering user preferences;
• Measuring website traffic;
• Understanding website usage;
• Measuring advertising performance; and
• Improving customer experience.

19. TYPES OF COOKIES

Depending on the website features enabled, cookies may include:

Essential cookies

These are required for important website functions such as:

• Shopping carts;
• Checkout;
• Security;
• Session management; and
• Website functionality.

Analytics cookies

These may help us understand:

• Number of visitors;
• Pages viewed;
• How visitors navigate the site; and
• Website performance.

Advertising cookies

Where enabled and lawfully used, these may help:

• Measure advertising;
• Understand conversions;
• Limit repeated advertising; and
• Provide more relevant advertising.

Preference cookies

These may remember settings or preferences selected by visitors.

20. COOKIE CHOICES

Where appropriate, website visitors may be given the opportunity to manage non-essential cookie preferences through a cookie banner or settings tool.

Customers can also control certain cookies through their browser settings.

Blocking some cookies may affect website functionality.

21. DIRECT MARKETING

Kidsrock may send marketing communications relating to Kidsrock products, promotions or services where permitted by law.

Electronic direct marketing may include:

• Email;
• SMS;
• WhatsApp;
• Electronic messaging; or
• Similar communication channels.

Where consent is required by POPIA, Kidsrock will seek the appropriate consent.

POPIA places specific restrictions on unsolicited electronic direct marketing.

22. EXISTING CUSTOMERS

Where permitted by POPIA, Kidsrock may communicate with existing customers about our own similar products or services where:

• Contact details were obtained in connection with a sale;
• The marketing relates to Kidsrock’s own similar goods or services; and
• The customer has been given an appropriate opportunity to object or opt out.

Every applicable electronic marketing communication should provide a reasonable method for the customer to stop receiving future marketing.

23. UNSUBSCRIBING FROM MARKETING

Customers may withdraw from marketing communications at any time using an unsubscribe or opt-out method provided in the communication.

Customers may also contact Kidsrock and request that marketing communications stop.

Stopping marketing messages will not prevent us from sending necessary transactional communications relating to:

• Existing orders;
• Payments;
• Deliveries;
• Returns;
• Refunds;
• Safety information; or
• Customer-service matters.

24. WE DO NOT SELL CUSTOMER CONTACT INFORMATION

Kidsrock does not sell customer names, telephone numbers, email addresses or other customer contact information to third parties for their independent marketing purposes.

Information may, however, be provided to service providers where reasonably necessary to operate the Kidsrock business or provide requested services.

Google’s Merchant Center guidance also prohibits merchants from selling users’ contact details and requires personal information to be collected securely.

25. DISCLOSURE REQUIRED BY LAW

Kidsrock may disclose personal information where reasonably necessary or legally required, including:

• In response to a valid legal process;
• To comply with legislation;
• To respond to lawful requests from regulators or authorities;
• To prevent or investigate fraud;
• To protect customers or the public;
• To enforce legal rights; or
• To obtain professional legal or accounting advice.

We will aim to disclose only information reasonably necessary for the applicable purpose.

26. BUSINESS TRANSFERS

If Kidsrock or the business operating Kidsrock is sold, merged, reorganised or transferred, personal information may form part of the business records transferred to the relevant successor.

Any such processing remains subject to applicable privacy law.

27. CROSS-BORDER PROCESSING

Some technology, cloud, analytics, payment, email or other service providers may operate systems or servers outside South Africa.

As a result, personal information may in some circumstances be processed outside South Africa.

Where this occurs, Kidsrock will seek to ensure that cross-border processing takes place in accordance with applicable POPIA requirements.

POPIA regulates the flow of personal information across South Africa’s borders.

28. HOW LONG WE KEEP INFORMATION

Kidsrock will not intentionally retain personal information longer than reasonably necessary for the purpose for which it was collected, unless:

• A longer period is required by law;
• The information is required for contractual purposes;
• It is required for accounting or tax records;
• It is reasonably required in connection with a dispute;
• The customer has consented to longer retention; or
• Another lawful reason applies.

Different categories of information may therefore have different retention periods.

Once information is no longer required, Kidsrock may securely delete, destroy or de-identify it as appropriate.

29. DATA ACCURACY

Kidsrock aims to keep customer information reasonably accurate and up to date.

Customers should inform us if important information changes, particularly:

• Delivery address;
• Email address;
• Telephone number; or
• Other information needed to complete an order.

30. SECURITY OF PERSONAL INFORMATION

Kidsrock takes reasonable technical and organisational measures intended to protect personal information against:

• Loss;
• Unauthorised access;
• Unauthorised disclosure;
• Misuse;
• Alteration;
• Destruction; and
• Other unlawful processing.

Measures may include appropriate access controls, password protection, secure website connections, reputable service providers and other safeguards appropriate to the information involved.

No internet-based system can, however, guarantee absolute security.

31. WEBSITE AND CHECKOUT SECURITY

Kidsrock aims to use secure website and checkout technologies when collecting customer information.

Customers should check that they are using the genuine Kidsrock website:

www.kidsrockgroup.co.za

Customers should not enter sensitive payment information on a website or payment page they reasonably believe to be fraudulent.

Google requires merchants collecting personal information to use secure checkout processes and SSL-protected pages for sensitive personal information.

32. SECURITY INCIDENTS

If Kidsrock becomes aware of a security compromise involving personal information, we will assess the matter and take reasonable steps required by applicable law.

Where POPIA requires notification to affected individuals or the Information Regulator, Kidsrock will take the appropriate steps.

33. YOUR POPIA RIGHTS

Subject to applicable law, you may have the right to:

• Know whether Kidsrock holds personal information about you;
• Request access to your personal information;
• Request correction of inaccurate information;
• Request deletion or destruction where legally appropriate;
• Object to certain processing;
• Withdraw consent where processing depends on consent;
• Object to direct marketing;
• Request information about the identity of third parties who have had access to your information where applicable; and
• Lodge a complaint with the Information Regulator.

Some requests may be subject to exceptions or record-retention requirements imposed by law.

34. REQUESTING ACCESS OR CORRECTION

To request access to, correction of or deletion of personal information, please contact:

Kidsrock

Email: returns@kidsrockgroup.co.za
Shop: +27 12 004 0952
Mobile & WhatsApp: +27 60 525 1679

Please clearly state that your request relates to privacy or personal information.

Kidsrock may reasonably request proof of identity before providing or changing personal information to protect customers against unauthorised access.

35. WITHDRAWING CONSENT

Where processing is based on consent, you may withdraw that consent subject to applicable law.

Withdrawal of consent does not necessarily require Kidsrock to delete information that we are legally entitled or required to retain.

It also does not affect processing lawfully carried out before the withdrawal.

36. INFORMATION ABOUT OTHER PEOPLE

If you provide Kidsrock with personal information relating to another person, for example:

• A delivery recipient;
• Family member;
• Person collecting an order; or
• Person receiving a gift

you should ensure that you are entitled to provide that information.

Please provide only information reasonably necessary for the transaction.

37. LINKS TO OTHER WEBSITES

The Kidsrock website may contain links to third-party websites or services.

Kidsrock does not control the privacy practices of every third party.

Customers should review the applicable third party’s privacy policy before providing personal information directly to that service.

38. CHANGES TO THIS PRIVACY POLICY

Kidsrock may update this Privacy Policy from time to time to reflect changes to:

• Our website;
• Business operations;
• Technology;
• Service providers;
• Advertising systems; or
• Applicable law.

The current version will be published on:

www.kidsrockgroup.co.za

The date at the top of the policy indicates when the policy was last updated.

39. CONTACT KIDSROCK ABOUT PRIVACY

If you have a question or concern regarding how Kidsrock handles personal information, please contact:

Kidsrock
Silvermall, Shop 33
Pretoria Road
Silverton
0184
South Africa

Shop: +27 12 004 0952
Mobile & WhatsApp: +27 60 525 1679
Email: returns@kidsrockgroup.co.za
Website: www.kidsrockgroup.co.za

Please use “Privacy Request” in the email subject line where applicable.

40. INFORMATION REGULATOR

If you believe that your personal information has been processed in contravention of POPIA, you may contact or lodge a complaint with the Information Regulator (South Africa).

Current Information Regulator contact information includes:

Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg
2191
South Africa

Telephone: 010 023 5200
Toll Free: 0800 017 160
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za

The Information Regulator also provides an online complaints service through its eServices portal.

41. APPLICABLE LAW

This Privacy Policy is governed by applicable laws of the Republic of South Africa, including the Protection of Personal Information Act 4 of 2013.

POPIA establishes minimum requirements for the lawful processing and protection of personal information, regulates electronic direct marketing and regulates cross-border transfers of personal information.

Nothing in this Privacy Policy is intended to limit any privacy right that cannot lawfully be excluded.