Legal

Privacy Policy

How Corner 23rd collects, uses and looks after your personal information, in line with South Africa's Protection of Personal Information Act, 2013 (POPIA).

Last updated: 24 September 2026

01Who we are

Corner 23rd is an embroidery and tailoring house in Johannesburg, South Africa, operated by registered business name (registration number registration number) ("Corner 23rd", "we", "us"). We are the responsible party for the personal information described in this policy.

Our Information Officer is name of Information Officer, who you can reach at privacy email address.

02What we collect

We only collect what we need for the thing you're doing on the site.

When you create an account or sign in

Your email address and a password (stored in scrambled, "hashed" form, so nobody can read it, us included).
If you sign in with Google: your name, email address and Google account ID, which Google shares with us with your permission.

When you leave a review

Your name, your star rating, what we made for you (if you tell us) and your review.

When you send photos to the gallery wall

Your photos, your name, your Instagram handle and what you're wearing (both optional), and your consent to show them.
Your email address, if you give it (optional). It's never shown on the site. We only use it to contact you about your photo.
No account is needed. Our system gives your browser an anonymous ID so you can upload, and photos stay private until we approve them.
Photos can contain personal information of their own, like your face and where they were taken. Please only send photos you're happy to share, and of people who've agreed.

When you send a commission enquiry

The Commission form opens your own email app with your enquiry filled in. We receive what you send: usually your name, email address, phone number, the kind of piece you want, a preferred fitting date and your message.

When you use the shop

What's in your basket, stored on your own device (see our Cookie Policy).
When online payment launches, the details needed to process and deliver your order. Card details will be handled by our payment provider, not stored by us.

Automatically

Like any website, the services that deliver our pages (listed under Who we share it with) receive your IP address and basic browser information when your browser loads them. We count visits with Cloudflare Web Analytics, which doesn't use cookies or identify you. We don't run advertising or tracking tools.

03Why we use it

To run your account and keep you signed in (needed to provide the service you asked for).
To show your review or photos on the site after we've approved them (with your consent, which you give when you submit).
To answer your enquiry, arrange fittings and make your piece (needed to take steps you asked for, and to perform our agreement with you).
To process orders once online payment is available (to perform our agreement with you).
To keep the site safe, for example to moderate submissions and prevent abuse (our legitimate interest in protecting our service and visitors).
To meet legal duties, such as keeping tax records.

We don't sell your personal information, and we don't use it for direct marketing unless you've asked us to.

05Information stored abroad

Some of our providers store or process information on servers outside South Africa. We only use providers that are bound by data protection laws or agreements that give protection substantially similar to POPIA, as section 72 of POPIA requires.

06How long we keep it

Accounts: until you ask us to delete yours.
Reviews and photos: while they're on the site, or until you ask us to remove them. Ones we don't approve are kept privately (never shown on the site) so we have a record, and deleted on request.
Enquiries and orders: as long as needed to deal with them, and for as long as tax and accounting law requires (usually five years).

07Keeping it safe

Information is sent over encrypted connections, passwords are hashed, and our database only lets each person reach what they're allowed to: you can see your own submissions, and only our approved administrators can review and manage them. No system is perfectly secure, but if a breach ever puts your information at risk, we'll tell you and the Information Regulator as POPIA requires.

08Your rights

Under POPIA you can:

ask whether we hold information about you, and for a copy of it;
ask us to correct it, or to delete it (including your account, reviews and photos);
object to how we use it, or withdraw consent you've given (this doesn't affect what we did before);
complain to the Information Regulator: inforegulator.org.za, complaints.IR@inforegulator.org.za.

To use any of these rights, email us at privacy email address. We may need to confirm it's you before we act, and we'll reply within a reasonable time.

09Children

Our site is meant for adults. If you're under 18, please only create an account or send us photos with a parent's or guardian's permission. If we learn we've collected a child's information without that, we'll delete it.

10Changes to this policy

We'll update this page if how we handle information changes, and change the date at the top. If a change is significant, we'll make it clear on the site.

11Contact us

Questions about your information: privacy email address
Post: physical / postal address