JIGGLZ

Privacy Policy

Last updated: 1 November 2026 · Version 1.0

This Privacy Policy explains what personal data we collect through the Site, why we collect it, how we use it, and what rights you have. It should be read together with our Terms of Use. It applies to the Site only. It does not apply to third-party services linked from the Site, which are governed by their own terms and privacy policies.

1. Who we are

The Site at jigglz.co.za is owned and operated by Jigglez Jello Art (Pty) Ltd, a private company incorporated in the Republic of South Africa:

• Registered name: JIGGLEZ JELLO ART (PTY) LTD
• Registration number: 2026 / 840265 / 07
• Registration date: 21 October 2026
• Registered address: 39 Maxie Street, Port Owen, Velddrif, Western Cape, 7365, South Africa
• General contact: orders@jigglz.co.za
• Compliance contact: legal@jigglz.co.za

"Jigglz" is the brand under which Jigglez Jello Art (Pty) Ltd markets its jello cakes, jello art and dessert products. References to "we", "us" and "our" in this Policy are to Jigglez Jello Art (Pty) Ltd.

We are the responsible party (data controller) of the personal data described in this Policy, in terms of the applicable Data Protection Laws.

Our designated company officer responsible for data protection and any matter arising from this Policy is Lèlanie Pool, contactable at legal@jigglz.co.za.

2. Definitions

In this Policy, unless the context requires otherwise:

• "Site" means the website at jigglz.co.za, including all pages, subdomains, content and functionality.
• "we", "us", "our" means Jigglez Jello Art (Pty) Ltd, as identified in Section 1.
• "you", "your" means the individual whose personal data we process.
• "Data Protection Laws" means, collectively and as may be applicable:
  • the Protection of Personal Information Act 4 of 2013 ("POPIA") and any regulations, codes of conduct or notices made under it;
  • where the processing is subject to it, the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR"), together with any national implementing legislation of the EU or EEA member states, and any equivalent legislation in the United Kingdom or elsewhere that applies to the processing; and
  • any other applicable data protection, privacy or equivalent legislation in force in any relevant jurisdiction from time to time.
• "personal data" means any information relating to an identified or identifiable natural person, as that term is defined in the applicable Data Protection Laws.
• "processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion, as that term is defined in the applicable Data Protection Laws.
• "Information Regulator" means the Information Regulator of South Africa, established under POPIA.

3. What we collect

We collect only what we need, and we process it in accordance with the principles set out in the applicable Data Protection Laws. The categories of personal data we may collect are:

3.1 Information you provide to us

• Contact form: your name, email address, cell number, province and the content of your message ("How can we help?"). The message may include details of an event, a design brief, or any dietary or allergen requirements you choose to share.
• Email, phone or WhatsApp: the content of your messages and your contact details.
• Orders and projects: the information necessary to process your enquiry, quotation or order, including delivery address, event date, design specifications, and any instructions you provide.
• Newsletter or special offers: your email address and any preferences you provide.

3.2 Information collected automatically

• Technical data: your IP address and basic information about your browser and device, processed by our hosting provider. Request logs are kept for a limited time for security and troubleshooting.
• Error reports: technical error data, including the error, the page on which it occurred, your browser and device, and a brief history of recent actions on the Site.

This Site has no accounts, no payments and no prizes, and is not intended for children. Please do not send sensitive personal information (such as medical details or identity numbers) in a message. Where the applicable Data Protection Laws impose additional conditions on the processing of special categories of personal data, we do not intend to process such data through the Site.

4. How we use your data and our lawful bases

We process your personal data only where we have a lawful basis to do so, as may be applicable in terms of the Data Protection Laws. The purposes and lawful bases are set out below.

Where we rely on legitimate interests, we have carried out a balancing assessment and are satisfied that our interests do not override your rights and freedoms. You may object to processing based on legitimate interests at any time — see Section 9 below.

5. Newsletter and marketing

5.1 What we send

If you subscribe to our newsletter or opt in to receive special offers, we will use your email address to send you marketing communications about our Products, Services, seasonal offerings and any promotions we may run from time to time.

5.2 How we obtain your consent

We will only send you marketing communications where:

• you have given us your consent, by submitting your email address through the subscription form on the Site, or by asking us to add you; or
• we are otherwise permitted to do so under the applicable Data Protection Laws.

5.3 How to cancel your subscription

You may unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us at legal@jigglz.co.za. We will action your request promptly, and in any event within 30 days. Once processed, you will receive no further marketing communications from us unless you subscribe again.

5.4 Withdrawal of consent

Where we rely on your consent to send you marketing communications, you may withdraw that consent at any time, as provided for in the applicable Data Protection Laws. Withdrawal does not affect the lawfulness of any processing carried out before you withdrew, and does not affect any other lawful basis on which we may rely.

5.5 Suppression record

When you unsubscribe, we may retain a minimal record of your email address and your unsubscribe request, for the sole purpose of ensuring that we do not contact you again. This record is not used for any other purpose, and is not shared with third parties except as necessary to operate our email systems.

5.6 Transactional communications

If you have an active enquiry or order with us, we may send you transactional or service communications relating to that enquiry or order (for example, order confirmations, collection or delivery notifications, or responses to your questions). These are not marketing communications and are not affected by your marketing preferences.

6. Cookies and similar technologies

6.1 What the Site currently uses

The Jigglz Site currently does not set any cookies for analytics, advertising or cross-site tracking. The only storage the Site may use is the small amount of local browser storage required for the contact form to function correctly during a single visit, and this is cleared automatically when you close your browser.

6.2 What we do not do

We do not use advertising cookies, cross-site tracking pixels, or third-party marketing tags. We do not track you across other websites.

6.3 If this changes

If we add analytics, advertising or other non-essential cookies in future, we will update this Policy, provide clear information about what is being set and why, and — where required by the applicable Data Protection Laws — obtain your consent before any such cookie is placed. You will always have the option to refuse non-essential cookies without losing access to the Site.

7. Who processes data for us

These service providers process data on our behalf and follow our instructions:

• Afrihost (Pty) Ltd: web hosting and email infrastructure, based in South Africa.
• Formspree: secure processing of contact form submissions, based in the United States. Formspree receives the content of the form (name, email, cell, province and message) and forwards it to our email inbox.
• Our email provider: the mailbox where your enquiry arrives.
• Any further service providers we engage from time to time to help us operate the Site or serve you, provided they are bound by appropriate confidentiality and data protection obligations.

Each of these providers is bound by a data processing agreement (or equivalent terms) that requires them to process personal data only on our instructions, to implement appropriate security measures, and to comply with the applicable Data Protection Laws.

We do not sell or rent personal data. Third-party links on the Site, including links to WhatsApp, Instagram or Facebook, are provided for convenience only. We do not control, endorse, or assume responsibility for the content, policies or practices of any third-party website or service, and your use of any such service is governed by its own terms and privacy policy. See Clause 18 of our Terms of Use.

8. International transfers

Some of our service providers may process data outside South Africa, including in the United States and the European Union. Where we transfer personal data across borders, we take steps to ensure that appropriate safeguards are in place, as required by the applicable Data Protection Laws. These safeguards may include standard contractual clauses, adequacy determinations, or equivalent mechanisms recognised under POPIA and, where applicable, the GDPR.

9. Your rights

In terms of the applicable Data Protection Laws, and as may be applicable to you, you have the following rights in respect of your personal data:

• Right of access: you may request confirmation of whether we process your personal data, and a copy of the data we hold about you.
• Right to rectification: you may ask us to correct inaccurate or incomplete data.
• Right to erasure: you may ask us to delete your personal data, subject to any legal retention obligations.
• Right to restrict processing: you may ask us to limit how we use your data.
• Right to object: you may object to processing based on legitimate interests, or to direct marketing at any time.
• Right to data portability: where processing is based on consent or a contract and is carried out by automated means, you may ask us to provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time.
• Right not to be subject to automated decision-making: see Section 12 below.
• Right to lodge a complaint: you may lodge a complaint with the Information Regulator, or another relevant supervisory authority, as set out in Section 15 below.

To exercise any of these rights, contact us at legal@jigglz.co.za. We will respond within the period prescribed by the applicable Data Protection Laws, and in any event within one month. If your request is complex or you have made multiple requests, we may extend this period by a further two months and will inform you if we do.

We may need to verify your identity before actioning a request. We will not charge a fee for handling a request, unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act, as permitted by the applicable Data Protection Laws.

10. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required or permitted by the applicable Data Protection Laws.

11. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or destruction, in accordance with the requirements of the applicable Data Protection Laws. These measures include encryption in transit (HTTPS), access controls, and the use of reputable service providers bound by data processing agreements.

No method of transmission over the internet, and no method of electronic storage, is completely secure. We cannot guarantee absolute security, but we will notify you and the Information Regulator without undue delay where we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, as required by the applicable Data Protection Laws.

12. Automated decision-making and profiling

We do not use your personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you, and we do not engage in profiling for marketing purposes.

13. Children's privacy

The Site is not intended for children, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe that a child has provided us with personal data, please contact us at legal@jigglz.co.za and we will take reasonable steps to delete that data.

Where the applicable Data Protection Laws set a minimum age for consent to data processing (for example, 16 in some EU member states, or 13 in others), we will comply with the applicable minimum age in your jurisdiction.

14. Changes to this Policy

We may update this Policy as the Site and our Products evolve. The date at the top of this page indicates the current version. Where changes are material, we will take reasonable steps to bring them to your attention. Your continued use of the Site after any modification constitutes acceptance of the updated Policy.

15. Complaints and contact

If you are unhappy with how we have handled your personal data, please contact us first at legal@jigglz.co.za so that we can try to resolve the matter. Our designated company officer for data protection is Lèlanie Pool, contactable at the same address.

You also have the right to lodge a complaint with the relevant supervisory authority in terms of the applicable Data Protection Laws, including:

• the Information Regulator of South Africa, at inforegulator.org.za; or
• where the GDPR applies, the supervisory authority in your country of residence.