Privacy Policy

IRMADU Yorkies ("we", "us", "our") is a KUSA-registered Yorkshire Terrier breeder based in Centurion, Gauteng, South Africa. We operate the website yorkie.co.za and are committed to protecting your privacy in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we share it with, and the rights you have over your data.

We collect the following personal information when you voluntarily submit it through our website forms:

Contact form: your name, email address, phone number, and the message you submit.

Appointment booking: your name, email, phone, preferred date and time, and the purpose of your visit.

Waitlist sign-up: your name, email, phone, and details about the puppy you are interested in.

Testimonial submission: your name, email, location, the puppy you adopted, your rating, and your testimonial text.

Refer-a-friend: your name and email, and your friend's name, email, and phone number.

Visit tracking: we anonymously track page visits (page URL, timestamp, referrer, and user agent) to understand how our website is used. This data is not linked to your personal identity.

We do not collect sensitive personal information such as race, ethnicity, political opinions, religious beliefs, or biometric data.

We use your personal information for the following legitimate purposes:

To respond to your inquiries about our puppies, services, or the breed in general.

To schedule and confirm appointments to visit our kennel in Centurion.

To maintain a waitlist of families interested in our puppies and to contact you when a suitable puppy becomes available.

To publish testimonials you submit (with your consent and after admin approval).

To send you email notifications about new form submissions (internal admin use only).

To improve our website content and user experience based on anonymous visit analytics.

We do not send marketing emails or newsletters. We do not sell, rent, or trade your personal information to third parties.

We process your personal information on the following legal bases under POPIA:

Consent: you voluntarily provide your personal information when submitting a form on our website.

Contract: we process your information to take steps at your request before entering into a contract (e.g., arranging a puppy visit or reservation).

Legitimate interest: we process anonymous visit analytics to improve our website and services.

You may withdraw your consent at any time by contacting us using the details below.

We do not share your personal information with third parties except in the following limited circumstances:

Service providers: we use third-party services (NEON for database hosting, Vercel for web hosting, Google Tag Manager for analytics) that may process your data on our behalf. These providers are bound by confidentiality and data protection obligations.

Legal requirements: we may disclose your information if required to do so by law, court order, or government authority.

We never sell your personal information to any third party.

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected:

Contact inquiries: retained for up to 2 years after the last interaction, then permanently deleted.

Waitlist entries: retained until you are matched with a puppy or you request removal.

Appointment records: retained for 3 years for reference and follow-up.

Testimonials: retained as long as the testimonial is published on our website.

Visit analytics: retained for 12 months, then automatically deleted.

You may request early deletion of your personal data at any time by contacting us.

We take reasonable technical and organisational measures to protect your personal information:

All data is transmitted over HTTPS (TLS encryption).

Our database is hosted on NEON PostgreSQL with SSL-required connections.

Passwords for admin accounts are stored in the database (we recommend upgrading to hashed passwords in a future update).

Access to personal data is restricted to authorised admin users only.

All public forms are protected by honeypot fields and reCAPTCHA to prevent automated spam submissions.

Rate limiting is applied to all form submission endpoints to prevent abuse.

As a data subject under the Protection of Personal Information Act, you have the following rights:

The right to be notified when your personal information is collected.

The right to access the personal information we hold about you.

The right to correct or update inaccurate personal information.

The right to request the deletion of your personal information (right to be forgotten).

The right to object to the processing of your personal information.

The right to withdraw consent at any time.

The right to lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact us using the details provided in Section 10 below.

Our website uses cookies to improve your browsing experience. For detailed information about the cookies we use, please read our Cookie Policy, which forms part of this Privacy Policy.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

IRMADU Yorkies

Phone: 072 242 6982

Email: hello@yorkie.co.za

Address: 110 Trichardt Rd, Lyttelton Manor, Centurion, 0157

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.