Privacy Policy
Last updated: 12 August 2026
We collect what we need to get a comic to your door, and nothing else. We don’t sell your information.
This policy explains what we collect, why, who sees it, and what you can ask us to do about it. It’s written to comply with the Protection of Personal Information Act 4 of 2013 (POPIA).
It covers both of our sites: boringstudio.co.za and shop.boringstudio.co.za.
1. Who we are
Boring Studio is the responsible party for your personal information.
- Address: Strand, Cape Town, South Africa
- Email: info@boringstudio.co.za
2. What we collect
When you order: your name, email address, delivery address, phone number, order contents and order history.
When you pay: your payment is processed by our payment provider, Paystack. They handle your card details directly. We receive only a confirmation that payment succeeded and a reference. We never see or store your full card number.
When you contact us: whatever you put in your message.
When you browse: standard technical data such as browser type, approximate location, which pages you look at and where you arrived from. This is collected by our hosting and by Google Analytics. See section 8.
If you opt in: your email address, for stock updates.
3. Why we use it, and on what basis
| What for | Lawful basis under POPIA |
|---|---|
| Processing and delivering your order | Necessary to perform our contract with you |
| Order confirmations, dispatch and tracking notices | Necessary to perform our contract with you |
| Answering your questions | Our legitimate interest in helping customers |
| Tax and accounting records | Compliance with a legal obligation |
| Preventing fraud | Our legitimate interest in protecting the business |
| Understanding how the sites are used, through analytics | Our legitimate interest in running and improving the shop. You can opt out: see section 8 |
| Marketing emails about new stock | Your consent, which you can withdraw at any time |
We don’t use your information to make automated decisions about you.
4. Who we share it with
Only those who need it to complete your order, or to help us run the sites:
- Couriers and delivery partners (Pudo, PostNet, The Courier Guy), who receive your name, address and phone number so they can deliver and you can track.
- Our payment provider (Paystack), who processes the payment.
- Google, who provide Google Analytics and receive the browsing data described in section 8. They do not receive your name, email address or anything else that identifies you personally.
- Our hosting and store platform providers, who store the sites and their data.
- Our accountant, and SARS, where the law requires it.
We do not sell, rent or trade your personal information, and we don’t share it for anyone else’s marketing.
5. Where it goes
Some of our providers process data outside South Africa. Google Analytics in particular processes data on servers outside the country, including in the United States, under Google’s own data processing terms.
Where that happens, we only use providers that are subject to laws or binding agreements giving protection substantially similar to POPIA.
6. How long we keep it
- Order and invoice records: 5 years, as required by South African tax law.
- Marketing list: until you unsubscribe.
- Enquiries that don’t become orders: 3 months.
- Analytics data: 14 months, after which Google deletes it.
7. Keeping it safe
We use HTTPS across both sites, restrict access to order data to people who need it, and rely on established providers for payments and hosting. No system is perfectly secure, but if a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.
8. Cookies and analytics
We use two kinds of cookies.
Necessary cookies make the store work: remembering what’s in your cart, keeping you signed in, and basic security. The checkout can’t function without them.
Analytics cookies are set by Google Analytics 4 on both boringstudio.co.za and shop.boringstudio.co.za. They tell us things like which pages get read, which comics get looked at, and whether people arrived from a search or a link. We use that to decide what to stock and what to write. It’s counting, not profiling.
Google Analytics 4 does not log or store your IP address. It’s used briefly to work out roughly which country or city you’re in, then discarded.
Turning analytics off. You can block cookies in your browser, though parts of the checkout will stop working if you block all of them. To opt out of Google Analytics specifically and leave the store working, install Google’s official browser add-on at tools.google.com/dlpage/gaoptout.
9. Your rights
Under POPIA you may:
- ask what personal information we hold about you, and get a copy;
- ask us to correct or update anything that’s wrong;
- ask us to delete information we no longer have a lawful reason to keep;
- object to processing based on legitimate interest, including analytics;
- withdraw consent to marketing at any time, using the unsubscribe link or by
emailing us.
Email support@boringstudio.co.za and we’ll respond within 2 working days. We may need to confirm your identity first.
If you’re not satisfied, you can complain to the Information Regulator (South Africa) at inforegulator.org.za.
10. Children
This store isn’t aimed at children under 18, and we don’t knowingly collect their information. If you believe a child has given us personal information, email us and we’ll delete it.
11. Changes
We may update this policy. The date at the top shows when it last changed, and the current version always lives on this page.
12. Contact
Boring Studio
Email: support@boringstudio.co.za
+27 74 280 4863
Strand, Cape Town, South Africa