POPIA

This notice explains how Jetline Corporate Print Solutions (Pty) Ltd, trading as MyMoments ("we"), processes personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA). It sits alongside our Privacy Policy and gives you the specific POPIA disclosures we are required to make.

WHO WE ARE

Responsible Party: Jetline Corporate Print Solutions (Pty) Ltd Trading as: MyMoments Information Officer: Jetline Corporate Print Solutions (Pty) Ltd, care of privacy@jetline.co.za

For any question about how we handle your personal information, contact the Information Officer at the address above.

INFORMATION WE PROCESS AND WHY

The personal information we process about you (your name, contact details, delivery address, order and payment history, uploaded design files, and website activity data) is collected for the following purposes:

- To fulfil the contract between you and us when you place an order (POPIA Section 11(1)(b)). - To comply with our legal obligations, including tax record-keeping (POPIA Section 11(1)(c)). - With your consent, where you have opted in to marketing communications (POPIA Section 11(1)(a)). - For our legitimate business interests, such as preventing fraud and improving our service (POPIA Section 11(1)(f)).

We do not process special personal information (such as race, health, religious belief, or biometric data) about our customers. We do not knowingly collect personal information from children under 18 without parental consent.

HOW WE COLLECT IT

We collect personal information directly from you when you: register an account, place an order, contact customer support, or subscribe to marketing. We also collect technical information (IP address, cookies, browser type) automatically when you visit our website.

WHO WE SHARE IT WITH

We share personal information only where necessary to run our business:

- PayFast, our payment processor, for card and EFT transaction processing. - Our production platforms (Printess for design files, and our internal factory system) to print and finish your order. - Our courier or the Jetline store you selected for delivery or collection. - Amazon SES / Resend, our email delivery service, for transactional and (where consented) marketing emails. - Neon and Vercel, our hosting and database providers, for storage and website delivery.

All of these operators are contractually required to protect your personal information to at least the same standard we do.

CROSS-BORDER TRANSFERS

Some of our operators (for example Vercel and our email delivery service) may store or process your personal information outside South Africa in jurisdictions such as the European Union or the United States. Those jurisdictions have data protection laws that are broadly similar to or stronger than POPIA, and we ensure that our contracts with these operators require adequate safeguards.

HOW LONG WE KEEP IT

- Order records: 5 years from the end of the tax year, in line with SARS record-keeping requirements. - Uploaded design files: until fulfilment plus a reasonable window for reprint requests, then deleted. - Marketing preferences: until you withdraw consent or close your account. - Website activity data: aggregated and anonymised after 12 months.

YOUR RIGHTS UNDER POPIA

You have the right to:

- Ask us what personal information we hold about you and how it is being processed. - Have inaccurate information corrected. - Have information deleted where we no longer need it and have no legal reason to keep it. - Object to processing based on legitimate interests or for direct marketing. - Withdraw your consent to marketing at any time. - Lodge a complaint with the Information Regulator of South Africa if you believe we have not handled your information properly.

To exercise any of these rights, email privacy@jetline.co.za. We will respond within 30 days.

INFORMATION REGULATOR CONTACT

Information Regulator (South Africa) JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001 Email: inforeg@justice.gov.za Website: https://inforegulator.org.za

SECURITY

We take appropriate technical and organisational measures to protect your personal information, including encrypted database storage (Neon Postgres), TLS for all traffic to and from our site, password hashing with bcrypt, and role-based access controls for our staff. In the event of a security breach affecting your personal information, we will notify you and the Information Regulator without undue delay as required by POPIA.

Last updated: 21 July 2026