Legal
Privacy policy
What we collect when you use this site, why we collect it, and what you can ask us to do about it.
Last updated 12 October 2026
1. Who we are
Tuck Packaging™ is an online packaging retailer based in Pretoria, South Africa. This policy explains how we process personal information when you browse our website, place an order, contact us or subscribe to updates.
Questions and data-subject requests may be sent to hello@tuckpackaging.co.za.
2. Information we collect
We may collect your name, email address, telephone number, billing and delivery address, order contents, delivery instructions, correspondence, device and browser information, IP address, cookie identifiers and basic website usage information.
PayFast processes payment-card and banking details on its own secure service. We receive payment status, a transaction reference and limited reconciliation information, but we do not receive or store your complete card or banking credentials.
3. Why we process information
We process information to create and fulfil orders, collect payment, arrange delivery, prevent fraud, provide customer support, comply with tax and accounting duties, improve the website and, where you have opted in, send relevant updates.
Our processing is based on performing a contract with you, complying with legal obligations, your consent where required, and our legitimate interests in operating and securing the business.
4. Service providers and cross-border processing
We share only the information reasonably necessary with service providers such as Netlify for hosting and forms, PayFast for payments, Bob Go and courier partners for fulfilment, and professional advisers or authorities where legally required.
Some providers may process information outside South Africa. Where that occurs, we take reasonable steps to use providers and safeguards that offer an appropriate level of protection.
5. Retention and security
We retain order and transaction records for the periods required by law and keep enquiries only as long as reasonably necessary. We use access controls, encrypted connections, restricted server-side credentials and reasonable organisational safeguards. No online system can be guaranteed completely secure.
6. Your rights under POPIA
You may ask whether we hold your personal information and request access, correction or deletion where legally permitted. You may object to certain processing, withdraw consent and unsubscribe from marketing at any time. We may need to verify your identity before completing a request.
You may also lodge a complaint with the Information Regulator of South Africa if you believe your information has been processed unlawfully.
7. Cookies and changes
The site may use essential local storage or cookies for basket and security functionality, and optional analytics only when configured. We may update this policy as our services or legal obligations change. The current version and effective date will remain published here.