Hale Collections Privacy Policy

Last updated 29 September 2026

This Privacy Policy explains how Hale Collections collects, uses, shares, stores and protects personal information when you visit our website, register interest in a collection, subscribe for updates or contact us. We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.

Please read this policy before submitting personal information. If you do not agree with it, do not submit personal information through the website. You may still browse pages that do not require personal information, subject to the limited technical processing described below.

1. Who we are

Hale Collections is operated by HALE DESIGN (PTY) LTD, registration number 2021/532817/07, trading as Hale. For the processing described in this policy, HALE DESIGN (PTY) LTD is the responsible party under POPIA.

2. What this policy covers

This policy applies to hale-collections.com, the Hale Collections interest-registration form, collection updates and related communications from Hale. If we later launch an e-commerce store, payment service, scannable-garment feature, digital certificate or ownership portal, we may provide additional terms or privacy notices before collecting information for those services.

3. Personal information we collect

Information you provide
When you register interest, subscribe or contact us, we may collect:

• your email address;
• your country or country of residence;
• your preferred jersey or collection option;
• your usual jersey size, if you choose to provide it;
• your indication of what you may be willing to pay, if requested;
• your marketing preference, together with the date and method used to record it; and
• the contents of messages or enquiries you send us.

Information processed automatically
Cloudflare may process limited website-request and security information needed to deliver and protect the site, such as IP address, browser and device information, operating system, requested URL, timestamps and network or security events. Mailchimp may process technical information needed to submit, confirm and protect the registration form. Google Analytics and the Meta Pixel (see section 6) each process browser and device information and page activity on this website — Google Analytics for audience and usage measurement, and the Meta Pixel for advertising measurement and optimisation.

We do not intend to collect identity numbers, payment-card information, health information, biometric information or other special personal information through the interest-registration form. Please do not submit this information in a free-text message unless it is genuinely necessary.

4. Why we use your information

We process personal information only where POPIA permits it. Depending on the circumstances, we may rely on your consent, take steps at your request, comply with a legal obligation, or pursue a legitimate interest that does not unjustifiably interfere with your privacy.

We may use your information to:

• record and measure interest in a proposed Hale collection;
• understand preferred products, sizes, countries and indicative price ranges;
• send collection or project updates when you have opted in;
• respond to enquiries and provide support;
• operate, test, secure and improve the website and registration process;
• prevent misuse, fraud and security incidents; and
• meet legal, regulatory, accounting and record-keeping obligations.

Registering interest is not a purchase, reservation, pre-order or guarantee that a product will be manufactured or available.

5. Registration and marketing choices

We use the information submitted in the registration form to record your interest and evaluate the proposed collection. Reading this policy and submitting the form acknowledges that processing; it does not by itself subscribe you to marketing.

We will send promotional or project-update emails only when you have made the relevant choice or where the law otherwise permits us to contact you. The marketing checkbox on the registration form is optional and is not pre-selected. You may withdraw consent or unsubscribe at any time by using the link in an email or contacting [email protected]. Withdrawal does not affect processing that was lawful before it was withdrawn.

The consent wording on the registration form is: “I agree to receive updates about this and similar Hale projects. View our Privacy Policy.”

6. Cookies and similar technologies

Cloudflare may use strictly necessary cookies or similar technologies to deliver and secure the site. Mailchimp may use essential anti-abuse, form-submission or confirmation technologies. These are used for site operation and security, not behavioural advertising.

This website also uses Google Analytics 4, a website-analytics tool provided by Google. It loads on every page and records page views and, when you complete the registration form, that a registration happened, together with standard browser and device information (such as approximate location derived from IP address, browser type, device type and referring page). We use this to understand how many people visit the site, where they come from and how the registration flow performs over time.

This website also uses the Meta Pixel, an advertising and measurement tool provided by Meta Platforms, Inc. (which operates Facebook and Instagram). It loads on every page and records page views and, when you complete the registration form, that a registration happened — together with standard browser and device information (such as IP address, browser type and referring page). Meta uses this to help us understand and measure the performance of our advertising and to build audiences for future ad campaigns. Meta may also match this activity against a Meta/Facebook account if you have one and are logged in on the same browser, subject to Meta's own privacy policy and your Meta ad settings.

You can limit this by using your browser's tracking-protection or cookie settings, an ad-blocker, the Google Analytics opt-out browser add-on, or by adjusting your ad preferences directly in your Meta account (Settings → Ads → Ad settings) if you have one. If we enable further non-essential analytics or tracking technologies beyond these, we will update this policy accordingly.

7. When we share information

We do not sell personal information. We may disclose personal information to service providers only where needed for the purposes described in this policy:

• Cloudflare provides website hosting, content delivery and security services;
• Intuit Mailchimp operates the registration form, stores registration and subscriber records, and sends opted-in collection emails;
• Google Workspace provides the [email protected] mailbox used for direct correspondence;
• Google Analytics receives website activity (section 6) for audience and usage measurement; and
• Meta Platforms, Inc. receives website activity via the Meta Pixel (section 6) for advertising measurement and optimisation.

The website source code is stored on GitHub. Registration records are not intended to be stored in the source-code repository. Our providers may process information only for agreed purposes and must apply appropriate confidentiality and security safeguards.

We may also disclose information where required by law, court order or a regulator, or where reasonably necessary to establish, exercise or defend legal rights, prevent harm, or investigate fraud or security incidents. If Hale is reorganised, sold or transferred, relevant information may be transferred subject to applicable law and appropriate safeguards.

8. International transfers

Cloudflare, Mailchimp, Google and Meta may store or process personal information outside South Africa. Where personal information is transferred across borders, we will take reasonable steps to comply with section 72 of POPIA, including by using recipients subject to adequate legal protection, binding agreements or another transfer mechanism permitted by law.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, or as required or authorised by law. Unless a longer period is justified:

• interest-registration records may be kept for up to 24 months after the relevant collection decision or your last meaningful interaction;
• marketing subscription records may be kept until you unsubscribe, withdraw consent or we determine that the information is no longer needed;
• a minimal suppression record may be retained after an unsubscribe so that we can honour your choice not to receive marketing;
• technical and security records are kept in line with our service-provider settings and only for as long as reasonably necessary for operation, security and investigation; and
• records required for legal, regulatory, tax, dispute or security purposes may be kept for the applicable required period.

When personal information is no longer needed, we will delete it, destroy it securely or de-identify it so that it can no longer reasonably be linked to you.

10. How we protect information

We use reasonable technical and organisational safeguards appropriate to the nature of the information and the risks involved. These may include access controls, secure hosting, encryption in transit, restricted administrator access, supplier controls, backups and security monitoring. No internet service is completely secure. We will investigate suspected compromises and notify affected people and the Information Regulator where POPIA requires it.

11. Your rights

Subject to POPIA and any lawful limitations, you may:

• ask whether we hold personal information about you;
• request access to your personal information;
• ask us to correct or update information that is inaccurate, incomplete, misleading or outdated;
• ask us to delete or destroy information that is unlawfully held or no longer authorised to be retained;
• object to certain processing on reasonable grounds where POPIA gives you that right;
• withdraw consent at any time;
• unsubscribe from direct marketing; and
• lodge a complaint with the Information Regulator.

Send requests to [email protected]. We may ask for information reasonably necessary to verify your identity and protect your information. We will respond within a reasonable period and explain any lawful reason for refusing or limiting a request.

12. Children

The registration service is intended for people aged 18 or older. We do not knowingly collect personal information from children through the form. If you believe a child has submitted personal information, contact us so that we can investigate and, where appropriate, delete it.

13. Third party links

The website may link to third-party websites or services. Their privacy practices are governed by their own notices. Hale is not responsible for how an independent third party processes personal information after you leave our website.

14. Changes to this policy

We may update this policy when our website, collections, suppliers or legal obligations change. The latest version will be posted on the website with a revised last-updated date. If a change materially affects how we use information already collected, we will take reasonable steps to notify affected people and obtain further consent where required.

15. Contact us

Responsible party: HALE DESIGN (PTY) LTD
Information Officer or privacy contact: Sheldon Stewart
Email: [email protected]
Website: https://hale-collections.com

16. Complaints to the Information Regulator

We encourage you to contact Hale first so that we can try to resolve your concern. You may also lodge a POPIA complaint with the Information Regulator of South Africa through its eServices Portal.

Complaints portal: https://eservices.inforegulator.org.za
General enquiries: [email protected]
Telephone: 010 023 5200
Website: https://inforegulator.org.za