Privacy notice
Your details, handled properly.
Last updated: 8 October 2026
We draw you funny. We do not joke about your personal information. This page explains, in plain words, what we collect, why, who sees it, how long we keep it and what you can ask us to do. It follows South Africa’s Protection of Personal Information Act (POPIA).
The short version
- We only ask for what we need to draw, send and (if you want) post your portrait.
- We never sell your details, and we do not send marketing unless you ask for it.
- Only send photos you are allowed to send. If a photo shows a child, you must be their parent or legal guardian.
- We delete your photos about 3 months after your portrait is delivered. You can ask us to delete them sooner.
- You can ask to see, fix or delete your information at any time: hello@galleryofregrets.co.za.
1. Who we are
The Gallery of Regrets (“we”, “us”) is a small business on the Garden Route, Western Cape, South Africa. We make hand-drawn roast portraits, sold online and drawn live at markets and events. We are the “responsible party” for the information described here.
Contact us at hello@galleryofregrets.co.za or on +27 83 971 4751.
2. What we collect
Only what you give us when you order or contact us:
- Your contact details: your name and your WhatsApp number or email address.
- For the portrait: the photos you send, the names of the people or pets in them, the occasion, how mean you want us to be, and any notes you add.
- For a gift: who it is for, your message for the roast card, and whether it must stay a surprise.
- For posting: the name, phone number and address the parcel must go to.
- For your order: what you bought, the amount, your order number and proof that you paid.
- For live events: when you ask us to draw at an event, the date, town and rough number of guests.
We do not collect your card details. We do not use advertising trackers on this website.
3. Photos of other people, and children
Please only send photos that you are allowed to send. If you send a photo of someone else, you confirm that they are happy for us to draw them (it is, after all, a roast).
If a photo shows a child under 18, you may only send it if you are the child’s parent or legal guardian. By sending it, you consent on the child’s behalf to us using the photo to draw the portrait.
4. Why we use your information
- To draw and deliver your portrait and keep you updated about your order.
- To post items to you, or to the person you are gifting.
- To take payment and keep proper business and tax records.
- To answer your questions and sort out problems.
- To show your finished portrait on our website or social media, but only if you say yes. Saying no is completely fine.
We use your details for these reasons because you asked us for a portrait (we cannot make it without them), because the law requires us to keep certain records, or because you gave us your permission.
5. Who we share it with
We do not sell your information. We only share it with the people who help us deliver your order:
- WhatsApp (Meta): orders and photos usually reach us on WhatsApp. WhatsApp handles messages under its own privacy policy, and it may store them outside South Africa.
- Couriers and the post office: the name, phone number and address of whoever receives a parcel.
- Our website and email host: they store the website and our email. If we switch on an online order form or online payments in future, that service will handle those details for us, and we will update this notice.
- The law: if a court or authority legally requires us to share information.
Anyone who handles your information for us must keep it safe and use it only for the job we gave them.
6. How long we keep it
- Photos you send: deleted about 3 months after we deliver your portrait, unless you ask us to keep them or to delete them sooner.
- Delivery details (the address and phone number for a parcel): deleted about 3 months after delivery.
- Order records (your name, contact details, what you bought and what you paid): kept for 5 years, because South African tax law requires businesses to keep records.
- Messages and enquiries: kept for as long as it takes to help you, and then deleted or tidied away.
7. What this website stores on your device
While you fill in an order, the website remembers your choices in your browser (session storage) so that you do not lose them if you refresh the page. This stays on your device, is not sent anywhere, and disappears when you close the browser tab. We do not use advertising or tracking cookies.
8. Your rights
Under POPIA you can ask us to:
- tell you what information we hold about you and why;
- correct information that is wrong or out of date;
- delete your information (we will keep only what the law forces us to keep);
- stop using your information for something you have not agreed to, or take back a permission you gave.
Email hello@galleryofregrets.co.za and we will reply as quickly as we can. We may need to confirm that it is really you first.
If you are not happy with how we handled your information, you can complain to South Africa’s Information Regulator. We would like the chance to fix it first.
9. Keeping it safe
We take reasonable steps to protect your information: we limit who can see it, we use passwords on our accounts and devices, and we delete what we no longer need. No system is perfectly safe. If your information is ever caught up in a security problem that puts you at risk, we will tell you and the Information Regulator, as the law requires.
10. Changes to this notice
If we change how we handle your information, we will update this page and the date at the top.