Privacy policy

Privacy Policy — YOYO CROWN (Pty) Ltd

Effective Date: 18 September 2026

YOYO CROWN (Pty) Ltd (“YOYO CROWN”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how YOYO CROWN collects, uses, stores, processes and discloses personal information when you visit our website, browse our online store, create an account, purchase our products, communicate with us, or otherwise interact with our services.

This Privacy Policy is primarily intended to comply with applicable South African privacy and data-protection legislation, including the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”), and other applicable South African legislation.

By using our website or services, you acknowledge that you have had an opportunity to review this Privacy Policy.

Where applicable law provides you with rights or protections that differ from this Privacy Policy, the applicable law will prevail.


1. Who We Are

Legal entity: YOYO CROWN (Pty) Ltd
Brand: YOYO CROWN
Founder & Owner: Tadinashe Nathan Mupanduki
Country: Republic of South Africa

YOYO CROWN (Pty) Ltd is the legal entity responsible for the YOYO CROWN online store, products, customer transactions and processing of personal information associated with the YOYO CROWN business.

3Flavours is a separate registered entity and is not the legal operator or data controller of YOYO CROWN.

References to “YOYO CROWN”, “we”, “us” or “our” in this Privacy Policy refer to YOYO CROWN (Pty) Ltd unless expressly stated otherwise.

For purposes of POPIA, YOYO CROWN acts as the Responsible Party in respect of personal information for which it determines the purpose and means of processing.


2. Personal Information We Collect

Depending on how you interact with YOYO CROWN, we may collect and process the following categories of personal information:

Contact and identification information

This may include:

  • Full name;
  • Email address;
  • Telephone or mobile number;
  • Billing address;
  • Delivery address;
  • Postal address;
  • Other information necessary to identify or communicate with you.

Order and transaction information

This may include:

  • Products purchased;
  • Order history;
  • Order numbers;
  • Returns and refunds;
  • Delivery information;
  • Payment confirmations;
  • Transaction dates and amounts;
  • Discount codes and promotional information.

Payment information

Payments may be processed through third-party payment service providers.

Depending on the payment method used, we may receive information such as:

  • Payment status;
  • Transaction reference;
  • Payment confirmation;
  • Limited payment or card information.

YOYO CROWN does not intentionally store complete payment-card details such as your full card number, CVV or PIN where those details are processed directly by a third-party payment provider.

Payment providers may process personal information in accordance with their own privacy policies and applicable legal requirements.

Account information

Where you create an account, we may process:

  • Login credentials;
  • Account preferences;
  • Saved addresses;
  • Order history;
  • Other information associated with your customer account.

Communications

We may process information contained in:

  • Emails;
  • Customer-service enquiries;
  • Contact forms;
  • Social-media communications;
  • Return and refund requests;
  • Complaints;
  • Other communications with YOYO CROWN.

Technical and usage information

When you use our website, certain technical information may be collected automatically, including:

  • IP address;
  • Browser type;
  • Device type;
  • Operating system;
  • Approximate location derived from technical information;
  • Website pages visited;
  • Referral information;
  • Date and time of interactions;
  • Cookies and similar identifiers;
  • Website interaction and usage information.

We use this information primarily to operate, secure, analyse and improve our website and services.


3. How We Collect Personal Information

We may collect personal information through:

Information you provide directly

For example, when you:

  • Create an account;
  • Place an order;
  • Subscribe to marketing communications;
  • Contact us;
  • Request a return or refund;
  • Submit a complaint;
  • Participate in a promotion or competition.

Automatic collection

We may automatically collect certain technical and usage information through cookies, pixels, tags and similar technologies when you interact with our website.

Third-party service providers

We may receive or process information through service providers that assist us with:

  • Ecommerce and website hosting;
  • Payment processing;
  • Shipping and delivery;
  • Customer communications;
  • Analytics;
  • Advertising;
  • Fraud prevention;
  • Website security.

4. Why We Process Your Personal Information

YOYO CROWN processes personal information for legitimate and lawful business purposes.

These purposes may include:

Processing and fulfilling orders

We use personal information to:

  • Process orders;
  • Confirm purchases;
  • Process payments;
  • Arrange delivery;
  • Provide order updates;
  • Handle returns, exchanges and refunds;
  • Provide customer support.

Operating our website

We use information to:

  • Maintain our website;
  • Provide account functionality;
  • Remember preferences;
  • Improve website performance;
  • Diagnose technical problems;
  • Maintain security.

Customer service

We use personal information to:

  • Respond to enquiries;
  • Resolve complaints;
  • Assist with orders;
  • Process returns and refunds;
  • Communicate important information relating to purchases.

Marketing

Where permitted by applicable law, we may use personal information to:

  • Send promotional communications;
  • Inform customers about products and promotions;
  • Measure marketing performance;
  • Display relevant advertising;
  • Develop and improve our marketing activities.

You may unsubscribe from direct electronic marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Fraud and security

We may process information to:

  • Detect and prevent fraudulent transactions;
  • Protect our customers and business;
  • Investigate suspicious activity;
  • Protect our website and systems;
  • Maintain information security.

Legal and regulatory compliance

We may process or disclose information where reasonably necessary to:

  • Comply with applicable laws;
  • Respond to lawful requests;
  • Protect our legal rights;
  • Establish, exercise or defend legal claims;
  • Prevent fraud or unlawful activity.

5. Lawful Basis for Processing

POPIA requires responsible parties to process personal information lawfully and in a manner that is reasonable and does not infringe the privacy of the data subject.

Depending on the circumstances, YOYO CROWN may process personal information where:

  • You have provided consent;
  • Processing is necessary to perform a contract with you or take steps at your request before entering into a contract;
  • Processing is necessary to comply with a legal obligation;
  • Processing protects a legitimate interest or another lawful interest recognised under applicable law;
  • Processing is necessary to protect your legitimate interests or those of another person;
  • Another lawful justification under POPIA applies.

Where consent is relied upon, you may generally withdraw your consent, subject to applicable legal or contractual limitations.

Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.


6. Cookies and Similar Technologies

YOYO CROWN uses cookies and similar technologies to help operate and improve our website.

These technologies may be used for:

  • Essential website functionality;
  • Security;
  • Remembering preferences;
  • Analytics;
  • Measuring website performance;
  • Understanding customer behaviour;
  • Marketing and advertising.

Some cookies may be placed by third-party service providers.

Where required by applicable law, YOYO CROWN will request consent before using non-essential cookies.

You may also manage cookies through your browser or available cookie-preference controls. Disabling certain cookies may affect website functionality.


7. TikTok Advertising

YOYO CROWN may use TikTok advertising and measurement technologies, including the TikTok Pixel and TikTok Events API, to advertise our products, measure campaign performance and understand how visitors interact with our website.

Depending on the configuration of our advertising systems and applicable permissions, information transmitted to TikTok may include identifiers or information such as:

  • Email address;
  • Telephone number;
  • IP address;
  • Device or browser information;
  • Website events;
  • Purchase information;
  • Product interaction information;
  • Advertising identifiers;
  • Approximate location or other technical information.

Where appropriate, information may be hashed or otherwise processed before transmission.

The information may be used to:

  • Measure advertising effectiveness;
  • Attribute purchases or website actions to advertising campaigns;
  • Improve advertising campaigns;
  • Create or use relevant audiences;
  • Deliver advertisements that may be relevant to users;
  • Help TikTok and YOYO CROWN understand interactions with our advertising.

YOYO CROWN will use and disclose personal information for advertising purposes in accordance with applicable law and any required consent or permissions.

TikTok may independently process information according to its own privacy practices.

You can review TikTok's privacy information and available advertising controls through TikTok's official privacy resources.


8. Other Third-Party Service Providers

YOYO CROWN may use trusted third-party providers to operate its business.

These may include providers responsible for:

  • Ecommerce and website infrastructure;
  • Payment processing;
  • Delivery and logistics;
  • Email and communications;
  • Analytics;
  • Advertising;
  • Fraud prevention;
  • IT and cybersecurity;
  • Customer support.

These providers may process personal information on our behalf or independently where permitted by law.

We take reasonable steps to use service providers that provide appropriate safeguards for personal information.


9. Shopify

YOYO CROWN's online store is powered by Shopify.

Shopify provides ecommerce infrastructure and services that allow us to operate our online store, process orders and provide related functionality.

Shopify may process personal information in connection with its services, including information necessary to provide ecommerce functionality, security, analytics and other platform services.

Certain processing by Shopify may occur outside South Africa.

Shopify's processing is also governed by Shopify's own privacy documentation and applicable legal requirements.

For information about Shopify's privacy practices, please refer to Shopify's official privacy documentation.

Where a request concerns personal information processed by Shopify independently of YOYO CROWN, you may need to contact Shopify directly.


10. Payment Processing

YOYO CROWN uses third-party payment providers to process payments.

Payment providers may process information necessary to:

  • Authorise transactions;
  • Complete payments;
  • Prevent fraud;
  • Verify transactions;
  • Process refunds;
  • Comply with financial and legal requirements.

YOYO CROWN does not intentionally retain complete payment-card information where such information is processed directly by the applicable payment provider.

Your payment information may therefore be subject to the privacy policy and terms of the relevant payment provider.


11. Shipping and Delivery

To fulfil orders, YOYO CROWN may share information reasonably necessary for delivery with logistics and courier providers.

This may include:

  • Customer name;
  • Delivery address;
  • Telephone number;
  • Email address;
  • Order information;
  • Delivery instructions.

Such information is shared for the purpose of fulfilling and delivering your order.


12. When We Share Personal Information

We may disclose personal information where reasonably necessary and lawful to:

  • Service providers assisting us in operating YOYO CROWN;
  • Payment processors;
  • Courier and logistics providers;
  • Website and technology providers;
  • Analytics providers;
  • Advertising and marketing partners;
  • Professional advisers;
  • Law-enforcement or regulatory authorities where legally required;
  • Courts or other lawful authorities;
  • Parties involved in a lawful business transaction, restructuring, merger, acquisition or transfer of assets.

We do not sell your personal information as a commodity.

Where third parties process information on our behalf, we take reasonable steps to require appropriate confidentiality and security measures.


13. Direct Marketing

YOYO CROWN may communicate with customers regarding products, services, promotions and other marketing activities.

Electronic direct marketing will be conducted in accordance with applicable South African law, including applicable requirements under POPIA and ECTA.

Where consent is required, we will obtain it before sending the relevant communications.

You may opt out of marketing communications at any time.

Every applicable electronic marketing communication will provide an appropriate means of opting out.

Opting out of marketing does not prevent us from sending essential transactional communications, such as order confirmations, shipping updates, refund notifications or important service messages.


14. International Transfers

Some of our service providers may process personal information outside South Africa.

Where personal information is transferred outside the Republic of South Africa, YOYO CROWN will take reasonable steps to ensure that the transfer complies with section 72 of POPIA and other applicable legal requirements.

Depending on the circumstances, international transfers may occur where:

  • The recipient is subject to adequate protections;
  • You have consented to the transfer;
  • The transfer is necessary to perform a contract;
  • The transfer is necessary for another lawful purpose permitted under POPIA; or
  • Another applicable legal mechanism permits the transfer.

Because YOYO CROWN uses international technology, ecommerce, payment, analytics and advertising providers, your information may therefore be processed in countries outside South Africa.


15. Information Security

YOYO CROWN takes reasonable technical and organisational measures to protect personal information against:

  • Loss;
  • Damage;
  • Unauthorised access;
  • Unauthorised disclosure;
  • Unauthorised alteration;
  • Destruction;
  • Other unlawful processing.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You should also take reasonable precautions when protecting your account credentials and personal information.


16. Retention of Personal Information

YOYO CROWN retains personal information only for as long as reasonably necessary for the purposes for which it was collected or where retention is required or permitted by law.

Retention periods may depend on:

  • The nature of the information;
  • The purpose for which it was collected;
  • Whether you maintain an account;
  • Transaction and accounting requirements;
  • Legal and regulatory requirements;
  • Dispute-resolution requirements;
  • Fraud-prevention requirements.

When personal information is no longer required, YOYO CROWN will take reasonable steps to delete, destroy or de-identify it where appropriate and legally permissible.


17. Your Rights Under POPIA

Subject to applicable legal conditions and limitations, you may have rights including the right to:

  • Request access to personal information held about you;
  • Request correction or updating of inaccurate or outdated information;
  • Request deletion of personal information where legally appropriate;
  • Object to the processing of personal information in certain circumstances;
  • Object to processing for direct marketing purposes;
  • Withdraw consent where processing is based on consent;
  • Request information regarding the processing of your personal information;
  • Lodge a complaint concerning the processing of your personal information.

YOYO CROWN may need to verify your identity before processing certain requests.

Some requests may be subject to lawful limitations or may be refused where permitted by applicable legislation.


18. Requests to Access or Correct Your Information

To request access to, correction of or other action concerning your personal information, contact us using the details in Section 23.

Your request should contain sufficient information for us to identify you and understand the information or action being requested.

We may request reasonable proof of identity before responding to protect your information from unauthorised access.

Where required by law, YOYO CROWN will respond within the applicable statutory timeframe.


19. Complaints

If you believe that YOYO CROWN has processed your personal information unlawfully or has otherwise infringed your rights under POPIA, you may first contact us so that we can investigate and attempt to resolve the matter.

You may also lodge a complaint with the Information Regulator of South Africa where permitted by applicable law.

Information about the Information Regulator and its complaint procedures is available through the regulator's official website.


20. Children's Personal Information

Our website and services are not intentionally directed at children.

YOYO CROWN will not knowingly collect or process the personal information of a child where POPIA prohibits such processing unless an applicable legal exception or appropriate consent and authorisation applies.

If you believe that a child has provided personal information to us unlawfully, please contact us so that we can investigate and take appropriate action.


21. Third-Party Websites

Our website may contain links to websites, applications or services operated by third parties.

YOYO CROWN is not responsible for the privacy practices, content or security of third-party websites.

You should review the privacy policy of any third-party website before providing personal information.


22. Changes to This Privacy Policy

YOYO CROWN may update this Privacy Policy from time to time to reflect:

  • Changes to our business;
  • Changes to our website or services;
  • Changes to technology;
  • Changes to third-party service providers;
  • Changes to applicable legislation;
  • Changes to our privacy practices.

The Effective Date at the beginning of this Privacy Policy will indicate when the policy was last updated.

Where appropriate, we may provide additional notice of significant changes.


23. Contact Information

For privacy enquiries, requests, complaints or questions regarding the processing of your personal information, contact:

YOYO CROWN (Pty) Ltd
Founder & Owner: Tadinashe Nathan Mupanduki
Telephone: +27 67 739 7169
Email: Shop.3flavours@gmail.com
Address: 49 Cook Street, Vasco Estate, Cape Town, Western Cape, 7460, South Africa

Please include sufficient information in your enquiry for us to identify the relevant account, order or personal-information request.


24. Information Officer

YOYO CROWN (Pty) Ltd will maintain an Information Officer in accordance with applicable POPIA requirements.

Where required, contact details for the Information Officer will be made available through YOYO CROWN's website or upon request.


25. Separate Entity — 3Flavours

3Flavours is a separate registered entity from YOYO CROWN (Pty) Ltd.

Nothing in this Privacy Policy should be interpreted as stating that YOYO CROWN is a trading name, subsidiary, division or unregistered operation of 3Flavours.

Where YOYO CROWN lawfully engages 3Flavours or another independent service provider for a specific business service, any processing of personal information will be subject to the applicable contractual, privacy and legal requirements.

YOYO CROWN remains responsible for the personal information for which it determines the purposes and means of processing, as required by applicable law.


Important Legal Statement

This Privacy Policy is designed for YOYO CROWN (Pty) Ltd's operations in South Africa and is intended to reflect applicable requirements under POPIA and other relevant South African legislation.

This Privacy Policy does not create contractual rights beyond those provided by applicable law, nor does it remove or limit any mandatory rights available to data subjects or consumers.

Where applicable legislation provides a higher level of protection or a mandatory requirement that differs from this Privacy Policy, the applicable legislation will prevail.