Privacy policy
Last updated: 26 August 2026
This Privacy Policy describes how Cape Rug, Home & Art (caperugco.co.za) ("the Site", "we", "us") collects, uses and discloses your personal information when you visit or make a purchase from the Site. We process personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
Contact
If you have questions, want more information about our privacy practices, or would like to make a complaint, contact us by email at capeart@thecapeartcompany.co.za or by post at: Cape Rug, Home & Art, 121 Rissik Street, Beaconvale, Cape Town, Western Cape, 7500, South Africa.
Personal information we collect
Device information
- Purpose: to load the Site accurately for you, and to analyse Site usage so we can improve it.
- Source: collected automatically when you access the Site, using cookies, log files, web beacons, tags or pixels.
- Shared with: Shopify.
- Collected: version of web browser, IP address, time zone, cookie information, the pages or products you view, search terms, and how you interact with the Site.
Order information
- Purpose: to fulfil our contract with you, process payment, arrange shipping, provide invoices and order confirmations, communicate with you, screen orders for fraud, and (where you've agreed) send you marketing.
- Source: collected from you.
- Shared with: Shopify (platform), Paygate (payment processing) and BobGo (shipping).
- Collected: name, billing address, shipping address, payment information, email address and phone number.
Customer support information
- Purpose: to provide you with customer support.
- Source: collected from you.
- Shared with: Shopify.
- Collected: name, billing address, shipping address, email address and phone number.
How we use your information
We use your personal information to provide our services: offering products for sale, processing payments, arranging shipping and fulfilment, communicating with you, screening for fraud, and (where you've agreed) sending you information about new products, services and offers.
Lawful basis (POPIA)
We process your personal information where necessary to fulfil our contract with you, comply with a legal obligation, pursue our legitimate business interests, or with your consent (for example, marketing). You can withdraw consent to marketing at any time.
Sharing your information
We share personal information with the service providers who help us run the store and fulfil orders: Shopify (platform), Paygate (payment processing) and BobGo (shipping). You can read how Shopify uses personal information at https://www.shopify.com/legal/privacy. We may also disclose information to comply with applicable laws, to respond to lawful requests, or to protect our rights.
Behavioural advertising
We use your personal information to provide targeted advertising or marketing communications we think you may be interested in. We use Google Analytics to understand how customers use the Site; read more at https://www.google.com/intl/en/policies/privacy/ and opt out at https://tools.google.com/dlpage/gaoptout. You can opt out of targeted advertising via Google (https://www.google.com/settings/ads/anonymous), Facebook (https://www.facebook.com/settings/?tab=ads) and Bing (https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads), or through the Digital Advertising Alliance at https://optout.aboutads.info/.
Cookies
We use cookies to run the store, remember your preferences and understand how the Site is used. Most browsers accept cookies automatically, but you can control them through your browser settings. Blocking cookies may affect parts of the Site. We use the following cookies to optimise your experience on our Site and to provide our services.
Cookies Necessary for the Functioning of the Store
| Name | Function | Duration |
|---|---|---|
| _ab | Used in connection with access to admin. | 2y |
| _secure_session_id | Used in connection with navigation through a storefront. | 24h |
| _shopify_country | Used in connection with checkout. | session |
| _shopify_m | Used for managing customer privacy settings. | 1y |
| _shopify_tm | Used for managing customer privacy settings. | 30min |
| _shopify_tw | Used for managing customer privacy settings. | 2w |
| _storefront_u | Used to facilitate updating customer account information. | 1min |
| _tracking_consent | Tracking preferences. | 1y |
| c | Used in connection with checkout. | 1y |
| cart | Used in connection with shopping cart. | 2w |
| cart_currency | Used in connection with shopping cart. | 2w |
| cart_sig | Used in connection with checkout. | 2w |
| cart_ts | Used in connection with checkout. | 2w |
| cart_ver | Used in connection with shopping cart. | 2w |
| checkout | Used in connection with checkout. | 4w |
| checkout_token | Used in connection with checkout. | 1y |
| dynamic_checkout_shown_on_cart | Used in connection with checkout. | 30min |
| hide_shopify_pay_for_checkout | Used in connection with checkout. | session |
| keep_alive | Used in connection with buyer localization. | 2w |
| master_device_id | Used in connection with merchant login. | 2y |
| previous_step | Used in connection with checkout. | 1y |
| remember_me | Used in connection with checkout. | 1y |
| secure_customer_sig | Used in connection with customer login. | 20y |
| shopify_pay | Used in connection with checkout. | 1y |
| shopify_pay_redirect | Used in connection with checkout. | 30 minutes, 3w or 1y depending on the value |
| storefront_digest | Used in connection with customer login. | 2y |
| tracked_start_checkout | Used in connection with checkout. | 1y |
| checkout_one_experiment | Used in connection with checkout. | session |
Reporting and Analytics
| Name | Function | Duration |
|---|---|---|
| _landing_page | Track landing pages. | 2w |
| _orig_referrer | Track landing pages. | 2w |
| _s | Shopify analytics. | 30min |
| _shopify_d | Shopify analytics. | session |
| _shopify_s | Shopify analytics. | 30min |
| _shopify_sa_p | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_sa_t | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_y | Shopify analytics. | 1y |
| _y | Shopify analytics. | 1y |
| _shopify_evids | Shopify analytics. | session |
| _shopify_ga | Shopify and Google Analytics. | session |
Do Not Track
Because there is no consistent industry standard for responding to "Do Not Track" signals, we do not change our data practices when we receive one.
Retention
We keep your personal information for as long as we need it to provide our services and meet our legal obligations, unless you ask us to erase it.
Your rights (POPIA)
You have the right to ask us to access, correct, update or delete your personal information, to object to processing, and to withdraw consent to marketing. To exercise any of these, contact us at capeart@thecapeartcompany.co.za.
Complaints
If you're not satisfied with our response to a complaint, you can lodge it with the Information Regulator (South Africa), the authority responsible for POPIA. Available from https://inforegulator.org.za.
Changes
We may update this Privacy Policy from time to time for operational, legal or regulatory reasons.