Home Gallery About Contact My Wishlist Sign In
Legal

Privacy Policy

Last updated: 18 July 2026

This Privacy Policy explains how KETI CORPORATION collects, uses, discloses, and protects personal information in connection with keti.co.za (the "Website"), in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Who We Are

KETI CORPORATION (registration number 2025/772077/07), trading as Keti, is the "Responsible Party" under POPIA for the personal information described in this policy. We operate keti.co.za and are based in the Republic of South Africa.

2. Personal Information We Collect

We collect the following categories of personal information:

  • Contact form submissions. When you use the contact form on our Contact page, we collect the name, email address, and message you provide.
  • Account information. If you create an account to use the wishlist feature, we collect your first name, last name (optional), email address, and password. Passwords are handled and stored by our authentication provider (Amazon Cognito) and are not visible to us in plain text.
  • Wishlist data. If you save items to your wishlist while signed in, we store which items you saved and when.

We do not use tracking cookies, analytics scripts, or advertising pixels on the Website, and we do not currently collect server access logs or IP addresses for tracking purposes. See the "Cookies and Tracking" section below for more detail.

3. How We Collect Your Information

We collect personal information directly from you: when you submit the contact form, when you register for an account, and when you add or remove items from your wishlist. We do not collect personal information about you from third parties.

4. Why We Process Your Information

We process your personal information for the following purposes:

  • To respond to enquiries submitted through our contact form. Submissions are sent by email, via Amazon Web Services' Simple Email Service (AWS SES), directly to our team's inbox — this is an outbound-only email send, and your message is not stored in a separate database beyond this email transmission.
  • To create and manage your account, authenticate you when you sign in, and let you save and view your wishlist across devices.
  • To maintain the security and proper functioning of the Website.

5. Legal Basis for Processing

Under POPIA, we process your personal information on the following lawful grounds:

  • Consent — when you voluntarily submit the contact form or register for an account;
  • Performance of a contract — to provide account and wishlist functionality you have requested;
  • Legitimate interests — to respond to enquiries and keep the Website secure, in a manner that does not unreasonably intrude on your privacy.

6. Who We Share Your Information With

We do not sell or rent your personal information. We share personal information only with the following categories of third-party service providers (operators, under POPIA), who process it on our behalf and solely to provide the Website's functionality:

  • Amazon Web Services (AWS) — for website hosting and content delivery (S3, CloudFront), contact form email delivery (SES), account authentication (Cognito), and wishlist storage (DynamoDB).

We may also disclose personal information if required to do so by law, or to protect our rights, property, or safety, or that of our users or the public.

7. Cross-Border Transfer of Information

Our primary infrastructure runs on AWS's Africa (Cape Town) region, based in South Africa. Some supporting infrastructure (such as the certificate used to secure the Website and AWS's global content delivery network) may involve processing outside South Africa as a standard part of how secure websites and content delivery networks operate, though this does not involve storage of your personal information outside South Africa. Where personal information is processed outside South Africa, we take reasonable steps to ensure it receives a level of protection consistent with POPIA's cross-border transfer requirements, including AWS's own contractual and security commitments.

8. How Long We Keep Your Information

We retain contact form submissions (as email correspondence) only for as long as reasonably necessary to address your enquiry, unless a longer period is required to comply with a legal obligation or resolve a dispute. Account information and wishlist data are retained for as long as your account remains active, and are deleted within a reasonable period after you close your account or request deletion.

9. How We Protect Your Information

We rely on reasonable technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access, including encrypted transmission (HTTPS/TLS) across the Website, access-controlled cloud infrastructure, and secure, industry-standard authentication for accounts. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights Under POPIA

Subject to POPIA, you have the right to:

  • Be informed that your personal information is being processed;
  • Access the personal information we hold about you;
  • Request correction or updating of inaccurate, incomplete, or outdated information;
  • Request deletion or destruction of your personal information, subject to any legal retention requirements;
  • Object to the processing of your personal information on reasonable grounds;
  • Withdraw consent, where processing is based on consent, without affecting processing already carried out;
  • Lodge a complaint with the Information Regulator (South Africa) if you believe your rights under POPIA have been infringed.

The Information Regulator can be contacted at inforegulator.org.za.

To exercise any of these rights, please contact us using the details in the "Contact Us" section below.

11. Cookies and Tracking

The Website does not use tracking or advertising cookies, and does not run any analytics or advertising scripts. When you sign in, your session authentication tokens are stored in your browser's local session storage (not a cookie) so that you remain signed in while using the Website; this information is functional only, is not used to track you across other websites, and is cleared when you close your browser session or sign out.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Website, or applicable law. The "Last updated" date at the top of this page will reflect the date of the most recent revision. We encourage you to review this page periodically.

13. Contact Us / Information Officer

If you have any questions about this Privacy Policy, or wish to exercise any of your rights under POPIA, please contact us via our Contact page, or email our Information Officer at [CONTACT EMAIL]. Our designated Information Officer is [INFORMATION OFFICER].