Privacy & POPIA Notice
How we collect, use and protect personal information when you visit our website or contact Legacy.
Responsible party: Legacy Pawn Shop (Pty) Ltd, trading as Legacy Pawn Shop & Hardware.
Effective and last updated: 19 October 2026.
1. Who we are
Legacy Pawn Shop & Hardware is located at 56 Heatherdale Road, Heidedal, Bloemfontein, 9301. For privacy questions or requests, email info@legacyshop.co.za, call or WhatsApp 082 345 6711.
2. Information we collect
- Information you provide: your name, contact details, enquiry details, item photographs and other information you voluntarily send by WhatsApp, phone or email.
- Optional website analytics: only after you accept analytics, Google Analytics may collect pages visited, approximate location, browser and device information, referring source and interactions such as WhatsApp, call and directions clicks.
- Staff administration information: authorised staff login and operational records used to manage current stock and clearance items.
Our public website does not ask you to submit identity documents or payment-card information. Please do not send unnecessary sensitive information through WhatsApp or email.
3. Why we use information
We use personal information to answer enquiries, prepare buying or pawn quotations, provide requested services, manage stock, keep business records, prevent fraud, comply with legal duties and improve our website. We process information on the basis of your consent where required, to take steps at your request or perform an agreement, to meet legal obligations, and for legitimate business interests that do not override your rights.
4. Analytics and cookies
Google Analytics is optional. It is not loaded until you select Accept analytics. If you decline, the website remains fully usable. We store your choice in your browser so we can remember it. You may change your choice at any time using the button below.
5. Sharing and service providers
We do not sell personal information. We may share information with service providers that support website hosting, email, WhatsApp communications and—only with your consent—Google Analytics. When you choose an external service such as WhatsApp, Google Maps, Facebook or Instagram, that provider’s own privacy terms also apply.
6. International processing
Some technology providers may process information outside South Africa. Where this happens, we use providers and arrangements intended to provide appropriate protection for personal information, as required by applicable law.
7. Retention
We keep personal information only for as long as reasonably needed for the purpose for which it was collected, to resolve enquiries, maintain necessary business records, and meet legal, accounting or security requirements. Retention periods vary according to the type of record and applicable obligations.
8. Your rights
Subject to POPIA, you may ask whether we hold your personal information, request access or correction, ask for deletion where lawful, object to certain processing, or withdraw consent. Contact us using the details above. We may need to verify your identity before completing a request.
9. Security
We use reasonable technical and organisational safeguards designed to protect personal information. No online transmission or storage method is completely secure, so please use care when deciding what to send electronically.
10. Direct marketing
We will not send electronic direct marketing unless permitted by law, including where consent or an existing customer relationship applies. Marketing messages will provide a way to opt out.
11. Complaints
Please contact us first so we can try to resolve your concern. You may also lodge a complaint with South Africa’s Information Regulator.
12. Updates
We may update this notice when our practices or legal requirements change. The latest version and update date will remain available on this page.