Privacy Policy

Scales & Ember respects your privacy. This Privacy Policy explains what personal information we collect when you visit scalesandember.com, create an account, place an order, contact us or subscribe to our emails. It also explains how we use that information, who we share it with, and the rights you have.

Last updated: 3 November 2026

The controller responsible for your personal information is:

Scales and Ember (Pty) Ltd

Registered in the Republic of South Africa, registration number 2024/3444644/07

Business address: DAMAC Tower, Unit 1912, Building 26, Suliman Al Nabulsi Street, Al-Abdali, Amman 11190, Jordan

Director: Bader Awwad

Privacy contact: [email protected]

Information Officer (South Africa, POPIA): Bader Awwad, [email protected]

Information you give us:

  • your name, email address and phone number (if you provide one);
  • billing and shipping addresses;
  • order details, including size and any personalisation text;
  • account login details, or your basic Google profile (name, email address and profile picture) if you use Sign in with Google;
  • messages you send us by email or through our contact form;
  • your marketing preferences.

Information collected automatically:

  • device and browser information, IP address and approximate location;
  • how you use the Site (pages viewed, items added to your cart), only if you have accepted analytics or marketing cookies;
  • security and fraud-prevention signals, for example from Cloudflare and Google reCAPTCHA.

Payment information: payments are processed by PayPal. We receive confirmation of payment and limited details, such as payment status, but never your full card number.

We do not ask for special categories of data, such as health or religious information. Please do not include them in messages or personalisation text.

  • To process, produce, ship and deliver your order, take payment, and handle cancellations, returns and refunds. Legal basis: performance of our contract with you.
  • To create and manage your account, including Sign in with Google. Legal basis: performance of our contract.
  • To answer your questions and complaints. Legal basis: our contract with you, or our legitimate interest in providing customer service.
  • To keep the Site secure and prevent fraud and spam (Cloudflare, reCAPTCHA and payment fraud checks). Legal basis: our legitimate interest in protecting our customers and our business.
  • To keep tax, accounting and customs records. Legal basis: our legal obligations.
  • To send you marketing emails. Legal basis: your consent. Where the law allows, we may also email existing customers about similar products, and you can opt out at any time.
  • To measure how the Site is used (Google Analytics) and to show and measure advertising (Google Ads, Meta and Pinterest). Legal basis: your consent, given through our cookie banner.
  • To protect our legal rights and resolve disputes. Legal basis: our legitimate interest.

Where we rely on legitimate interests, you can object (see section 9).

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our payment and security providers may run automated fraud checks. If you would like a person to review an outcome, contact us.

We send marketing emails only if you have opted in, or where the law otherwise allows. You can unsubscribe at any time using the link in every email, or by emailing [email protected]. You will still receive service messages about your orders.

Our cookie banner asks for your choice before any analytics or marketing cookies and tags run. Google Consent Mode is set to "denied" by default. You can change your choice at any time through the "Manage consent" link on every page. See our Cookie Policy for details.

We share personal information only where needed, with:

  • Bluehost (Newfold Digital), for website hosting in the USA;
  • Cloudflare, for content delivery, security and bot protection, through its global network including the USA;
  • WooCommerce and WPForms, our store and contact-form software, which runs on our hosting;
  • PayPal, for payments and fraud checks;
  • Google, for Analytics, Ads, Google Listings & Ads, reCAPTCHA and Sign in with Google;
  • Meta Platforms (Facebook and Instagram), for the advertising pixel and Conversions API, only with your consent;
  • Pinterest, for its advertising tag, only with your consent;
  • Klaviyo, for email marketing, in the USA;
  • our production partners, to make your order;
  • couriers and customs brokers, to deliver your order;
  • professional advisers, and public authorities where the law requires it.

We do not sell your personal information for money. Some advertising cookies may count as "selling" or "sharing" under certain US state laws (see section 11).

If our business is transferred, your information may pass to the new owner, who must respect this policy.

We are a South African company with a business address in Jordan. Our service providers are located in countries including the United States and member states of the European Union, which may not have the same data protection laws as your country.

For South African customers, we transfer personal information outside South Africa only as permitted by section 72 of POPIA, for example where the recipient is bound by laws or binding agreements giving adequate protection, or where the transfer is necessary to perform our contract with you.

When we transfer personal information from the EU/EEA or the UK, we rely on safeguards permitted by law. These include adequacy decisions (such as the EU-US Data Privacy Framework, for certified providers), Standard Contractual Clauses, and the UK International Data Transfer Addendum. You can ask us for more information at [email protected].

  • Orders and invoices: 7 years, for tax and accounting purposes.
  • Customer account: until you delete it, or after 2 years of inactivity.
  • Customer support emails: 2 years.
  • Marketing data: until you unsubscribe. We then keep your email address on a suppression list, so that we do not email you again.
  • Analytics and advertising data: as stated in our Cookie Policy. Analytics data is kept for a maximum of 14 months.
  • Consent records: 5 years.

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct inaccurate information;
  • delete your information;
  • restrict or object to certain processing, including direct marketing at any time;
  • receive your information in a portable format;
  • withdraw your consent at any time (this does not affect processing already carried out).

To exercise your rights, email [email protected]. We may ask you to verify your identity. We will reply within one month, or within the time required by your local law.

You also have the right to complain to a data protection authority, in particular in the country where you live or work:

  • in the EU/EEA, your national supervisory authority;
  • in the UK, the Information Commissioner's Office;
  • in South Africa, the Information Regulator (inforegulator.org.za), under the Protection of Personal Information Act (POPIA).

Our Site is not intended for children. You must be at least sixteen (16) years old, or the age of digital consent in your country if that is higher, to create an account or subscribe to emails. If you are under 18, please involve a parent or guardian when placing an order. If we learn that we have collected information from a child without the required consent, we will delete it.

In the last 12 months we have collected the following categories of personal information:

  • identifiers, such as your name, email address, postal address and IP address;
  • commercial information, such as your orders;
  • internet activity, such as how you use the Site (only with your consent);
  • approximate geolocation;
  • customer service records.

We collect this information from you, from your device and from our service providers. We use it for the purposes in section 3 and disclose it to the service providers in section 6.

We do not sell personal information for money. However, if you accept marketing cookies, our advertising partners (Meta, Google and Pinterest) may receive identifiers and browsing data for cross-context behavioural advertising. This may be considered "selling" or "sharing" under California law.

You can opt out at any time through the "Manage consent" cookie settings link on every page. We also honour Global Privacy Control (GPC) and Do Not Track browser signals as an opt-out.

We do not use sensitive personal information for purposes that would require a right to limit its use. We do not knowingly sell or share the personal information of consumers under 16.

California residents have the right to:

  • know what personal information we hold about them;
  • delete or correct it;
  • opt out of selling or sharing;
  • not be discriminated against for exercising these rights.

You may use an authorised agent. Send requests to [email protected].

We use reasonable technical and organisational measures to protect your information, including HTTPS encryption and security services. No system is completely secure, so please keep your password confidential.

Our Site may link to other websites and social media. Their own privacy policies apply.

We may update this Privacy Policy. When we do, we will post the new version here with a new date. If the changes are significant, we will also tell you by email or on the Site.

For questions about this Privacy Policy, email [email protected] or write to us at the address in section 1.