Somestuff CC trading as Bezalel Atelier
Last updated: 25 June 2026

1. WHO WE ARE AND SCOPE OF THIS POLICY

Somestuff CC, trading as Bezalel Atelier ("Somestuff CC", "Bezalel Atelier", "we", "us" or "our"), operates the Bezalel Atelier website, online store and related customer-service channels. This Policy applies when you visit or use our website or online store, request a quotation, place or discuss an order, communicate with us by email, telephone, WhatsApp, social media or chatbot, book a consultation, subscribe to marketing, apply for a wholesale relationship, or otherwise interact with us.

This Policy should be read with our website terms, returns and warranty information, PAIA Manual, cookie preferences and any specific notice displayed when information is collected. Where a specific notice conflicts with this Policy, the more specific notice applies to that processing.

2. RESPONSIBLE PARTY AND CONTACT DETAILS

Field	Details
Responsible Party	Somestuff CC trading as Bezalel Atelier
Information Officer / Head of Private Body	Martha Johanna Potgieter
Physical and postal address	8 Aster Street, Brackenhurst, Alberton, 1448, South Africa
Email	martie@bezalelatelier.com
General enquiries	info@bezalelatelier.com
Telephone	+27 82 923 6546
Website	https://www.bezalelatelier.com/

3. PERSONAL INFORMATION WE COLLECT OR PROCESS

The information we process depends on how you interact with us and may include:

• Contact and identity information: name, telephone number, email address, billing and delivery address, messaging or social-media identifier and, where lawfully required, identity or business-registration information.
• Quotation, design and consultation information: ring size, budget or budget range, occasion and target timeline, wedding or event date, preferred materials, design direction, engraving instructions, photographs or reference material, appointment details and other information needed to advise or quote.
• Order and transaction information: products or services requested or purchased, order history, invoices, payment confirmation, transaction reference, delivery and tracking details, returns, repairs, warranty matters, complaints and after-sales communications.
• Account and preference information: customer-account details, saved preferences, wish-list or cart activity where available, communication preferences and consent records.
• Communications: emails, messages, call notes, chatbot conversations, social-media direct messages, documents or images you send, and records of customer support or handover.
• Marketing information: newsletter subscription status, marketing consent or objection, campaign interactions and review or testimonial permissions.
• Website, device and technical information: IP address, browser and device information, session identifiers, cookies, pages viewed, links clicked, timestamps, referring page, security and server logs, and similar usage information.
• Wholesale, supplier and business information: name, role, business contact details, business name, registration or VAT details, trade information, agreements, banking details, quotations, invoices and correspondence.
• Employment or contractor information: only where relevant to applicants, employees, student workers or contractors, as described in our PAIA Manual and internal employment records.

Payment-card information is normally entered directly into the secure checkout or payment service. We generally receive payment status, transaction references and limited payment metadata, not the complete card number or security code.

4. SOURCES OF PERSONAL INFORMATION

• directly from you when you enquire, request a quotation, place an order, book a consultation, create an account, subscribe, complete a form or communicate with us;
• automatically from your browser, device, cookies and our website, chatbot, security or server systems;
• from Shopify, payment providers, couriers, Amira, messaging and social-media platforms, calendar or scheduling services and other service providers that support our dealings with you;
• from another person acting for you, a gift purchaser, intended recipient, business representative or authorised agent; and
• from public or lawful business sources where reasonably necessary for wholesale, supplier, fraud-prevention, legal or regulatory purposes.

5. MANDATORY AND VOLUNTARY INFORMATION

Information is mandatory where it is reasonably required to respond to an enquiry, prepare a quotation, manufacture or personalise a product, enter into or perform a contract, process payment, arrange delivery, meet a legal obligation or protect legitimate interests. If you do not provide required information, we may be unable to quote, accept or fulfil an order, book a consultation, deliver a product, provide support or comply with your request.

Optional information is identified by the context or form. You do not have to provide additional design details, photographs, marketing consent or other optional information, but this may limit the degree of personalisation or the services we can provide.

6. WHY AND ON WHAT BASIS WE PROCESS PERSONAL INFORMATION

• Pre-contractual steps and performance of a contract: to respond to enquiries, prepare quotations, design, manufacture, personalise, invoice, receive payment, deliver, repair, support and administer orders or consultations.
• Legal obligations: to keep tax, accounting and business records, respond to lawful requests, comply with consumer, employment, customs, precious-metals, financial-intelligence and other applicable requirements.
• Legitimate interests: to operate and secure our business, prevent fraud, maintain records, improve customer service, manage suppliers and service providers, protect rights, resolve disputes and measure the effectiveness of legitimate service channels, provided those interests do not unjustifiably infringe your privacy.
• Consent: where consent is required, including certain electronic direct marketing, optional cookies, publication of testimonials or photographs, and other voluntary uses explained at the point of collection.
• Protection of legitimate interests of you or another person: for example to deliver a gift, respond to an urgent safety or security issue, or protect a legal right.
• Legal claims and regulatory cooperation: to establish, exercise or defend claims and cooperate with courts, regulators and law-enforcement bodies where lawful.

We do not rely on a general statement that you have "consented to the Privacy Policy" as a blanket legal basis. The applicable basis depends on the purpose and the circumstances.

7. COOKIES AND SIMILAR TECHNOLOGIES

Our website and service providers use cookies, pixels, local storage and similar technologies to operate the store, keep sessions secure, remember preferences, maintain a chatbot conversation, understand website use and, where enabled and lawfully permitted, measure or personalise marketing.

Category	Purpose
Strictly necessary	Required for core store, checkout, security, fraud prevention, account, consent-preference and session functions. These cannot always be disabled through our banner.
Functional	Support optional features such as remembering preferences, maintaining conversation continuity or integrating customer-service tools.
Analytics	Help us understand store performance and how visitors use the website. These are limited or activated according to the relevant consent settings.
Marketing or advertising	Used only where enabled and permitted to measure campaigns or personalise advertising. You can refuse or withdraw consent through available privacy choices.

You can manage available cookie and data-sharing choices through the cookie banner or privacy-preferences link on our website and through your browser settings. Blocking some cookies may affect store or chatbot functionality. For more information about Shopify cookies, see Shopify's cookie information.

8. AMIRA AND AI-ASSISTED CUSTOMER SUPPORT

We use an AI-assisted customer-service concierge called Amira during a trial period and, if the service is continued, thereafter. Amira may be available through our website and, where enabled, WhatsApp, Instagram Direct Messages and Facebook Messenger. You will be told that you are interacting with an AI assistant and may request human assistance.

Information processed through Amira may include your name, telephone number or messaging identifier, free-text messages and conversation history, budget or budget range, occasion and target timeline or wedding/event date, preferred materials or design direction, requested or confirmed consultation time, handover status, session or cookie information, and information you voluntarily type or upload.

We use this information to answer general questions, provide product and service information, qualify genuine enquiries, maintain conversation continuity, arrange consultations, hand an enquiry to an authorised person, support follow-up, protect the service and measure whether the channel is effective. For consultations originating through Amira, limited customer-identification, consultation outcome and final sale-value information may be supplied to Amira Human Software Resources to verify conversion and calculate the contractually agreed performance fee.

Somestuff CC remains the Responsible Party. Shimshon Gavriel Fisher, trading as Amira Human Software Resources, acts as an Operator for the chat service. The service uses:

• a dedicated server supplied by Hetzner Online GmbH in Finland to host the Amira database and chat transcripts;
• Anthropic, PBC commercial API services to generate conversational replies; and
• Meta Platforms and the relevant calendar or scheduling provider when messaging channels or appointment booking are enabled.

Amira has confirmed that it does not sell our customer data or use it for unrelated purposes, and that customer messages are not fed into general-purpose AI training. Anthropic states that commercial API inputs and outputs are not used to train its models by default and are ordinarily deleted from Anthropic systems within its standard operational retention period, subject to its published exceptions and any different contractual arrangement.

Authorised Bezalel Atelier staff can review conversations through the secure administration and handover tools. Amira personnel may access information only where reasonably necessary to operate, support or troubleshoot the service and subject to confidentiality obligations.

Amira provides assistance and may make mistakes. Final quotations, order acceptance, contractual commitments, complaints, returns, refunds and other decisions that materially affect you are not made solely by Amira without appropriate human involvement.

Please do not send passwords, complete payment-card details, identity numbers, medical information, religious information, biometric information or other unnecessary confidential or special personal information through the chatbot. Amira does not intentionally request those details, but a free-text message can contain information you choose to provide.

9. SHOPIFY AND THE OPERATION OF OUR ONLINE STORE

Our online store is hosted by Shopify. Shopify processes information needed to provide checkout, hosting, fraud prevention, customer accounts, support, analytics and related commerce services. Information submitted through the store is transmitted to Shopify and relevant service providers. Shopify may also process certain information for its own legitimate platform purposes as described in its notices.

You can read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for rights relating to information Shopify processes in its own capacity.

If Shopify Network Intelligence or another enhanced Shopify service is enabled, Shopify may use customer data together with information from other merchants to provide enhanced services. Where applicable, we will provide the required cookie-consent, privacy and data-sharing choices through Shopify Customer Privacy settings.

10. HOW WE DISCLOSE PERSONAL INFORMATION

We do not sell personal information. We disclose only what is reasonably necessary for the stated purpose, permitted by law or authorised by you. Recipients may include:

• Shopify and e-commerce, hosting, cloud, email, messaging, security, backup, IT-support, analytics and website service providers;
• payment gateways, banks, payment and fraud-prevention providers;
• couriers, postal, fulfilment, customs and logistics providers and the intended recipient of a delivery;
• Amira Human Software Resources, Anthropic, Hetzner, Meta and calendar or scheduling providers as described above;
• suppliers, specialist manufacturers, contractors or repairers where limited design, contact or order information is needed to quote, manufacture, repair or complete an order;
• bookkeepers, accountants, auditors, tax advisers, insurers, banks and SARS;
• legal advisers, debt collectors, courts, regulators, government bodies and law-enforcement authorities where required or permitted by law or necessary to protect rights;
• email, social-media, advertising and marketing providers only in accordance with applicable consent, objection and platform settings; and
• a prospective purchaser, successor or adviser in connection with a lawful reorganisation or sale of the business, subject to appropriate confidentiality and legal safeguards.

Service providers may act as Operators processing information on our instructions or as independent responsible parties for their own regulated functions. Their own privacy notices may also apply.

11. INTERNATIONAL PROCESSING AND TRANSFERS

Some service providers and their subprocessors operate outside South Africa. Personal information may therefore be processed in Canada, Singapore, Finland, the United States, Ireland and other countries in which Shopify, Anthropic, Meta or other relevant providers operate, and in destination or transit countries for international deliveries.

We take reasonable steps to ensure that an international transfer is permitted by section 72 of POPIA, for example because the recipient is subject to adequate law, binding corporate rules or a binding agreement providing an adequate level of protection; the transfer is necessary for a contract with you or in your interest; you have consented where appropriate; or another lawful basis applies. Service-provider locations and subprocessors may change and we review material changes when reasonably practicable.

12. DIRECT MARKETING AND COMMUNICATION PREFERENCES

We send electronic direct marketing only where permitted by law, including where you have consented or where the limited existing-customer exception applies to our own similar products or services. Marketing consent is separate from information required to process an enquiry or order.

You may unsubscribe or object at any time without charge by using the unsubscribe link, replying with the relevant opt-out instruction, changing available preferences or contacting us. We may still send non-promotional communications needed for an enquiry, order, account, delivery, warranty, security or legal matter.

13. SECURITY SAFEGUARDS

We apply and periodically review reasonable technical and organisational safeguards appropriate to the nature, scope and sensitivity of the information and the reasonably foreseeable risks. Depending on the system, these may include restricted access, individual accounts, strong passwords, multi-factor authentication where available, device locking, controlled administrative permissions, reputable hosted platforms, HTTPS/TLS connections, secure payment channels, updates, malware protection, backups, physical protection, confidentiality obligations, secure disposal and incident-response procedures.

No method of transmission or storage is completely secure. If we have reasonable grounds to believe personal information was accessed or acquired by an unauthorised person, we will investigate, take reasonable containment steps and notify the Information Regulator and affected persons as soon as reasonably possible where POPIA requires it.

14. RETENTION AND DELETION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to perform a contract, support a customer, keep legally required business, tax or transaction records, resolve disputes, enforce agreements, protect security or establish, exercise or defend legal claims. Retention depends on the record and the circumstances.

When we are no longer authorised or required to retain information, we take reasonable steps to delete, destroy or de-identify it. A deletion request may be refused or limited where retention is required or permitted by law, needed to complete a transaction, necessary for a legal claim or technically pending within a controlled backup cycle. If the Amira service ends, the service agreement permits us to request an export and permanent deletion of captured data after the export period.

15. CHILDREN

Our store and bespoke consultation services are not directed primarily at children under 18. We do not intentionally request personal information from a child without the involvement of a competent person or another lawful basis. A parent or guardian who believes a child has provided unnecessary information may contact us so that we can investigate and take appropriate action.

16. YOUR RIGHTS UNDER POPIA

Subject to POPIA, PAIA and lawful limitations, you may:

• ask whether we hold personal information about you and request access to it;
• request correction of inaccurate, incomplete, excessive, outdated or misleading information;
• request deletion or destruction where we are no longer authorised to retain the information;
• object, on reasonable grounds, to processing based on certain legitimate-interest grounds;
• object at any time to direct marketing;
• withdraw consent where the processing relies on consent, without affecting earlier lawful processing;
• ask us to explain significant automated processing and request human assistance where relevant; and
• lodge a complaint with the Information Regulator.

Additional rights may apply if the law of another country or region applies to your interaction with us. Those rights are not absolute and may be subject to identity verification, legal exceptions and record-retention duties.

17. HOW TO EXERCISE YOUR RIGHTS

Send a request to martie@bezalelatelier.com and describe the information or action requested. We may ask for reasonable proof of identity or authority to protect information from unauthorised disclosure. A formal request for access to a record may need to be made using the prescribed PAIA form described in our PAIA Manual.

A request relating to Shopify information can be assisted through the Shopify tools available to us. A request involving Amira, a courier, payment provider or another service provider may require us to instruct or contact that provider. We will respond within the period required by applicable law or, where no specific period applies, within a reasonable time.

18. COMPLAINTS

Please contact our Information Officer first so that we can try to resolve the concern. You may also lodge a complaint with the Information Regulator (South Africa):

Contact	Details
Website	https://inforegulator.org.za/complaints/
Email	enquiries@inforegulator.org.za
Telephone	010 023 5200 / Toll-free 0800 017 160
Physical address	Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191

19. THIRD-PARTY WEBSITES AND SERVICES

Our website may link to or integrate third-party websites, social networks, payment services, messaging platforms or other services. Their privacy practices and security are governed by their own terms and notices. A link does not mean that we control or accept responsibility for an unrelated third party.

20. CHANGES TO THIS POLICY

We may update this Policy to reflect changes in law, our services, Shopify settings, apps, Amira or other providers, security practices or business processes. We will publish the revised version and update the date above. Material changes may also be brought to your attention through the website, email or another appropriate channel.

21. CONTACT US

Questions, objections, correction or deletion requests and privacy complaints may be directed to:

Martha Johanna Potgieter
Information Officer / Head of the Private Body
Somestuff CC trading as Bezalel Atelier
8 Aster Street, Brackenhurst, Alberton, 1448, South Africa
Email: martie@bezalelatelier.com
General email: info@bezalelatelier.com
Telephone: +27 82 923 6546