Home / Privacy Policy

Privacy Policy

Last updated: May 2026

This Privacy Policy describes how BH Designs ("we", "our", "the company") accesses, collects, stores, uses, and shares ("processes") your personal information when you use our website and services ("Services"), including when you browse our house plans, create an account, make a purchase, or otherwise engage with us.

We are committed to protecting your privacy in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") of South Africa. If you do not agree with our policies and practices, please do not use our Services. If you have any questions, please contact us.

1. Summary of Key Points

  • What we process: The personal information you provide when you browse, register, or purchase, plus limited technical information collected automatically.
  • Sensitive information: We do not process sensitive personal information such as race, religion, or health data.
  • Third-party data: We do not collect personal information about you from third parties.
  • Payments: Payments are processed securely by our payment partner, Paystack. We do not store your full card details on our servers.
  • Your rights: Under POPIA you may access, correct, or delete your personal information, and object to its processing.

2. What Information Do We Collect?

Information you provide to us. We collect personal information that you voluntarily provide when you register an account, place an order, or contact us. Depending on how you use the Services, this may include:

  • Name
  • Email address
  • Phone number
  • Billing address
  • Account username and password
  • Order and purchase history
  • Contact and communication preferences

Payment information. When you make a purchase, your payment is processed securely by our third-party payment provider, Paystack. Your card and payment details are submitted directly to and handled by Paystack in accordance with their privacy policy. We do not collect or store your full card number or security code on our own systems.

Information collected automatically. When you visit our Services, we automatically collect certain technical information that does not, on its own, identify you. This may include your IP address, browser type and settings, device information, operating system, language preferences, referring URLs, and information about how you use our Services. This is used to maintain the security and operation of our Services and for internal analytics and reporting.

3. How Do We Process Your Information?

We process your personal information to:

  • Deliver your house plans and fulfil and manage your orders.
  • Create and manage your account and keep it in working order.
  • Respond to your enquiries and provide customer support.
  • Send administrative information such as order confirmations and changes to our terms.
  • Send marketing communications where you have consented (you can opt out at any time).
  • Understand how our Services are used so we can improve them.
  • Comply with our legal obligations and establish, exercise, or defend our legal rights.

4. On What Legal Basis Do We Process Your Information?

Under POPIA, we only process your personal information when we have a lawful basis to do so. We rely on one or more of the following:

  • Your consent, which you may withdraw at any time;
  • The performance of a contract with you (for example, to deliver a plan you have purchased);
  • Compliance with a legal obligation; and
  • Our legitimate interests, provided these are not overridden by your rights.

5. When and With Whom Do We Share Your Information?

We do not sell your personal information. We may share it with trusted third parties only where necessary to operate our Services, including:

  • Payment processors — Paystack, to process your payments securely.
  • Hosting and infrastructure providers — to host our website and deliver your digital plans.
  • Analytics providers — to help us understand and improve how our Services are used.
  • Communication tools — to send you transactional and, where consented, marketing messages.

We may also disclose your information where required by law, or in connection with a merger, sale, or transfer of our business.

6. Third-Party Websites

Our Services may contain links to third-party websites that we do not operate. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of any third-party site you visit.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and secure our Services, remember your preferences, and analyse usage. You can usually set your browser to remove or reject cookies; however, doing so may affect certain features or functionality of our Services.

8. How Long Do We Keep Your Information?

We keep your personal information only for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, for tax or accounting purposes). When we no longer need it, we will securely delete or anonymise it.

9. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organisational measures designed to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. You access and use our Services at your own risk.

10. Information From Minors

Our Services are not directed at children under the age of 18, and we do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us so we can delete it.

11. What Are Your Privacy Rights?

Under POPIA, you have the right to:

  • Request access to the personal information we hold about you;
  • Request that we correct or update inaccurate information;
  • Request that we delete your personal information, subject to legal retention requirements;
  • Object to the processing of your personal information; and
  • Withdraw your consent at any time where we rely on consent.

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Regulator of South Africa.

Opting out of marketing. You can unsubscribe from our marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting us. Even if you opt out, we may still send you service-related messages necessary for the administration of your account and orders.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. We encourage you to review it periodically.

13. Contact

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us.