PRIVACY POLICY

Effective Date: 29 October 2026

Website: www.houseoftoro.co.za

1. Introduction

At House of Toro, we believe that trust is an essential part of every exceptional experience.

Your privacy matters to us, and we are committed to protecting the personal information you share when exploring our fragrances, shopping through our online store or participating in our distributor and marketplace programmes.

This Privacy Policy explains how House of Toro collects, uses, stores, shares and protects personal information when you interact with our website, products, services and digital platforms.

We process personal information in accordance with applicable South African legislation, including the Protection of Personal Information Act 4 of 2013 (POPIA).

By using our website, you acknowledge this Privacy Policy. Where your consent is required for particular processing activities, we will request it separately.

2. Who We Are

House of Toro is a contemporary luxury fragrance and lifestyle brand offering a curated selection of fragrances through its online store and marketplace.

Our platform also provides opportunities for approved distributors, vendors, resellers and retail partners to purchase and sell House of Toro products.

For the purposes of POPIA, the business responsible for processing your personal information is:

Trading Name: House of Toro

Registered Business Name: House of Toro (Pty) Ltd

Business Address: 52 Ferreira close, Birchleigh, Kempton Park

Privacy Contact Email: hello@houseoftoro.co.za

Information Officer: Toro Modise

3. Personal Information We Collect

Depending on how you interact with House of Toro, we may collect the following categories of personal information.

3.1 Personal Identification Information

When you create an account, place an order, submit an enquiry or register as a distributor, we may collect:

• Full name and surname
• Email address
• Contact number
• Billing address
• Delivery address
• Username and account details
• Business name and registration information, where applicable

3.2 Order and Transaction Information

When you purchase products through our online store or marketplace, we may collect:

• Products purchased
• Order numbers and transaction references
• Purchase dates and amounts
• Payment status and confirmation
• Delivery preferences
• Shipping and tracking information
• Refund, return and exchange requests
• Order-related communications

Payment transactions may be processed through approved third-party payment service providers. These providers may collect and process payment-card information according to their own security standards and privacy policies.

House of Toro may receive limited transaction information necessary to confirm payments, process orders, issue refunds and maintain financial records.

3.3 Distributor and Vendor Information

When you apply to become a House of Toro distributor, stockist, reseller or marketplace vendor, we may collect:

• Personal and business contact details
• Business registration information
• Business and trading addresses
• Identification or verification documents, where reasonably required
• Banking or payout information, where applicable
• Wholesale purchase records
• Product listings and inventory records
• Marketplace sales and order history
• Information submitted during vendor applications
• Communications relating to vendor approval and business activities

This information is used to evaluate applications, administer vendor relationships, process wholesale orders, facilitate marketplace operations and comply with applicable legal obligations.

3.4 Technical and Website Usage Information

When you access our website, certain technical information may be collected automatically, including:

• Internet Protocol (IP) address
• Browser type and version
• Device type and operating system
• Pages visited
• Date and time of visits
• Referral sources
• Website interaction information
• Cookie identifiers and preferences

This information helps us operate, secure and improve our website and understand how visitors interact with our services.

3.5 Marketing and Communication Information

If you subscribe to our newsletter, participate in promotions or communicate with us, we may collect:

• Email address and communication preferences
• Marketing consent records
• Enquiries and correspondence
• Customer feedback
• Product reviews
• Responses to promotions or surveys
• Fragrance preferences voluntarily shared with us

4. How We Use Your Personal Information

House of Toro processes personal information for specific, legitimate business purposes.

These include:

4.1 Processing Orders

To receive orders, confirm payments, arrange deliveries, provide order updates and manage returns or refunds.

4.2 Managing Customer Accounts

To create and administer accounts, maintain order histories and provide access to account-related services.

4.3 Operating Our Marketplace

To register and assess vendors, manage approved distributor accounts, administer product listings, process marketplace transactions and provide relevant reporting functionality.

4.4 Customer Support

To respond to enquiries, investigate complaints, resolve order problems and provide assistance.

4.5 Marketing and Promotions

To send product announcements, fragrance releases, promotional offers and other marketing communications where permitted by law.

4.6 Improving Our Services

To understand website usage, identify technical problems, improve navigation and develop a more relevant shopping experience.

4.7 Security and Fraud Prevention

To protect customer accounts, prevent unauthorised transactions, investigate suspicious activity and maintain the security of our marketplace.

4.8 Legal and Regulatory Compliance

To maintain appropriate financial records, comply with tax and accounting obligations, respond to lawful requests and fulfil other legal responsibilities.

We will not use your personal information for purposes incompatible with those for which it was collected unless permitted or required by law.

5. Legal Grounds for Processing Information

House of Toro processes personal information only where an appropriate legal justification exists under POPIA.

Depending on the circumstances, processing may be necessary:

• To fulfil a contract with you, including processing purchases and providing services.
• To comply with obligations imposed by law.
• To protect your legitimate interests.
• To pursue legitimate business interests in a manner permitted by law.
• To act with your consent, where consent is required.

Where processing is based on consent, you may withdraw that consent, subject to applicable legal requirements.

Providing certain information, such as a delivery address or payment details, may be necessary to complete your order. If you choose not to provide it, we may be unable to fulfil the relevant service.

6. Sharing Your Personal Information

House of Toro does not sell personal information to third parties for their independent marketing purposes.

We may share relevant information with trusted third parties where reasonably necessary to operate our business.

These may include:

6.1 Payment Service Providers

To securely process payments, verify transactions and facilitate refunds.

6.2 Courier and Delivery Partners

To arrange product delivery, provide tracking updates and resolve delivery-related issues.

6.3 Marketplace Vendors and Distributors

Where an order involves an approved marketplace vendor, relevant customer and order information may be shared with that vendor where necessary to process or fulfil the transaction, subject to the vendor’s role and authorised access.

Approved vendors are expected to handle customer information responsibly, lawfully and only for appropriate business purposes.

Where vendors independently determine how they process customer information, they may have their own obligations as responsible parties under POPIA.

6.4 Technology and Hosting Providers

To provide website hosting, account management, data storage, website maintenance, security and related technical services.

6.5 Marketing and Analytics Providers

Where enabled and permitted by law, we may use third-party services to distribute marketing communications, measure website performance or understand customer engagement.

6.6 Professional Advisers and Authorities

We may disclose relevant information to accountants, legal advisers, regulators, law enforcement agencies or other authorised parties where permitted or required by law.

We seek to ensure that service providers handling information on our behalf are subject to appropriate confidentiality and data-protection requirements.

7. Online Payments and Transaction Security

House of Toro aims to provide customers with a secure and convenient online shopping experience.

Payment transactions may be processed through third-party payment gateways using their respective payment security systems.

Depending on the payment method selected, customers may be redirected to or interact with a secure payment interface operated by the relevant provider.

Payment providers are responsible for handling payment credentials in accordance with their applicable security and regulatory obligations.

House of Toro processes the transaction information necessary to confirm purchases, manage orders and maintain financial records.

Customers should avoid sharing passwords, payment authentication codes or sensitive banking information through unverified messages or communication channels.

8. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to support functionality, improve performance and provide a more convenient browsing experience.

Cookies are small data files stored on your device when you visit a website.

We may use the following categories of cookies:

Essential Cookies: Support essential features such as account login, shopping baskets, checkout processes and website security.

Functional Cookies: Remember preferences and settings to improve your experience.

Analytics Cookies: Help us understand website performance, visitor behaviour and navigation patterns.

Marketing Cookies: Where enabled, support advertising measurement, campaign effectiveness and relevant marketing activities.

Where required by applicable law, we will obtain consent before using non-essential tracking technologies.

You can manage or disable cookies through your browser settings and any cookie-preference controls made available on our website.

Disabling certain cookies may affect the functionality of shopping baskets, account features or checkout services.

9. Marketing Communications

House of Toro may communicate with customers and subscribers regarding:

• New fragrance collections
• Product launches
• Special offers and promotions
• Marketplace announcements
• Distributor opportunities
• Brand updates and editorial content

We will send electronic direct marketing communications only where permitted under POPIA, including where you have provided the necessary consent or where the applicable existing-customer exception lawfully applies.

You may opt out of marketing communications at any time by:

• Selecting the unsubscribe option in a marketing email.
• Following the opt-out instructions provided in a message.
• Updating your communication preferences, where available.
• Contacting us using the privacy contact details provided in this Policy.

Opting out of promotional communications does not prevent us from sending essential transactional messages relating to orders, payments, deliveries or account security.

10. Customer Accounts and Marketplace Access

Customers and approved vendors may be provided with account functionality that allows them to manage relevant activities on our platform.

Depending on the account type and available features, this may include:

• Viewing orders and purchase history
• Updating account information
• Managing delivery addresses
• Accessing approved marketplace functions
• Managing product listings and inventory
• Reviewing sales and transaction records
• Managing relevant customer orders

Access to account information is subject to the permissions applicable to each account.

Users are responsible for maintaining the confidentiality of their login credentials and notifying House of Toro if they suspect unauthorised access.

House of Toro reserves the right to restrict account access where reasonably necessary to protect the security and integrity of the platform.

11. Data Storage and Retention

House of Toro retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected or where continued retention is authorised or required by law.

Retention periods may depend on:

• The duration of the customer or vendor relationship
• Order fulfilment and warranty requirements
• Tax and accounting obligations
• Legal or regulatory recordkeeping requirements
• Dispute resolution and fraud prevention
• Relevant contractual obligations

When personal information is no longer required and there is no lawful reason to retain it, we will take appropriate steps to securely delete, destroy or de-identify it.

A request to close an account does not automatically require the immediate deletion of information that must lawfully be retained.

12. Protection of Personal Information

We recognise that protecting customer and distributor information is fundamental to maintaining trust.

House of Toro is committed to taking reasonable technical and organisational measures to safeguard personal information against:

• Unauthorised access
• Accidental loss
• Unlawful disclosure
• Improper alteration
• Destruction
• Misuse

Security arrangements may include appropriate access controls, secure connections, user authentication, service-provider safeguards and other measures suited to the risks involved.

No online system can guarantee absolute security. We therefore encourage users to maintain strong passwords and protect access to their accounts.

Where we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected individuals as required by POPIA.

13. Your Privacy Rights

Under POPIA, you have rights concerning the processing of your personal information.

Subject to applicable legal conditions, these include:

13.1 Right to Information

You may request information about how your personal information is collected and processed.

13.2 Right of Access

You may request confirmation of whether House of Toro holds personal information about you and request access to that information.

Confirmation of whether personal information is held is free of charge. Access to copies or records may be subject to a lawful prescribed fee, where applicable.

13.3 Right to Correction

You may request correction of information that is inaccurate, incomplete, misleading or outdated.

13.4 Right to Deletion

You may request deletion or destruction of personal information where we are no longer authorised to retain it or where other legal grounds for deletion apply.

13.5 Right to Object

You may object to certain processing of your personal information in accordance with POPIA.

13.6 Right to Withdraw Consent

Where processing relies on your consent, you may withdraw that consent.

13.7 Right to Opt Out of Direct Marketing

You may object to direct marketing and request that we stop using your personal information for that purpose.

13.8 Right to Lodge a Complaint

You may submit a complaint to South Africa’s Information Regulator if you believe your personal information has been processed unlawfully.

To exercise your rights, contact our Information Officer using the details provided in Section 18.

We may request reasonable proof of identity before disclosing personal information to ensure that it is not shared with an unauthorised person.

Requests will be assessed and handled in accordance with POPIA and applicable regulations.

14. International Data Transfers

Some technology providers, payment processors, hosting services or other approved service providers may operate outside South Africa.

Where personal information is transferred to another country, House of Toro will take appropriate measures to ensure that the transfer complies with section 72 of POPIA.

Such transfers will take place only where an applicable legal basis exists, including adequate protection arrangements, relevant consent or another exception permitted under POPIA.

15. Children’s Privacy

House of Toro’s online store and distributor services are not specifically directed at children under 18 years of age.

We do not knowingly collect children’s personal information in circumstances prohibited by law.

Where the processing of a child’s personal information requires consent or authorisation from a competent person, we will seek the necessary permission or otherwise ensure that an applicable lawful justification exists.

If you believe that a child has provided personal information to us without the required authorisation, please contact us so that appropriate action can be taken.

16. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, payment providers and external services.

House of Toro is not responsible for the privacy practices or content of third-party websites that operate independently of us.

We encourage visitors to review the privacy policies of those services before providing personal information.

17. Changes to This Privacy Policy

House of Toro may update this Privacy Policy periodically to reflect changes in our business operations, website functionality, marketplace services or applicable legal requirements.

Any revised version will be published on our website with an updated effective date.

Where material changes require additional notice or consent under applicable law, we will take the necessary steps.

We encourage customers and vendors to review this Policy periodically.

18. Contact Us

If you have questions regarding this Privacy Policy, wish to access or correct your personal information, or would like to exercise your privacy rights, please contact:

HOUSE OF TORO

Information Officer: Toro Modise

Email: hello@houseoftoro.co.za

Telephone: +27 83 409 8756

Physical Address: 52 Ferreira close, Birchleigh, Kempton Park

Website: www.houseoftoro.co.za

We will review privacy-related requests and respond in accordance with applicable South African law.

19. Complaints to the Information Regulator

If you believe House of Toro has handled your personal information in a manner that does not comply with POPIA, you may lodge a complaint with the Information Regulator of South Africa.

Information Regulator (South Africa)

Website: https://inforegulator.org.za

The Information Regulator is the independent authority responsible for monitoring and enforcing compliance with POPIA.

You may contact the Regulator directly for information on submitting a complaint.

HOUSE OF TORO

A Signature of Luxury. An Expression of You.

Presence, Bottled.