Privacy Policy.
Last Updated: 2026
1. Scope and responsible party
This policy applies to drolvena.shop, its ordinary contact channels, embedded features and records created when a reader uses the platform. WES Holding ApS is responsible for the information described here. Its address is C/O Henrik Gavnbo Ekman, Islands Brygge 23, 5. tv, 2300 København S, Denmark. This policy does not control websites operated by third parties, even where a link or embedded feature appears on our pages.
2. Information received directly
When a reader sends an enquiry, we may receive their name, email address, telephone number, organisation, subject line and message. We may also receive attachments or details voluntarily included in correspondence. We ask readers not to send sensitive personal information unless it is necessary for a specific enquiry. Contact details are used to understand and answer the request rather than to create a personal profile.
3. Technical information
Web hosting and security systems may record an IP address, browser family, device type, requested path, referring page, approximate time and response status. These records help identify faults, protect availability and understand broad usage. Some technical values may be associated with a cookie identifier, but the platform does not intentionally turn ordinary browsing into a named reader record. Logs are reviewed on a restricted-access basis.
4. Purposes of processing
We use information to answer correspondence, assess correction requests, maintain security, operate the site, document consent choices and meet accounting or legal duties. We may use aggregated technical information to understand which pages require clearer presentation. We do not sell personal information or use contact details for unrelated promotional campaigns. Any new purpose will be explained before it begins where the law requires notice.
5. Legal basis
Under POPIA, processing may rely on consent, a reader’s request to communicate, a legitimate operational interest, a contractual step or a legal obligation. Essential technical processing is needed to deliver a page and protect the service. Optional analytics and preference storage rely on consent where required. A reader may withdraw consent by contacting [email protected], although withdrawal does not undo processing already carried out lawfully.
6. Retention periods
Routine correspondence is normally retained for 24 months after the matter closes. Security and access logs are normally retained for 90 days, unless a longer period is needed to investigate misuse. Consent records are retained for 24 months after the choice is replaced or withdrawn. Accounting and statutory records may be retained for five years, and a legal hold may extend a record while a dispute or authority request remains active.
7. Service providers
Limited information may be processed by Vercel for hosting and delivery, Google Maps for the Johannesburg map embed, Google Fonts for type delivery and an email hosting provider for correspondence. These providers receive information needed for their stated service and are not authorised by Drolvena to use our correspondence for unrelated purposes. Provider names or functions may change after a documented review. Current provider notices should be read together with this policy.
8. Cookies and similar storage
The site may use a session value named drolvena_session that lasts until the browser closes, a consent value named drolvena_consent that lasts 180 days, and a preference value named drolvena_preferences that lasts 12 months. If optional analytics are enabled, drolvena_analytics may last up to 13 months. Essential values support requested site behaviour, while optional values are used only after the relevant choice has been recorded. The Cookie Policy gives further detail and explains browser controls.
9. International transfers
Hosting, font delivery, map services and email infrastructure may process technical or contact information outside South Africa. Before using a provider, Drolvena considers contractual safeguards, access controls, security commitments and the provider’s published privacy material. A transfer is limited to what the service needs. By contacting us, a reader acknowledges that a response may pass through the systems of an email provider operating in another jurisdiction.
10. Security measures
We use access restrictions, HTTPS where available, ordinary account controls, limited retention and provider security settings to reduce unauthorised access. No internet transmission can be described as completely secure. Readers should use accurate contact details and avoid sending unnecessary sensitive information. If we identify a material incident, we will assess notification duties under POPIA and other applicable requirements.
11. User rights
A reader may request access to personal information held about them, correction of inaccurate information, deletion where legally available, restriction of optional processing and a record of consent. Requests should be sent to [email protected] with the subject “Privacy request”. We may ask for reasonable verification before releasing information. We aim to acknowledge a request within two business days and respond within thirty days, subject to lawful extensions and the complexity of the request.
12. Complaints and contact
Privacy questions should be directed to WES Holding ApS at C/O Henrik Gavnbo Ekman, Islands Brygge 23, 5. tv, 2300 København S, Denmark, or by email at [email protected]. We acknowledge complaints within two business days and aim to provide an outcome within fifteen business days. If the matter requires more time, we provide a reason and revised date. A reader may contact the Information Regulator South Africa if an internal route does not resolve the concern.
13. Children and third-party links
The platform is written for a general adult audience and is not designed to invite information from children. We do not knowingly request a child’s personal information through ordinary pages. External links, map embeds and provider sites have independent privacy practices. A reader should avoid submitting information to a third party until its notice has been reviewed.
14. Change log
This consolidated policy was issued on 3 September 2026. On 1 June 2026, the retention schedule was clarified by separating correspondence, logs, consent records and statutory records. On 15 August 2026, the provider and international-transfer section was expanded to identify service functions. Material future changes will carry a dated entry here and will be reflected in the Last Updated line.