Privacy policy

Last updated: 27 June 2026

At Lace & Keys, we care about your privacy as much as we care about your keyboards. This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.

Lace & Keys is operated by Zulu Eden Pty Ltd, based in Johannesburg, South Africa. In this policy, "we," "us," and "our" refer to that business, which is the controller responsible for your personal information.

Contact: store@laceandkeys.com · 

Address: 959 Inchange Road, Needwood, Randburg, Gauteng 2191, South Africa

We sell to customers in the United States, Canada, Australia, and the United Kingdom, and we aim to handle personal information in line with the laws that apply in those places — including the UK GDPR and Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), Canada's PIPEDA, Australia's Privacy Act 1988 and the Australian Privacy Principles, and US state privacy laws including the California Consumer Privacy Act (as amended by the CPRA). Region-specific rights are set out in Section 8.


1. Information we collect

Information you give us:

  • Contact and identity details — name, email address, phone number.

  • Shipping and billing addresses.

  • Order details and purchase history.

  • Account login details, if you create an account.

  • Payment information — processed securely by our payment providers; we do not store full card numbers ourselves.

  • Anything you send us — messages, reviews, support requests, survey or newsletter sign-ups.

Information we collect automatically when you visit our site:

  • Device and browser information, IP address, and approximate location.

  • Pages viewed, items browsed, and how you interact with our store.

  • Cookies and similar technologies (see Section 4).

Information from third parties:

  • Our e-commerce platform (Shopify), payment processors, shipping and fulfilment partners, and analytics and advertising providers.

2. How we use your information

We use your personal information to:

  • Process and deliver your orders, and handle returns, refunds, and cancellations.

  • Communicate with you about your orders and respond to your enquiries.

  • Send you marketing messages where you've agreed to receive them (you can opt out any time).

  • Improve our store, products, and customer experience.

  • Detect, prevent, and address fraud, security issues, and misuse.

  • Meet our legal, tax, and accounting obligations.

Our legal bases (UK/GDPR). Where the UK GDPR applies, we rely on: performance of a contract (to process your orders); legitimate interests (to run, secure, and improve our business, and for analytics) — including the "recognised legitimate interests" framework where relevant; consent (for marketing emails and non-essential cookies); and legal obligation (for tax and record-keeping). Where we rely on consent, you can withdraw it at any time.

3. How we share your information

We share personal information only as needed to run our store, with:

  • Service providers who process data on our behalf — our e-commerce platform (Shopify), payment processors (PayPal and 2Checkout), shipping and fulfilment partners, email/marketing tools, reviews platforms, and analytics and advertising providers.

  • Authorities or advisors where required by law, to comply with legal obligations, or to protect our rights.

  • A successor in the event of a business sale, merger, or reorganisation.

  • Anyone else with your consent.

We do not sell your personal information for money. Note that some advertising and analytics cookies may count as a "sale" or "sharing" under certain US state laws — see Section 8 for how to opt out.

4. Cookies and tracking technologies

We use cookies and similar technologies to make our site work, remember your preferences, understand how our store is used, and — with your consent where required — to support marketing. You can manage non-essential cookies through our cookie banner/preferences tool, and through your browser settings.

5. International data transfers

Because our business is based in South Africa and our service providers operate in various countries (including the United States), your personal information may be transferred to and processed outside your home country. Where we do this, we take steps to ensure your information remains protected by appropriate safeguards in line with applicable law. [

6. Data retention

We keep your personal information only as long as necessary for the purposes set out in this policy — including to fulfil your orders, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When it's no longer needed, we securely delete or anonymise it.

7. How we protect your information

We use reasonable technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access — including encrypted checkout and secure, reputable service providers. No method of transmission or storage is completely secure, so while we work hard to protect your data, we can't guarantee absolute security.

8. Your privacy rights

You have rights over your personal information. To exercise any of them, email store@laceandkeys.com — we'll respond within the timeframes required by the laws that apply to you. We won't discriminate against you for exercising your rights.

Everyone can ask us to access, correct, or delete their personal information, and can opt out of marketing at any time.

United Kingdom. Under the UK GDPR and Data Protection Act 2018, you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing, as well as the right to withdraw consent. You also have the right to complain directly to us about how we handle your data — we'll acknowledge your complaint within 30 days and respond without undue delay — and the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Canada. Under PIPEDA (and applicable provincial laws), you can access and correct your personal information and withdraw consent, subject to legal and contractual limits. You may complain to us and, if unresolved, to the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

Australia. Under the Privacy Act 1988 and the Australian Privacy Principles, you can request access to and correction of your personal information, and complain about how we handle it. If you're not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

United States (California and other states). Depending on your state, you may have the right to: know what personal information we collect and how it's used; access a copy of it; correct or delete it; and opt out of the "sale" or "sharing" of personal information and of targeted advertising. California residents may also limit the use of sensitive personal information. We will not discriminate against you for exercising these rights. To opt out of sale/sharing, use [your "Do Not Sell or Share My Personal Information" link / cookie preferences]. You may also use an authorised agent to submit requests.

9. Children's privacy

Our store is not directed at children, and we don't knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we'll delete it.

10. Marketing communications

We'll only send you marketing emails where you've opted in (or where otherwise permitted by law). Every marketing message includes an easy way to unsubscribe, and you can also email us to opt out at any time. Opting out of marketing won't stop essential messages about your orders.

11. Third-party links

Our site may link to other websites we don't control. This policy doesn't cover those sites, so we encourage you to read their privacy policies.

12. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date above, and for significant changes we'll take reasonable steps to let you know.

13. Contact us

Questions, requests, or complaints about your privacy? Email us at store@laceandkeys.com or write to us at [postal address]. We're real people, and we'll get back to you within 15 hours.