BATA/D-18/COOK/2026/001 v2.3 • November 2026
|
Responsible Party | Bata South Africa (Pty) Ltd |
|
Websites Covered | • www.bata.co.za • www.toughees.co.za • www.bataindustrials.co.za • www.shop-za.bataindustrials.co.za |
|
Information Officer |
Lorraine Denise Dyer (Director and Country Manager) |
|
IO Email |
informationofficer@bata.com |
|
IO Tel |
031 812 3600 |
|
Effective Date |
November 2026 |
|
Replaces |
BATA/D-18/COOK/2026/001 v2.2 |
|
Document Ref |
BATA/D-18/COOK/2026/001 v2.3 |
|
Read With |
Privacy Statement v2.2 (BATA/D-18/PRIV/2026/001 v2.2) |
This Cookie Policy explains what cookies are, what cookies we use on our websites, why we use them, and how you can control them. It should be read together with our Privacy Statement v2.2.
1. What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work more efficiently and to provide website operators with information about how their sites are being used.
|
IMPORTANT: COOKIES AND PERSONAL INFORMATION
A cookie identifier that can be used to identify a specific person IS personal information under POPIA s1. Where cookies collect or generate personal identifiers, we treat the resulting information as personal information and apply the full protections of POPIA. |
2. Categories of Cookies We Use
The following table describes the categories of cookies currently deployed on our websites. This table is reviewed annually and updated whenever material changes occur.
|
Category |
Lawful Basis |
Purpose |
Examples / Third Parties |
|
Strictly Necessary |
Legitimate interests — no consent required |
Essential for the website to function. Cannot be switched off. Include session management, security, and shopping cart functionality. |
Shopify session / cart cookies; localisation cookie; SSL session cookies |
|
Functional / Preference |
Consent |
Remember your preferences and settings (e.g. language, region, logged-in status). The website may not function optimally without these. |
Shopify preference and localisation cookies; consent-record cookie |
|
Analytics / Performance |
Consent |
Help us understand how visitors use our website, which pages are most popular, and how to improve the user experience. We configure analytics tools to minimise personal data collection. Analytics data that constitutes personal information is subject to POPIA and this Cookie Policy. |
Google Analytics 4 (GA4) – cookies _ga, _ga_* |
|
Marketing / Advertising |
Consent |
Used to deliver advertisements relevant to your interests and to measure the effectiveness of advertising campaigns. May involve tracking across websites. The full direct marketing framework (POPIA s69) is set out in Privacy Statement v2.2, Section 7. |
Meta Pixel (_fbp); Google Ads / gtag (_gcl_au); TikTok Pixel (_ttp, ttcsid*); Klaviyo (__kla_id) |
|
Children’s Pages (Toughees / Bubblegummers) |
Consent — from competent person (parent/guardian) where visitor is under 18 |
Pages directed at children may deploy analytics or personalisation cookies. We are reviewing our age-verification mechanism to ensure compliance with POPIA s35. |
Same analytics and marketing cookies as above may fire; enhanced age-gating under review |
3. Third-Party Cookies
Some cookies on our websites are placed by third parties. These third parties may independently collect information about your online activities across different websites over time.
|
Provider |
Purpose |
Category |
Privacy / Opt-out Information |
|
Google Analytics 4 (GA4) |
Website analytics and performance measurement |
Analytics |
policies.google.com/privacy tools.google.com/dlpage/gaoptout |
|
Google Ads / Google Tag Manager |
Advertising measurement and conversion tracking |
Marketing |
policies.google.com/privacy adssettings.google.com |
|
Meta (Facebook) Pixel |
Advertising and conversion tracking |
Marketing |
facebook.com/privacy/policy facebook.com/settings/?tab=ads |
|
TikTok Pixel |
Advertising and conversion tracking |
Marketing |
tiktok.com/legal/privacy-policy |
|
Klaviyo |
Email marketing and customer engagement |
Marketing / Functional |
klaviyo.com/legal/privacy-notice |
|
Shopify |
E-commerce platform (session, cart, localisation and preference cookies) |
Strictly Necessary / Functional |
shopify.com/legal/privacy |
Bata SA remains accountable as the responsible party for data flows originating from our websites, including those generated by third-party cookies. We require our third-party cookie providers to:
- Process data only for the purposes disclosed in this Cookie Policy.
- Maintain appropriate security safeguards.
- Comply with POPIA and any applicable data processing agreements with us.
This list will be reviewed and updated whenever material changes occur to the cookies or pixels deployed on our websites.
4. How to Manage and Control Cookies
4.1 Our Consent Banner
When you first visit our websites, you will see a cookie consent banner. You can choose to accept all cookies, reject non-essential cookies, or customise your preferences by category. Your consent preferences are stored for 12 months and can be updated at any time by clicking the “Cookie Settings” link in the footer of our websites (where implemented) or by contacting our Information Officer.
4.2 Your Browser Settings
You can control and delete cookies through your internet browser settings. The following links explain how to do this in the most common browsers:
- Google Chrome: support.google.com/chrome/answer/95647
- Mozilla Firefox: support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Microsoft Edge: support.microsoft.com/en-us/search?query=cookies+edge
- Apple Safari: support.apple.com/en-za/guide/safari/sfri11471/mac
Please note that disabling or blocking certain cookies may affect the functionality of our websites. Strictly necessary cookies cannot be disabled through our consent banner as they are essential for the website to operate.
4.3 Opt-Out Tools for Analytics and Advertising
- Google Analytics: Install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
- Meta (Facebook) Pixel: Manage your advertising preferences at www.facebook.com/settings/?tab=ads.
- Industry opt-out: Use the Your Online Choices tool at www.youronlinechoices.com.
5. Consent Records and Withdrawal
We maintain records of cookie consent obtained through our consent banner in compliance with POPIA. These records include the date, time, and nature of consent given, and are retained for a minimum of 3 years.
You may withdraw your cookie consent at any time by:
- Clicking “Cookie Settings” in the footer of our website and updating your preferences.
- Clearing your cookies through your browser settings.
- Contacting our Information Officer at informationofficer@bata.com.
Withdrawal of consent does not affect the lawfulness of any processing carried out before you withdrew consent.
6. Session Duration and Cookie Lifetimes
Cookies may be either “session cookies” (which expire when you close your browser) or “persistent cookies” (which remain on your device for a defined period). The following general cookie lifetimes apply on our websites:
|
Category |
Duration |
Notes |
|
Strictly Necessary |
Session / up to 24 hours |
Expire at end of session or when session timeout occurs. |
|
Functional |
Up to 12 months |
Stored to remember your preferences across visits. |
|
Analytics |
Up to 14 months (target — configured to minimum per ROPA P-05) |
Configured to 14-month retention target in accordance with ROPA P-05 (minimum recommended). |
|
Marketing |
Up to 12 months |
Advertising cookies typically expire after 12 months. |
|
Consent record |
Up to 12 months |
Cookie preference settings stored for 12 months before re-consent is requested. |
7. Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact:
|
Contact |
Detail |
|
Information Officer |
Lorraine Denise Dyer (Director and Country Manager) |
|
|
informationofficer@bata.com |
|
Telephone |
031 812 3600 |
|
Postal |
5A Rydall Vale Crescent, Rydall Park, La Lucia, KZN 4051 |
8. Version Control
|
Version |
Date |
Summary of Changes |
|
V2.3 |
October 2026 |
Third-party provider list populated with observed live cookies/pixels (Google Analytics 4, Google Ads, Meta Pixel, TikTok Pixel, Klaviyo, Shopify). All “pending cookie audit / TBC / provider TBC” language removed from §§2, 3, 4.1 and 6. Platform identified as Shopify. Websites Covered updated to include bataindustrials.co.za. Cookie Settings footer note updated. |
|
v2.2 |
May 2026 |
QA corrections applied. Analytics retention adjusted to 14-month target. Randall title corrected. Cookie audit noted as pending. |
|
v2.1 |
May 2026 |
Full rewrite. Previous document (November 2018) replaced in its entirety. IO details updated to Lorraine Denise Dyer. POPIA-compliant structure adopted. |
|
v1.0 |
01 Nov 2018 |
Original document — superseded in its entirety by v2.1. |