Skip to main content

Privacy Policy

Last updated: March 2026

This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African legislation.

1. Responsible Party

The responsible party for the processing of your personal information is the operator of this website. Contact details are provided in the footer of this site and on our Contact page.

2. What Personal Information We Collect

We may collect the following categories of personal information:

  • Identity information: Name, surname, email address
  • Contact information: Phone number, delivery address
  • Transaction information: Order history, payment references (we do not store full card numbers)
  • Technical information: IP address, browser type, device information, cookies
  • Consent records: Date and type of consents you have provided or withdrawn

3. Purpose of Processing

We process your personal information for the following purposes (POPIA s13):

  • To fulfil and deliver your orders
  • To process payments through our payment service providers
  • To communicate order status and delivery updates
  • To provide customer support
  • To comply with legal and regulatory obligations
  • To send marketing communications (only with your explicit opt-in consent)
  • To improve our services and website functionality

4. Legal Basis for Processing

We process your personal information based on:

  • Consent: You provide consent during registration and may withdraw it at any time
  • Contract: Processing necessary to fulfil your purchase orders
  • Legal obligation: Where we are required by law (e.g., tax records, CPA compliance)
  • Legitimate interest: For fraud prevention and security purposes

5. Third-Party Sharing

We may share your personal information with:

  • Payment processors: Paystack and/or PayFast for payment processing
  • Delivery partners: To fulfil and deliver your orders
  • Email service providers: For transactional and, where consented, marketing emails
  • Cloud infrastructure: Microsoft Azure for hosting and data storage

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal information.

6. Cross-Border Transfers

Some of our service providers may process data outside South Africa. Where this occurs, we ensure adequate safeguards are in place as required by POPIA s72.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Transaction records are retained for the period required by SARS and the Consumer Protection Act.

8. Your Rights Under POPIA

You have the following rights regarding your personal information:

  • Access: Request confirmation of what personal information we hold about you (s23)
  • Correction: Request correction or deletion of inaccurate information (s24)
  • Deletion: Request deletion of your personal information where it is no longer necessary (s24)
  • Object: Object to the processing of your personal information for direct marketing (s11(3)(a))
  • Withdraw consent: Withdraw previously given consent at any time (s11(2)(b))
  • Data portability: Request your data in a structured, machine-readable format (s23)
  • Lodge a complaint: You may lodge a complaint with the Information Regulator

9. How to Exercise Your Rights

You can manage your consent preferences through your Account Settings page. To request data export or account deletion, visit your Account page or contact us directly.

10. Cookies

We use cookies for essential site functionality and, with your consent, for analytics. See our Cookie Policy for full details.

11. Security Measures

We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication, and access controls.

12. Information Regulator

If you are not satisfied with how we handle your personal information, you may lodge a complaint with:

The Information Regulator (South Africa)
Email: complaints.IR@justice.gov.za
Website: https://inforegulator.org.za

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page and, where appropriate, by email notification.