Version: 2026-08-09
We process identity and contact details, account credentials, order and payment status, delivery addresses and coordinates when delivery is requested, customer communications, consent records, and security/audit information.
We use information to create and secure accounts, accept and fulfil orders, process payments, arrange collection or delivery, provide order notifications and support, prevent fraud, keep accounting and legal records, and comply with legal duties. Optional direct marketing requires separate consent.
Information is shared only where necessary with hosting and IT providers, payment providers such as PayFast, messaging providers such as TextMeBot or Twilio, and delivery personnel. These providers may process information as operators under contractual confidentiality and security duties. Some providers may process data outside South Africa; appropriate contractual or legal safeguards must apply.
Account and order information is retained only while required to provide services and meet tax, accounting, dispute and legal obligations. Authentication sessions and temporary operational records are removed sooner. When retention is no longer required, personal information is deleted or irreversibly anonymised.
You may request access to your information, correction, deletion where legally permitted, or object to processing. You may withdraw consent where consent is the lawful basis. Use the Privacy Controls in My Account or email the Information Officer. Certain transaction records may need to be retained by law, in which case identifying information will be restricted or minimised.
We use access controls, password hashing, audit logs, HTTPS and operational safeguards. No system is risk-free. If a security compromise affects personal information, we follow the notification requirements of POPIA. You may complain to the South African Information Regulator at inforegulator.org.za.
Material changes will receive a new policy version. Where required, we will present the updated notice and request a new consent choice.