Privacy policy

How we process personal information under the Protection of Personal Information Act (POPIA).

Template — requires approval

This page is a structural template. Its wording must be completed and approved by the business (and its legal adviser) before the store goes live. Bracketed items are placeholders.

Responsible party and Information Officer

[Registered company name] (Pty) Ltd. Information Officer: [Information Officer name]. Contact: orders@example.co.za.

What we collect

[Categories collected by the platform: name, email, phone, delivery and billing addresses, business details (company, registration and VAT numbers), order history, and technical/security data such as sign-in activity.]

Why we collect it

[Purposes: account administration, processing and delivering orders, invoicing and tax compliance, fraud prevention and security, and — only with consent — marketing.]

Sharing

[Operators and third parties, e.g. hosting, email delivery and image hosting providers, couriers; cross-border transfers if any.]

Retention

[How long each category is retained and the legal basis for retaining records such as tax invoices.]

Your rights

You may request access to, correction of, or deletion of your personal information, and object to processing or withdraw marketing consent. Signed-in customers can submit requests from My account → Privacy.

Complaints

You may lodge a complaint with the Information Regulator (South Africa). [Business to insert the Regulator's current contact details.]

Cookies

[Describe essential cookies (session, security, cart) and any analytics cookies, and how consent is obtained for non-essential cookies.]