Privacy policy

Draft: to be completed with the business’s legal details and reviewed before launch (POPIA).

Who we are. [Business name, registration number, address, Information Officer and contact email].

What we collect. When you order: your name, email, phone number and delivery address. If you create an account: your email and a sign-in identifier from Firebase Authentication (Google). We do not see or store your card details; payments are handled by PayFast.

Why. To process, deliver and support your order, and to meet legal and tax obligations. We do not sell your information or use it for advertising.

Who we share it with. PayFast (payments), Cloudflare (hosting and data storage), Google Firebase (sign-in, if you use an account) and our delivery partner.

How long we keep it. Order records are kept for [5] years for tax purposes, then deleted.

Your rights. You may ask to see, correct or delete your personal information, or object to its use, by emailing [contact email]. You may also complain to the Information Regulator (South Africa).

Analytics. [If enabled: we use Cloudflare Web Analytics, which does not use cookies, to count visits.]