Privacy Policy
Last updated: 2025/07/05
1. Introduction
MzansiCommerce ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our e-commerce platform and services.
This policy complies with the Protection of Personal Information Act (POPIA) of South Africa and other applicable data protection laws.
2. Information We Collect
2.1 Personal Information
- Name, email address, and phone number
- Business information (store name, category, location)
- Payment information (processed securely by third-party providers)
- Delivery addresses and contact details
2.2 Technical Information
- IP address and device information
- Browser type and version
- Usage data and analytics
- Cookies and similar technologies
2.3 Business Information
- Store performance metrics
- Order and transaction data
- Customer interactions and communications
3. How We Use Your Information
3.1 Service Provision
- Create and manage your store account
- Process payments and transactions
- Facilitate order fulfillment and delivery
- Provide customer support and communication
3.2 Platform Improvement
- Analyze usage patterns and performance
- Develop new features and services
- Improve user experience and functionality
- Conduct research and analytics
3.3 Legal Compliance
- Comply with legal obligations
- Prevent fraud and abuse
- Enforce our terms of service
- Protect our rights and safety
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
4.1 Service Providers
- Payment processors (Yoco, PayFast, SnapScan)
- Email service providers
- Hosting and infrastructure services
- Analytics and monitoring tools
4.2 Legal Requirements
- Comply with court orders or legal processes
- Protect against fraud or security threats
- Enforce our rights and agreements
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
5. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication
- Secure hosting and infrastructure
- Employee training on data protection
6. Your Rights
Under POPIA, you have the following rights:
6.1 Access and Correction
- Access your personal information
- Request correction of inaccurate data
- Request deletion of your data
6.2 Objection and Restriction
- Object to processing of your data
- Request restriction of processing
- Withdraw consent where applicable
6.3 Data Portability
Request a copy of your data in a portable format.
7. Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Improve our services
Account data is typically retained for 7 years after account closure to comply with tax and business record requirements.
8. Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences and settings
- Analyze website usage and performance
- Provide personalized content and features
- Ensure security and prevent fraud
You can control cookie settings through your browser preferences.
9. International Transfers
Your information may be processed in countries other than South Africa. We ensure appropriate safeguards are in place for such transfers, including:
- Standard contractual clauses
- Adequacy decisions
- Other appropriate safeguards
10. Children's Privacy
Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our platform
Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
12. Contact Information
Data Protection Officer
Information Regulator
You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated.
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg
Email: complaints.IR@justice.gov.za
Phone: +27 10 023 5200