ONEST

Privacy and POPIA

Draft placeholder. This text must be reviewed by a South African legal professional before the site is launched. It does not make the site legally compliant.

What we collect

Account details (name, email, phone), delivery addresses, order history, and, for sellers, business contact details. Seller identity verification records store the declared document type and an external check reference only, not copies of identity documents.

Why we use it

To run your account, process orders, communicate about deliveries and, only with your consent, send marketing.

Who sees what

Sellers see the recipient name and delivery area (suburb, city, province, postal code) for orders containing their items, not your full street address or phone number. Courier partners receive what they need to deliver.

Your rights

Under the Protection of Personal Information Act (POPIA) you may request access to, correction of, or deletion of your personal information, and withdraw marketing consent at any time.

Security

Sessions use HTTP-only cookies, passwords are hashed, and admin actions are logged. Production deployments must use HTTPS.

Status

This is a draft. Information Officer details, retention periods and any cross-border transfer arrangements must be completed and reviewed before launch.