Privacy policy

POPIA protects personal information about people and about identifiable juristic persons. That means your company's own details, not only your name and mobile number, are covered. We treat both the same way.

When you apply for a trade account we ask for:

• Your trading name, and how the business is registered
• Your company registration number and VAT number, where you have them
• Your annual turnover band
• A contact name, email address and mobile number
• The town you trade in, and a short description of what you sell

Once you are trading with us we also hold:

• Your delivery address
• Your orders, invoices and payment records
• Proof of payment documents you upload, which usually show bank account detail

We do not ask for bank statements, identity documents or credit references, because every order is paid before dispatch and we extend no credit.

We use your application to decide whether to open a trade account. We use your contact and delivery details to process and deliver orders. We use your registration and VAT numbers to issue a valid tax invoice, which the Value-Added Tax Act requires us to do.

We ask for your business type and turnover band because they decide which consumer statutes apply to your account. We cannot apply the right rules without knowing.

Our lawful bases are the performance of our contract with you, compliance with our legal obligations, and our legitimate interest in running a trade-only supply business.

Our site and database run on Supabase, and our couriers receive the delivery details they need to deliver your order. We do not sell your information, and we do not share it for anyone else's marketing.

Some of these providers process information outside South Africa. Section 72 of POPIA permits that where the recipient is bound by comparable protection, and we hold a data processing agreement with each. [to confirm: the courier you appoint, and confirmation that its processing agreement is signed]

Access to trade account data requires a sign-in, and the database enforces per-account access rules rather than relying on the application alone. Proof of payment files are held in private storage, are never publicly addressable, and are readable only by your own account and our staff.

These are the safeguards section 19 of POPIA requires. No system is perfect, and we will tell you and the Information Regulator if a compromise occurs, as section 22 requires.

Tax invoices and the records behind them are kept for five years from the end of the tax period, as the Tax Administration Act requires. Declined applications are kept only as long as needed to handle a query about the decision. [to confirm: how long declined applications are kept, and the retention of proofs]

You may ask us to:

• Tell you what information we hold about you
• Correct anything wrong or incomplete
• Delete information we no longer have grounds to keep
• Stop processing where you object to it

Write to the address on this page and we will respond. You may also complain to the Information Regulator of South Africa at [email protected].

Section 55 of POPIA requires us to appoint an Information Officer and register them with the Information Regulator. [to confirm: the name of the appointed Information Officer, and confirmation of registration with the Regulator]

We use only what the site needs to work: a session so you stay signed in, and a note of whether the sidebar is open. We do not use advertising or analytics cookies, so there is no consent banner to dismiss.