Who is responsible for your information
Spazalot is the "responsible party" for your personal information under the Protection of Personal Information Act (POPIA).
- Owner: Tawananyasha Hunde, trading as Spazalot
- Address: 13th Avenue, Parktown North, Randburg, Gauteng, 2193
- Information Officer: Tawananyasha Hunde
- Email: hello@spazalot.co.za
What we collect
When you place an order
- your name, email address and phone number
- your delivery address
- what you ordered, what you paid and how (but never your full card details, which only our payment provider handles)
When you contact us or leave a review
- your messages, and any photos you send us (for example of a damaged item)
- your review, star rating and the name you choose to show
When you browse
- On your own device: your cart, recently viewed items and the kinds of products you're interested in are saved in your browser so the shop can remember them. This stays on your device. We don't receive it, and you can clear it any time with the "Clear my history" button or your browser settings.
- Search words: we keep a list of what people search for, without names or any way to identify who searched, so we know which products to add.
- Visitor statistics: we use Cloudflare Web Analytics to count visits. It doesn't use cookies or build a profile of you.
- Technical information: our hosting provider, Cloudflare, processes your IP address and browser details to deliver the website and protect it from attacks.
We don't use advertising cookies or trackers. If we ever want to, we'll ask for your permission first.
Why we use it
- to process, pay for and deliver your order
- to keep you updated about your order and send you a review request after delivery
- to handle returns, refunds and questions
- to prevent fraud and keep our website secure
- to keep the financial records the law requires
- to improve our shop, using anonymous information only
Do you have to give it to us?
You need to give us your name, email, phone number and delivery address to place an order. Without them, we can't deliver your order or contact you about it. Everything else, like leaving a review, is up to you.
Who we share it with
We never sell your personal information. We only share it where it's needed:
- Supplier partners and couriers get your name, phone number and delivery address so they can deliver your order.
- Our payment provider processes your card payment.
- Our service providers run our website, database and email, for example Cloudflare (hosting and database) and our email provider. They may only use your information to provide their service to us.
- Authorities, but only if the law requires us to.
Information stored outside South Africa
Some of our service providers, such as Cloudflare, store or process information on servers outside South Africa. We only use providers that are bound by data protection terms giving your information a level of protection similar to POPIA, and the transfer is needed to run the shop and deliver your order.
Marketing messages
We only email you about your orders. We'll only send you promotions if you've said yes, and every promotional email has a link to unsubscribe in one click.
How we protect it
- Our website only works over encrypted connections (HTTPS).
- Card payments are handled entirely by our payment provider.
- Only the owner can access customer information, and our admin area is protected by a one-time code sent to the owner's email.
- If there's ever a security breach affecting your information, we'll tell you and the Information Regulator as POPIA requires.
How long we keep it
- Orders and payment records: 5 years, because tax law requires it.
- Messages and return requests: 2 years after they're resolved.
- Reviews: until you ask us to remove them.
Your rights
You can ask us, free of charge, to:
- tell you what personal information we hold about you
- correct or update it
- delete it, unless the law requires us to keep it (like order records for tax)
- stop using it, including objecting to any marketing
Email hello@spazalot.co.za and we'll reply within 30 days. We may need to confirm your identity first.
Complaints
If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Regulator:
- Website: inforegulator.org.za
- Complaints: POPIAComplaints@inforegulator.org.za
- General enquiries: enquiries@inforegulator.org.za
Children
Our shop is for adults. We don't knowingly collect information about children.
More information
Our PAIA manual explains how to request records we hold. If we change this policy, we'll update it on this page and change the date at the top.