Privacy Policy & POPIA Notice

Crafty Market, based in Cape Town, South Africa, is the responsible party for the personal information collected through this website. Independent sellers who fulfil your orders also process the delivery information needed to send you your parcel.

Account information — your name, email address and, if you provide it, your phone number and saved delivery addresses.

Guest checkout information — if you buy without an account, we collect the contact and delivery details needed to process and deliver that order.

Delivery information — recipient name, street address, suburb, city, province, postal code and contact number.

Order information — the items ordered, quantities, prices, delivery charges, order status and delivery progress.

Payment-related information — the payment reference, amount and payment status returned to us by PayFast. We do not collect or store your full card number, CVV or card PIN. Card details are entered on PayFast's secure payment pages, not on ours.

Contact and support information — messages you send us through the contact form or by email, and our replies.

Seller information — if you apply to sell, the business and contact details in your application.

Website usage information — basic technical information such as your browser type, device, approximate location derived from your IP address, and the pages you visit, used to keep the site secure and working well.

We use a small number of cookies and browser storage entries that are necessary for the site to function — keeping you signed in, remembering your basket and keeping your session secure. You can block or delete cookies in your browser, but parts of the site, including sign-in and checkout, may then stop working.

• to create and manage your account
• to process your order, take payment through PayFast and confirm the payment
• to pass delivery details to the seller so your parcel can be sent to you
• to send order confirmations and delivery updates
• to answer your questions and resolve problems with an order
• to review seller applications and moderate product listings
• to detect and prevent fraud and to keep the site secure
• to meet our legal, tax and accounting obligations
• with your consent, to send marketing about new shops, products and offers

We share only what is needed, and only with:

• PayFast, our payment provider, to process your payment
• the independent seller or sellers fulfilling your order, so they can pack and deliver it — they receive the delivery details for their part of the order, not your payment details
• couriers and delivery services used by a seller to deliver your parcel
• our hosting, database and email service providers, who process information on our behalf under confidentiality obligations
• law enforcement or regulators where we are legally required to do so

We do not sell your personal information.

Some of our service providers, such as hosting and email delivery, may process information on servers outside South Africa. Where that happens, we take reasonable steps to ensure your information receives a comparable level of protection to that required by POPIA.

Access to customer data is restricted by database-level security rules, orders and payment records can only be created or updated by our servers, guest order links are protected by a secure token, and traffic to the site is encrypted. No system can be guaranteed completely secure, but we take reasonable technical and organisational measures to protect your information.

We keep account and order records for as long as your account is active and thereafter for as long as we are required to for tax, accounting, warranty and dispute-resolution purposes. Contact messages are kept while a query is open and for a reasonable period afterwards. Marketing contact details are kept until you unsubscribe.

You have the right to:

• ask what personal information we hold about you
• ask us to correct information that is inaccurate or incomplete
• ask us to delete information we no longer have a lawful reason to keep
• object to processing in certain circumstances
• withdraw consent to marketing at any time
• complain to the Information Regulator of South Africa

To exercise any of these rights, email info@craftymarket.co.za. We may need to verify your identity before acting on a request.

We only send marketing emails to people who have asked to receive them. Transactional emails — order confirmations, payment confirmations and delivery updates — are part of your order and are sent regardless. Every marketing email includes an unsubscribe link, and you can also unsubscribe at any time by emailing us.

The site is not intended for children under 18. We do not knowingly collect personal information from children without the consent of a parent or guardian.

We may update this notice as the marketplace develops. The date at the top of the page shows when it was last changed. Related terms are in our Terms & Conditions.