Privacy policy & cookies
Draft for product demo — obtain POPIA/legal review before go-live.
We’re committed to your privacy. This policy explains what personal information we collect, why we use it, and your choices under POPIA (Protection of Personal Information Act).
Cravealot (Pty) Ltd operates cravealot.com. Last updated: November 2025 (draft). See also Terms & conditions.
The information we collect and how we use it
We collect personal information when you register, checkout, contact us, subscribe to the newsletter, or leave a review. We rely on contract performance, legitimate interest, consent (where required), and legal obligation under POPIA.
| Information we collect | Why |
|---|---|
| Name, delivery address, email, phone number | Fulfil orders with makers, send service messages, customer support, fraud prevention, and (with consent) marketing. |
| Payment information | We do not store full card numbers. Paystack processes payments; we receive tokens/status for refunds and maker payouts. |
| Contact history (email, chat, social) | Provide customer service and improve support quality. |
| Purchase history, basket, wish list | Complete transactions, personalise recommendations, and resolve disputes. |
| Device, browser, IP, approximate location, site usage | Secure the site, analyse performance, and prevent abuse. |
You choose what to provide, but without contact and delivery details you cannot check out. We respect opt-out where the law allows.
Sharing your information
- We do not sell your personal information to third parties for their marketing.
- We share data with makers to fulfil your order (name, delivery address, phone, order lines).
- We use Paystack for payments, BobGo (or equivalent) for shipping labels, and hosting/analytics providers under contract.
- We may disclose information if required by law or to protect rights, safety, and fraud investigation.
- We may share anonymised statistics that cannot identify you.
Marketing messages
If you subscribe to the newsletter, create an account, or opt in at checkout, we may email offers and pantry news. You can unsubscribe anytime via the link in any email or /contact.
We do not share your data with third parties for their direct marketing without your explicit consent.
Online adverts
We may use cookies and similar tools to measure campaigns. Third parties do not track you on our site for their own ads without consent where required.
Your rights (POPIA)
| Your rights | How to exercise them |
|---|---|
| Be informed about how we use your information | This privacy policy and /terms |
| Access personal information we hold about you | View account details when signed in, or /contact for a data export. |
| Correct inaccurate information | Edit your account, or ask us via /contact. |
| Delete or restrict processing in some cases | /contact — we may need to retain records for legal or accounting obligations. |
| Object to direct marketing | Unsubscribe links, newsletter opt-out, or /contact. |
| Lodge a complaint with the Information Regulator (South Africa) | See www.justice.gov.za/inforeg/ — contact us first so we can try to resolve your concern. |
Questions or requests: contact us. Withdrawing consent may limit services we can provide.
Protecting your information
No internet transmission is 100% secure. We use access controls, encryption in transit (HTTPS), and vendor contracts. Limit what you share on public devices and sign out on shared computers.
Keeping your information
We keep information while your account is active and as needed to provide services, meet tax and legal duties, and resolve disputes.
When you close an account, we delete or anonymise data where we no longer need it, unless law requires retention.
Our makers' privacy obligations
- Makers receive buyer details needed to dispatch orders. They must process data lawfully and only for fulfilment and customer queries.
- Sellers must not sell buyer lists, send unrelated marketing, or use Cravealot branding in unsolicited messages.
- Cravealot is not responsible for a seller’s misuse of data they receive — we enforce marketplace rules and may suspend sellers.
Cookie policy
By using the site with cookies enabled you get basket, sign-in, and checkout features. Blocking all cookies may prevent purchases.
| Category | Party | Purpose |
|---|---|---|
| Strictly necessary | Cravealot | Session, basket, security, consent flags. Not sold or shared for advertising. |
| Performance | Analytics (e.g. privacy-friendly or Google Analytics when enabled) | Understand how shoppers use the site to improve UX. Configured to minimise identifiability in production. |
| Functionality | Cravealot | Remember preferences such as dismiss banners. |
What is a cookie?
A cookie is a small text file stored on your device. Only the site that set it can read it. We do not store payment card numbers in cookies.
Managing cookies
You can manage cookies in your browser settings (Chrome, Firefox, Safari, Edge). Turning off necessary cookies will limit checkout.
Further information
If you have questions about your personal data or this policy, please contact us.