Privacy Policy

What we collect

If you register a shop: your name, email address, a password (stored as an unreadable hash, never in plain text), your business details, and any banking or payment details you choose to put on your invoices.

If you place an order on someone's shop: your name, phone number, delivery address if you gave one, and what you ordered. This is shown only to the specific business you ordered from, so they can fulfil your order and contact you about it on WhatsApp — it is not shared with any other seller, and Kartzy doesn't sell or rent it to anyone.

Why we collect it

Only to run the shop and order system itself: creating your account, showing your order to the business you're buying from, generating invoices and receipts, and — if you ask us to — sending you a password reset link or replying to a message through our contact form. We don't use it for advertising, and we don't sell it.

Where it's stored

Kartzy is built on Supabase (database and file storage) and hosted through Hostinger. Depending on which region a project is provisioned in, data may be stored outside South Africa. Where that's the case, it's protected by the same security measures described below regardless of location, in line with POPIA's rules on sending personal information across borders.

How it's protected

Passwords are one-way hashed, never stored as plain text. Login sessions are signed so they can't be forged. Access to the underlying database is restricted to Kartzy's own systems. No method of storing or transmitting data is completely risk-free, but we take reasonable technical and organisational steps to keep your information secure, as POPIA requires.

How long we keep it

For as long as your account or order history is active, plus a reasonable period afterwards for our own records (invoices and receipts, for example). You can ask us to delete your seller account and its data at any time, subject to anything we're legally required to keep.

Your rights

Under POPIA, you can ask us what personal information we hold about you, ask us to correct it, ask us to delete it, and object to how it's being used. To do any of these, contact us at info@kartzy.co.za or through our contact page.

If you're not satisfied with how we've handled a privacy concern, you can complain to South Africa's Information Regulator: inforegulator.org.za (enquiries@inforegulator.org.za).

Cookies

Kartzy uses one small, essential cookie to keep you logged in to your seller dashboard. It's not used for tracking or advertising, and it disappears when you log out.

Contact

Kartzy, a project of Web Zooters, Gqeberha, South Africa — info@kartzy.co.za.