Privacy policy
What we collect, why we collect it, who else sees it, and what you can tell us to do about it.
This page is a working draft. A South African commercial lawyer has not reviewed it, and everything marked TO CONFIRM still needs filling in. It should not be treated as final.
The short version
We collect as little as we can get away with.
To buy or sell you need an account, and an order needs a delivery address. That is most of it. We do not sell your information to anyone, and we do not want it for anything other than running the marketplace.
You can ask us what we hold, ask us to fix it, ask us to delete it, or tell us to stop. Ask here.
Who we are
TO CONFIRM Registered company name, registration number and physical address. POPIA requires the responsible party's name and address to appear here.
TO CONFIRM Information Officer name and contact details. Under POPIA this person must also be registered with the Information Regulator.
What this covers
Two things, and they hold different amounts of information about you.
- This website. Reading it is anonymous. We do not run analytics or advertising on it today, and it sets no cookies. The only thing saved is your answer to the cookie question, and that stays on your device.
- The Sleevr app and marketplace. Buying and selling needs an account, so this is where the real information is.
What we collect, and why
When you just read the site
| What | Why |
|---|---|
| Your cookie choice | So we stop asking. Saved on your device, never sent to us. |
| Your IP address, by Google | Our fonts load from Google Fonts, which means Google sees your IP. We are moving the fonts onto our own servers, which removes this. |
That is genuinely all of it. Audited 27 August 2026.
When you message us
The contact form asks for your name, email, what it is about, an order number if there is one, and your message. We use it to answer you.
When you use the marketplace
TO CONFIRM The list below is what a marketplace of this kind ordinarily needs. It has not been checked against what the app actually stores, and must be before this page goes live.
| What | Why |
|---|---|
| Name and email | To make your account and talk to you about orders. |
| Delivery address | To get the card to you. |
| Order history | To run the order, handle problems, and show you what you bought. |
| Payment details | TO CONFIRM Handled by our payment provider. Confirm whether card details ever reach Sleevr systems. If they do not, say so plainly here, because it is the single most reassuring line on this page. |
| Seller identity documents | TO CONFIRM Seller ID verification is not built yet. Do not describe it here until it is. |
Why we are allowed to
POPIA says we need a lawful reason for each thing we do with your information. Ours are:
- To do what you asked. We cannot deliver a card without an address. Most of what we hold is this.
- Because the law says so. Tax and accounting records, mostly.
- Because it is reasonable and does not harm you. Things like keeping the service secure and stopping fraud.
- Because you said yes. Marketing is the main one, and you can take it back whenever you like.
Who else sees it
Only the people who need it to do a job for us. We do not sell your information.
| Who | What they get | Where they are |
|---|---|---|
| The seller you bought from | Your name and delivery address, so they can post the card. | South Africa |
| Pudo TO CONFIRM | Delivery address and contact details, to deliver the parcel. | South Africa |
| Payment provider TO CONFIRM | Whatever is needed to take payment and pay sellers. | TO CONFIRM |
| Your IP address, when fonts load. | United States | |
| Hosting and email tools TO CONFIRM | Whatever passes through them. | TO CONFIRM |
When information leaves South Africa
Some of the companies above are not in South Africa. POPIA lets us send your information abroad only where the receiving country or company protects it to a similar standard, or where you have agreed, or where it is needed to carry out your order.
TO CONFIRM Each processor outside South Africa needs checking against POPIA s72 before this page goes live. That is a real assessment, not a sentence.
How long we keep it
TO CONFIRM Retention periods per record type. POPIA says we may not keep personal information longer than we need it, except where the law makes us. Tax records are the usual reason to hold on to order data.
Your cookie choice sits on your device until you clear it.
Keeping it safe
We take reasonable steps to protect what we hold, and we expect the same from anyone handling it for us.
If information is ever compromised in a way that could harm you, POPIA requires us to tell you and the Information Regulator. We will.
What you can ask for
Under POPIA you may:
- Ask what personal information we hold about you, and get a copy.
- Ask us to correct or delete anything wrong or that we should not still have.
- Object to us using your information, where we are relying on it being reasonable rather than on your consent.
- Take back your consent for anything you agreed to.
- Complain to the Information Regulator.
Ask through our contact page. Objecting is free, and we will not make it difficult.
Marketing
We will only send you marketing if you asked for it, or if you have bought from us. Every message has a way to stop them, and stopping them will not affect your orders.
Children
Plenty of collectors are under 18. POPIA treats a child's information as needing extra care, and generally requires a parent or guardian's permission.
TO CONFIRM The minimum age for a Sleevr account, and how that is handled at signup. This needs a decision before launch, not a sentence after it.
Decisions made by computer
We do not make decisions about you automatically in a way that affects you legally or seriously. If that ever changes, this page changes first.
Cookies
Covered separately in the cookie policy. You can change your cookie choices at any time.
Changes
If we change how we handle your information, we will update this page and the date at the top, and tell you where the change is significant.
Complaints
Talk to us first through the contact page. If we do not sort it out, you can complain to the Information Regulator of South Africa at inforegulator.org.za.