Privacy Policy
Last updated: 14 July 2026
This policy explains what personal information AfricanSpring ("we", "us") collects when you use this website or place an order, why we collect it, and your rights. We process personal information in line with South Africa's Protection of Personal Information Act, 2013 (POPIA).
Who is responsible
The responsible party is AfricanSpring, operating in Belgrade and Pongola, KwaZulu-Natal, South Africa.
- Information Officer: [name to confirm]
- Email: order@africanspring.co.za
- Phone / WhatsApp: +27 83 375 1151
What we collect
- Information you give us to order: your name, phone number, and any order details you type (products, quantities, delivery address, notes). This is collected through the contact form on this site, through WhatsApp when you message us, and through our order portal at order.africanspring.co.za.
- Account information (order portal only): if you create a portal account, we store your phone number and a securely hashed password.
- Technical information: like any website, our hosting provider keeps standard server logs (such as IP address and request time) for security and reliability. We do not use advertising or analytics tracking, and we do not set tracking cookies.
Why we use it, and our lawful basis
We use your information only to receive and fulfil your order, to contact you about it (for example to confirm, arrange delivery or follow up on payment), and to keep a record of the orders for our business. Our lawful basis under POPIA is that processing is necessary to carry out the transaction you have asked for, together with your consent, which you give by submitting the form or sending the order.
Who we share it with
We do not sell your information. We share it only with the service providers ("operators") needed to run the service:
- WhatsApp / Meta — when you choose to send your order over WhatsApp, your message is handled by WhatsApp under its own privacy terms.
- Our hosting and order system (Render) — orders and portal accounts are stored in our order application, hosted on Render's infrastructure.
- Google Fonts — this site loads fonts from Google, which receives your IP address to serve them.
- OpenStreetMap — the delivery-area map loads from OpenStreetMap, but only after you click to load it. If you don't click, it isn't contacted.
Some of these providers may process data outside South Africa. POPIA permits this where the provider is subject to comparable data-protection safeguards.
How long we keep it
We keep order information for as long as needed to serve you and to meet our business and legal record-keeping needs, and then delete or anonymise it. [Confirm a specific retention period, e.g. 24 months after your last order.]
How we protect it
Access to the order system is password-protected and limited to authorised people. Portal passwords are stored hashed, not in plain text. Connections to the site and portal are encrypted over HTTPS.
Local storage on your device
This site stores a copy of the product list in your browser's local storage so pages load quickly on return visits. This is not personal information and is not shared with us or anyone else; you can clear it any time through your browser.
Your rights
Under POPIA you may ask us to confirm what information we hold about you, to correct or delete it, and you may object to our processing it. To exercise any of these, contact us using the details above. You also have the right to complain to the Information Regulator (South Africa): inforegulator.org.za, email POPIAComplaints@inforegulator.org.za.
Children
This service is intended for adults placing orders. We do not knowingly collect information from children.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.
Questions about this policy? Email order@africanspring.co.za.