Last updated: 8 September 2026
Welcome to Spotshop.
Before using our website or services, please take a moment to read this Privacy Policy. By continuing to browse, interact with, or use this site, you confirm that you've read and agree to this policy. If you do not agree with any part of it, please do not use the website or our services.
We're committed to protecting your privacy. This policy explains how we collect, use, store, share, and protect your personal information, in accordance with South Africa's Protection of Personal Information Act No. 4 of 2013 ("POPIA") and, where it applies to you, the European Union's General Data Protection Regulation ("GDPR").
For the purposes of POPIA, Spotshop acts as the responsible party (and, in some instances, as an operator) in respect of the personal information we process. POPIA applies to us because we are based in the Republic of South Africa and process personal information here by both automated (computer) and non-automated (paper/filing) means.
Who We Are & How to Contact Us
Spotshop ("we", "us", "our")
- Website: spotshop.co.za
- Email: sales@spotshop.co.za
- Phone: Chris (082 455 7157) / Martin (084 882 5566)
- Address: Durbanville, Cape Town, South Africa, 7550
Our Information Officer handles privacy queries and can be reached at sales@spotshop.co.za. If you have any questions about this policy, or you want to exercise any of your rights, please contact us using the details above.
Application
This policy applies to you when you visit our website, use our online store, subscribe to our communications, or purchase products or services from us — whether directly or through our online store.
Our Commitment to Your Privacy
At Spotshop, we balance our business operations with your right to privacy. We collect only what's necessary, store it securely, and use it responsibly. We don't sell your personal data, and we take every reasonable measure to keep it safe from unauthorised access.
What Personal Information We Collect
We may collect the following categories of personal information.
Information you give us. When you register, place an order, contact us, or otherwise interact with us, we may collect:
- Full name and surname
- Email address
- Delivery and/or postal address
- Phone number
- Company or business name
- Username and password (if you create an account)
Payment information. Where you make a purchase, payment is processed securely by our third-party payment gateway. We do not store your full card or banking details on our systems — these are handled by our PCI-compliant payment provider.
Information we collect automatically. When you visit our website or use our online store, we automatically collect certain technical information through cookies and similar technologies, including your IP address, browser type and version, operating system, device information, referring pages, and how you use and move through our site. We use this to display our site correctly, keep it secure, understand and improve how it performs, and support our marketing (see Cookies & Analytics below).
We only collect and use your information with your consent, to fulfil a contract with you, to meet a legal obligation, or where we have a legitimate interest to do so. We will never collect special or sensitive personal information without your clear permission.
How We Collect It
- Automatically — through cookies and similar technologies when you visit our website or online store.
- On registration or submission — when you create an account or submit information through our site for the first time.
- Through an order — when you buy products or services from us.
- Voluntarily — when you choose to give us optional information (for example, when you contact us or sign up to our newsletter).
Your obligations. You may only send us your own personal information, or someone else's personal information if you have their permission to do so.
How We Use Your Information
We use your personal information to:
- Process your orders, take payment, and deliver your products
- Communicate with you about your orders, your account, and service updates
- Send you promotional messages where you have opted in (see Direct Marketing below)
- Provide you with relevant, and in some cases automated, targeted content
- Improve your customer experience and our website
- Keep our website and your data secure
- Meet our legal, tax, and compliance obligations
We keep your personal information as accurate, complete, and up to date as we reasonably can, and may ask you from time to time to update it.
Legal Basis for Processing
Under POPIA and GDPR, we rely on one or more of the following: your consent; the need to perform a contract with you (such as fulfilling your order); our compliance with a legal obligation; and our legitimate interests in running and improving our business, provided these do not override your rights.
Cookies & Analytics
We use cookies and similar technologies for several purposes:
- Essential cookies that make the website and checkout work.
- Analytics cookies that help us understand how visitors use our site so we can improve it.
- Advertising and marketing cookies, including the Meta (Facebook) Pixel, which help us measure and deliver relevant advertising.
Some of these are non-essential and are only used where you have consented. You can accept or decline non-essential cookies through our cookie banner (where shown) and can manage or delete cookies at any time through your browser settings — though some features may not work correctly if you disable essential cookies. Some of our partners set their own cookies, which are governed by their own privacy policies.
Direct Marketing
We will only send you promotional messages if you have opted in to receive them. In line with POPIA, we may send you a single message inviting you to opt in. You can unsubscribe or withdraw your consent to marketing at any time using the link in our messages or by contacting us.
Who We Share Your Information With
We do not sell your personal information. We may share it with the following categories of recipient, only as far as necessary:
- Service providers who help us operate, including our e-commerce platform (Shopify), our payment gateway, our courier and delivery partners, and our email/newsletter provider (Mailchimp).
- Advertising and analytics partners, such as Meta (Facebook), in connection with the cookies described above.
- Our personnel, who access your information only to do their jobs and are required to keep it confidential.
- Third parties where required by law, such as a court order or a request from a competent authority.
- A new owner, if our business is sold or transferred, in which case your information may be transferred as part of that change of ownership.
We require anyone we share your personal information with to protect it in line with this policy and applicable law. We will never sell or make your personal information available to any third party other than as set out in this policy.
Cross-Border Transfers
Some of the service providers above (for example, Shopify and Meta) store or process data on servers outside South Africa. Where we transfer your personal information to another country, we take reasonable steps to ensure it continues to receive an adequate level of protection, in line with POPIA and, where applicable, GDPR.
Retention
We keep your personal information only for as long as necessary to fulfil the purposes described in this policy — including to meet our obligations to you and to comply with legal, accounting, or reporting requirements — after which we securely delete or anonymise it.
Security
We take the security of personal information seriously. Our website and online store are hosted in a secure environment that uses firewalls and other measures to guard against unauthorised access, and we continually review and upgrade our safeguards. However, please bear in mind that no method of transmission over the internet or electronic storage is completely secure, so while we use commercially reasonable measures to protect your information, we cannot guarantee its absolute security.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction or deletion of your data
- Withdraw your consent at any time
- Object to processing, including direct marketing
- Request restriction of processing
- Request portability of the data you provided (GDPR)
- Lodge a complaint with the relevant regulator
To exercise any of these rights, contact us using the details above. We will take reasonable steps to verify your identity before acting on your request, and will respond within the timeframes required by law. A request for access to information may be subject to a legally allowable fee.
If you are not satisfied with how we handle your information, you may complain to the Information Regulator (South Africa) — www.inforegulator.org.za. If GDPR applies to you, you may also complain to your local European data protection authority.
Access to Information (PAIA)
Our manual prepared under section 51 of the Promotion of Access to Information Act, 2000 (PAIA) is available on request by contacting us using the details above.
Children's Privacy
Our website and products are intended for adults. We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian. If you believe we have collected a child's information, please contact us and we will delete it.
Third-Party Links
Our website may link to third-party platforms (for example, social media, couriers, or payment providers). We are not responsible for their privacy practices, so we encourage you to review their policies before sharing any information with them. If you disclose your personal information to a third party — such as a linked website — we cannot be held liable for how that third party uses it.
Changes to This Policy
We may update this policy from time to time. When we do, we'll change the "last updated" date above and, where appropriate, notify you through our website, our online store, or by email. If you continue to use our website or services after a change, the updated policy applies to you.
Acceptance
By using our website, our online store, or by purchasing our products or services, you confirm that you have read, understood, and accepted this Privacy Policy.
If you have any questions about this policy or how we handle your personal information, please email us at sales@spotshop.co.za.