Privacy Policy
Last updated: 18 September 2026
1. Who we are
This website, vanesmari.com (“the Website”), is owned and operated by VANES MARI (PTY) LTD (“we”, “us”, “our”), a private company registered in the Republic of South Africa under registration number 2026/137169/07.
Our registered address is 1406 Chard Road, Langebaan Country Estate, Langebaan, Western Cape, 7357.
We are the “responsible party” for the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA) in respect of the personal information described in this policy.
2. What this policy covers
This policy explains what personal information we collect from you, why we collect it, what we do with it, how long we keep it, and what rights you have over it. It applies to the Website and to any order you place through it.
3. What information we collect
Information you give us
- Name and surname
- Email address
- Telephone or mobile number
- Delivery and billing address
- Order history
- Any message you send us through a contact form or by email
Information collected automatically
- IP address
- Browser type and device type
- Pages visited, and the date and time of each visit
- Cookie data (see section 8)
What we do not collect
We do not collect or store your card number, expiry date or CVV. Card payments are processed by our payment provider, Yoco, on their own secure systems. Your card details are transmitted directly to them and never pass through or rest on our servers.
4. Why we collect it
| What we use it for | Why we are allowed to |
|---|---|
| Processing and fulfilling your order | Necessary to perform our contract with you |
| Arranging delivery and letting the courier contact you | Necessary to perform our contract with you |
| Sending order confirmations and delivery updates | Necessary to perform our contract with you |
| Handling returns, refunds and complaints | Contract, and compliance with the Consumer Protection Act |
| Keeping accounting and tax records | Legal obligation |
| Marketing emails | Only with your consent, which you may withdraw at any time |
| Improving the Website | Our legitimate interest in running our business |
| Preventing fraud | Legitimate interest, and legal obligation |
5. Who we share it with
We share your personal information only where necessary, and only with:
- Yoco Technologies (Pty) Ltd — our payment provider, to process card payments
- Our courier partners — your name, delivery address and contact number, so your parcel can be delivered
- Our website hosting provider
- Our accountant or bookkeeper — for financial record-keeping
- A regulator, court or law enforcement body — where legally required
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
6. Sending information outside South Africa
Some of our service providers may store or process information on servers outside South Africa. Where this happens, we will only transfer your personal information to a country or recipient subject to a law, binding agreement or corporate rules providing adequate protection, in line with section 72 of POPIA.
7. How long we keep it
- Order and transaction records: five years from the end of the financial year in which the transaction took place, as required by South African tax legislation
- Customer account details: while your account is active, and for 12 months after it becomes inactive
- Marketing consent records: until you withdraw consent, and for a reasonable period afterwards
- Website analytics data: 26 months
8. Cookies
The Website uses cookies to make the site work and to understand how it is used.
- Strictly necessary cookies keep your shopping basket and login session working. The Website cannot function without them.
- Analytics cookies tell us how many people visit and which pages they view.
- Marketing cookies may be used to measure advertising performance.
You can block or delete cookies through your browser settings. If you block strictly necessary cookies, parts of the Website — including checkout — will stop working.
9. How we protect your information
- An SSL/TLS certificate encrypting all data sent between your browser and the Website
- Card data handled entirely by our PCI-DSS compliant payment provider, never by us
- Access to customer data restricted to those who need it
- Regular software and security updates
No system is completely secure. If a breach occurs that creates a real risk of harm to you, we will notify you and the Information Regulator as required by section 22 of POPIA.
10. Your rights
Under POPIA you have the right to:
- Be told what personal information we hold about you
- Request a copy of that information
- Correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained
- Object to us processing your information, on reasonable grounds
- Withdraw consent to marketing at any time
- Complain to the Information Regulator
- Not be subject to a decision based solely on automated processing
To exercise any of these, email us at info@vanesmari.com. We will respond within a reasonable time and may ask you to verify your identity first.
11. Information Officer
Our Information Officer is Vanes-Mari du Toit, contactable at info@vanesmari.com.
12. Complaints to the Regulator
If you are unhappy with how we have handled your personal information, you may complain to:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za
Website: inforegulator.org.za
13. Changes to this policy
We may update this policy from time to time. The version in force is always the one published on this page, and the date at the top shows when it was last changed.
14. Contact us
VANES MARI (PTY) LTD
Registration number: 2026/137169/07
1406 Chard Road, Langebaan Country Estate, Langebaan, Western Cape, 7357
Email: info@vanesmari.com