Privacy Policy

Who we are

Pots For Grabs is a South African business based in Krugersdorp, Gauteng, manufacturing GRC fiber-cement planters. We can be reached at info@potsforgrabs.co.za.

What information we collect

• Contact details: name, email, phone number, delivery address.
• Order history: what you bought, when, and where it was delivered.
• Account preferences: loyalty tier, saved addresses, marketing opt-in.
• Payment data: processed by Paystack — we never see or store your card number.
• Anonymous analytics: page visits and aggregate traffic stats via Vercel Analytics. No personally identifying tracking.

Why we collect it

• To process and deliver your orders.
• To send you order confirmations, payment instructions, and delivery updates.
• To run our loyalty programme and apply tier discounts at checkout.
• To send promotional emails — only when you have opted in. You can unsubscribe at any time using the link at the foot of every promotional email.
• To recover abandoned carts (one reminder email, then we stop).
• To meet our legal record-keeping obligations as a business.

Who we share it with

We share only what is strictly necessary, with:

• Paystack — to process card payments.
• Resend — to deliver our transactional and promotional emails.
• Supabase — to host our database and authentication.
• Vercel — to host this website.
• Couriers — for delivery, only the address and contact details required.

We do not sell your information to third parties. Ever.

Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you.
• Correct or update any of it.
• Ask us to delete your account and all associated data.
• Withdraw consent for marketing at any time.
• Lodge a complaint with the Information Regulator if you believe we have mishandled your data.

To exercise any of these rights, email info@potsforgrabs.co.za with your request. We will respond within 30 days.

How long we keep it

We keep your account and order data for as long as you have an account with us, plus the period required by South African tax and consumer-protection law (typically 5 years after your last order). On request, we will delete everything not legally required to retain.

Security

All connections to this site are encrypted (HTTPS). Authentication is handled by Supabase using industry-standard practices. We never receive or store your card details — Paystack handles those directly.

Cookies

We use a small number of strictly necessary cookies to keep you signed in and to remember your cart between visits. We do not use advertising or third-party tracking cookies.

Changes to this policy

If we materially change how we handle your data, we will email registered customers and update the date at the top of this page. Your continued use of the site after such an update means you accept the revised policy.