Privacy / POPIA Policy
This policy explains what personal information Dreyersrus Boerdery collects, why we collect it, who we share it with, and what rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).
Who is responsible
Dreyersrus Boerdery is the responsible party for your personal information. Our Information Officer can be reached at info@dreyersrus.co.za.
What we collect
When you register: your name and surname, e-mail address, contact number for calls, WhatsApp number if you give one, and your physical address.
If you use the address lookup or "use my location", we also store the map coordinates of your address. This is what lets us work out your delivery fee.
When you order: what you bought, the delivery address, your preferred date, any notes you send us, and the invoices and delivery notes raised against the order.
Automatically: your language preference and the session information needed to keep you signed in and to hold your basket.
We do not collect or store your card details. Card payments are handled entirely by PayFast.
Why we use it
To create and manage your account, and to let you sign in.
To take, pack, price and deliver your order, and to raise the invoice and delivery note for it.
To contact you about your order by e-mail or WhatsApp, according to the contact preference you chose.
To work out the delivery fee for your address.
To keep the accounting and tax records the law requires us to keep.
To send you news and specials, but only if you ticked that box. You can opt out at any time.
On what legal basis
Mostly because it is necessary to perform the contract between us when you place an order, and because we have a legitimate interest in running the farm shop.
For marketing, on your consent alone.
For accounting and tax records, because the law obliges us.
Who we share it with
PayFast, to process card payments.
Google, when you use the address lookup or the map. Your search text and, if you allow it, your location are sent to Google Maps Platform under Google's own privacy terms.
Meta (WhatsApp), where you have chosen WhatsApp as a contact method, so we can send you order messages.
Our e-mail provider, to deliver order confirmations and invoices.
SARS or another authority, where the law requires it.
We do not sell your personal information, and we do not share it for anyone else's marketing.
Sending information outside South Africa
Some of the services above (Google and Meta in particular) process data outside South Africa. We rely on their contractual safeguards, which POPIA permits.
How long we keep it
Your account details stay for as long as your account is open.
Order, invoice and payment records are kept for at least five years, as tax law requires.
If you ask us to delete your account, we delete what we are not obliged to keep.
How we protect it
The site is served over HTTPS, passwords are stored hashed and never in readable form, and access to the admin panel is restricted.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.
Your rights
You may ask what personal information we hold about you, and ask for a copy.
You may correct anything that is wrong. Most of it you can edit yourself under My account.
You may ask us to delete information we are not required to keep.
You may object to us using your information for marketing, and withdraw consent at any time.
To exercise any of these, contact us at info@dreyersrus.co.za.
Complaints
If you are unhappy with how we handled your information, please raise it with us first at info@dreyersrus.co.za.
You may also complain to the Information Regulator of South Africa at enquiries@inforegulator.org.za.
Cookies
We use only the cookies the site needs to work: one to keep you signed in and hold your basket, and one to remember your language. We do not use advertising or tracking cookies.
Questions about this policy
Contact Dreyersrus Boerdery at info@dreyersrus.co.za.
These terms are provided in good faith and do not limit any right you have under the Consumer Protection Act 68 of 2008.