Privacy Policy
Last updated: 15 September 2026
1. Introduction
Herbal Habits (Pty) Ltd ("Herbal Habits", "we", "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and services, in accordance with the Protection of Personal Information Act, 2013 (POPIA).
By using Herbal Habits, you acknowledge that you have read and understood this policy.
2. Who we are (Responsible Party)
Herbal Habits (Pty) Ltd is the "responsible party" for your personal information under POPIA.
- Registration number: 2026/302352/07
- Address: 37 Coral Road, Bloubergstrand, Cape Town
- Information Officer: Jean Du Plessis
- Contact: hello@herbalhabits.co.za
3. What personal information we collect
Depending on how you use our platform, we may collect:
- Account information: name, email address, password, and account type (shopper, store owner).
- Age verification: confirmation that you are 18 or older.
- Store owner information: business name, registration details, physical address, contact details, and listing content you provide.
- Payment information: processed securely by our payment provider (see section 7). We do not store your full card details.
- Usage information: how you interact with the platform, including pages viewed, searches, and stores saved.
- Location information: if you use our "Near Me" search, your device's precise location, used only to sort and filter stores by distance.
- Giveaway claim information: if you win a giveaway and choose delivery, the phone number and delivery address you provide so the store can arrange delivery.
- Reviews and content: reviews, ratings, and other content you submit.
- Technical information: IP address, device and browser type, and cookie data (see section 9).
4. How we use your personal information
We process your personal information to:
- Create and manage your account;
- Provide the directory, membership, and store-listing services;
- Process payments and manage subscriptions;
- Verify that users are 18 or older;
- Display reviews and store content;
- Sort and filter stores by distance when you use "Near Me";
- Arrange delivery of a prize you've won and chosen to have delivered;
- Communicate with you about your account, transactions, and (where you've opted in) marketing;
- Moderate content and enforce our Terms of Service and Content Guidelines;
- Comply with legal obligations;
- Improve and secure our platform.
5. Legal basis for processing
We process your personal information where: you have consented; it is necessary to perform our contract with you; it is required to comply with the law; or it is in our legitimate interests (such as securing and improving our platform), balanced against your rights.
6. When we share your information
We do not sell your personal information. We share it only:
- With our service providers (operators) who process data on our behalf, under written agreements (see section 7);
- With store owners, where you interact with their listing (for example, when you leave a review, your display name and review are shown publicly; or when you win and claim a giveaway prize requiring delivery, your phone number and delivery address are shared with that store so they can fulfil it);
- Where required by law, court order, or to protect our rights;
- In connection with a business transfer (such as a merger or sale).
7. Service providers (Operators)
We use trusted third-party operators to run our platform. Each processes personal information on our behalf under a written operator agreement, as required by POPIA:
- Supabase: database, authentication, and file storage;
- Vercel: website hosting and delivery;
- xneelo: domain and related hosting services;
- Peach Payments: payment processing (South African provider);
- Resend: transactional and notification emails;
- CARTO and OpenStreetMap: map tiles for our Find a Store map. Your browser loads these directly from CARTO's servers, which then see your IP address.
8. Cross-border transfers
Some of our operators process or store information on servers outside South Africa. Where personal information is transferred outside South Africa, we take reasonable steps to ensure it receives a level of protection consistent with POPIA, including through operator agreements and reliance on the transfer conditions in section 72 of POPIA.
9. Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences (such as confirming you are 18 or older), and understand how the platform is used. You can control or disable cookies through your browser settings. Some features, including staying signed in and the age gate, will not work correctly if cookies are disabled.
10. How long we keep your information
We keep your personal information for as long as your account is active and as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, we securely delete or de-identify it.
11. Your rights under POPIA
You have the right to:
- Be notified about how your information is processed;
- Access the personal information we hold about you;
- Request correction or deletion of your information;
- Object to processing in certain circumstances;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with the Information Regulator. To exercise any of these rights, contact our Information Officer at hello@herbalhabits.co.za.
12. Security
We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, and misuse. In the event of a data breach affecting your information, we will notify you and the Information Regulator as required by law.
13. Children
Herbal Habits is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18.
14. Changes to this policy
We may update this policy from time to time. We will post the updated version here and update the "last updated" date. Significant changes will be communicated to you.
15. Contact & complaints
For any privacy questions or to exercise your rights, contact our Information Officer:
- Email: hello@herbalhabits.co.za
You also have the right to complain to the Information Regulator (South Africa):
- Website: inforegulator.org.za
- Email: POPIAComplaints@inforegulator.org.za