Privacy policy
This policy explains what personal information madamemasala.co.za collects, why, and what you can do about it. It is written to meet the Protection of Personal Information Act 4 of 2013 (POPIA).
Who is responsible
[PLACEHOLDER — registered business name and address, and the name and email address of the Information Officer registered with the Information Regulator. POPIA requires both before the site processes live orders.]
What we collect
When you order: your name, email address, delivery address, phone number and order history. We need these to take payment and deliver the parcel.
When you pay: your card details go directly to our payment provider. They do not reach our server and we cannot see them.
When you subscribe: your email address, and the spices and schedule you chose.
When you visit: your IP address, browser type and the pages you opened, through cookies. See below.
Why we may keep it
We process your information to fulfil the contract when you buy something, to meet our legal obligations — SARS requires invoices to be kept for five years — and, where you have agreed, to send you marketing email.
We do not sell your information to anyone.
Who else sees it
Our courier gets your name, address and phone number so they can deliver. Our payment provider gets what it needs to take the payment. Our email provider stores your address if you subscribed. Nobody else.
[PLACEHOLDER — name the courier, payment gateway and email provider once chosen, as POPIA requires operators to be identified.]
How long we keep it
Order and invoice records: five years, as tax law requires. Marketing subscriptions: until you unsubscribe. Account details: until you ask us to delete the account.
Your rights
You may ask us what we hold about you, ask us to correct it, ask us to delete it, or object to us using it for marketing. Email hello@madamemasala.co.za and we will respond within 30 days.
If you are not satisfied, you may complain to the Information Regulator at enquiries@inforegulator.org.za.
Cookies
The shop uses cookies to keep your basket between pages and to keep you signed in. These are necessary for the site to work and cannot be switched off without breaking checkout.
[PLACEHOLDER — if Google Analytics, Meta Pixel or any other tracking is added later, list it here and add a consent banner. None is installed at present.]
Security
The site runs over HTTPS. Passwords are stored hashed. Card details never touch our server.
Changes
If this policy changes materially we will say so on this page and date the change.
Last updated: 17 August 2026.