Privacy Policy

Last updated: 8 October 2026

Sweet Mary Jane ("we", "us", "our") respects your privacy. This policy explains what personal information we collect when you use our website and order from us, why we collect it, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

1. Information we collect

  • Order details: your name, WhatsApp number, delivery address, the products you order, any notes you add, and how you heard about us (optional).
  • WhatsApp conversations: when you send your order, we receive your WhatsApp number, profile name and the messages you send us, including payment confirmations.
  • Account details (optional): if you create an account, your name, email address and a securely hashed password.
  • Technical data: basic information your browser sends, such as device type and pages visited, used to keep the site secure and working.

We do not collect or store card details. Payment details are shared with you in the WhatsApp chat.

2. Why we use it

  • To confirm, prepare and deliver your order.
  • To talk to you about your order, payment and delivery on WhatsApp.
  • To confirm that customers are 18 or older.
  • To keep records we are legally required to keep, and to prevent fraud and abuse.
  • To understand, in aggregate, how the site is used so we can improve it.

We only send marketing messages if you ask to receive them, and you can opt out at any time by replying "STOP".

3. Cookies and analytics

We only use essential cookies and browser storage: to remember that you confirmed you are 18+, to keep your cart, and to keep you signed in if you have an account. We use Vercel Web Analytics to count visits. It does not use cookies, does not track you across other websites and does not identify you personally.

4. Who we share it with

We never sell your information. We only share it with service providers that help us run the store, and only as much as they need:

  • WhatsApp (Meta): to receive your order and chat with you.
  • Couriers: your name, number and address, to deliver your parcel.
  • Hosting and storage (Vercel): to run the website and store order records.

Some of these providers store data outside South Africa. We only use providers that protect personal information to a standard comparable to POPIA. We may also disclose information where the law requires it.

5. How long we keep it

We keep order records for as long as needed to fulfil your order and meet our tax and accounting obligations (generally five years). After that we delete or anonymise them.

6. Keeping it safe

The site runs over HTTPS, passwords are hashed, and access to order records is limited to our team. No online service is completely secure, but we take reasonable steps to protect your information and will let you and the Information Regulator know if a breach affects you.

7. Your rights

Under POPIA you may ask us to:

  • tell you what personal information we hold about you;
  • correct or update it;
  • delete it, where we are not required to keep it;
  • stop sending you marketing messages.

To make a request, contact us through our Contact page. If you are unhappy with how we handled your information, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

8. Age

Our store is for adults 18 and older. We do not knowingly collect information from anyone under 18.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.