Privacy and cookies

Last updated: 28 October 2026

This notice explains how the business operating Takealot handles personal information when you browse, contact us, create an account or place an order. We are responsible for the purposes for which we use your information. Our business identity and contact details appear below and on our Contact page.

Who to contact

Trading name

Takealot

Privacy email

Takee.alot@gmail.com

You may send a privacy request through the contact form, marked “Privacy / Information Officer”. We may ask for proportionate information to verify your identity before releasing or changing personal information. Please do not send a full card number, account password or unnecessary identity documents.

Information we use and where it comes from

• Information you provide: your name, contact details, delivery and billing addresses, order choices, account details, messages, return requests and any information you choose to send us.
• Transaction and service information: order records, payment references and status, delivery updates, refund records and relevant verification information from Shopify, the payment service used and delivery or support partners.
• Technical information: device and browser information, internet protocol address, security logs and information needed to operate your shopping session. Cookies and similar tools may collect information as described below.
• Optional tools, if enabled: analytics, advertising or connected-service interactions may provide additional browsing and campaign information, subject to the choices and notices applicable to those tools.

Fields marked as required are needed for the stated transaction or service. If you do not supply necessary contact, delivery or payment information, we may be unable to process or deliver an order. Marketing choices are optional and do not determine whether you may shop with us.

Why we use it

• To answer questions and take steps you request before a purchase, and to process payment, supply goods, deliver orders and handle returns under our contract with you.
• To maintain required transaction and accounting records, meet legal obligations and respond to lawful requests.
• To keep the store secure, prevent and investigate fraud, resolve disputes and operate and improve our service where the lawful interests involved justify the processing and your rights are respected.
• To send optional promotional messages or use optional tracking where the required permission or other applicable lawful basis exists.

We use information for a defined purpose and limit it to what is reasonably needed. Accepting our terms or merely using the website is not, by itself, consent to optional electronic marketing.

Shopify and other recipients

Shopify provides the platform for this online store and processes customer information to supply its commerce services. For core services it processes information for merchants under its Data Processing Addendum. Certain Shopify services have a separate role: if services such as Shop, Shop Pay or applicable enhanced services are used or enabled, Shopify may process information for its own purposes as explained in its Consumer Privacy Policy.

We share information as needed with the payment provider chosen at checkout, delivery and fulfilment providers, support or technical providers we use, professional advisers and authorities where legally required. Operators acting for us must handle it on authorised instructions with appropriate confidentiality and security safeguards. Installed third-party services have their own roles and notices where relevant; we do not claim that every optional integration is active on this store.

Cookies and similar technologies

Necessary cookies and related storage support functions such as the cart, checkout, account access, security and your selected preferences. Blocking them can prevent parts of the store from working. Shopify describes its platform cookies in its Cookie Policy.

If optional analytics, advertising or social-media tools are enabled, they may measure visits or advertising interactions and may involve the named service providers. We must provide the appropriate information and obtain consent where required before using those tools. Use the privacy or cookie choices made available on the site to review or change an available choice. You may also use your browser settings to remove or block cookies; those settings do not automatically send an unsubscribe request for email or SMS marketing.

Promotional messages

Electronic marketing is sent only where permitted by POPIA. Where we rely on your consent, you can withdraw it. If we rely on the existing-customer rule, we use contact details obtained during a sale for our own similar products or services and give you an easy, free opportunity to object when details are collected and in each marketing message.

You can use the unsubscribe option in a message or contact us to object. We keep the minimum information needed to respect that choice. Service messages about an order, refund or important security matter may still be necessary. We do not treat silence, failure to opt out, or a preselected marketing box as your consent.

International processing

Shopify and other providers may process information outside South Africa. Shopify operates internationally, including in Canada and the United States; its Privacy Policy explains international transfers. Before we transfer information, we must have an appropriate basis under section 72 of POPIA, such as binding safeguards providing adequate protection or another applicable statutory ground. Contact us if you need more information about a particular provider or transfer.

Security and retention

We use reasonable organisational and technical safeguards appropriate to the information and the risks. Access is limited to those who need it for their duties. If a security compromise triggers a legal notification duty, we will notify the Information Regulator and affected people as required by law.

We retain records for as long as reasonably needed for the stated purpose, applicable record-keeping duties and legitimate disputes or claims. Once there is no lawful reason to retain information, it must be deleted, de-identified or otherwise dealt with as the law requires. A deletion request does not require us to erase records that we are legally obliged to keep; we will explain any restriction that applies.

Your choices and rights

Subject to applicable law, you may ask whether we hold information about you, request access, seek correction of inaccurate information, request deletion where appropriate, object to qualifying processing, withdraw consent, or complain about how information has been handled. You may also ask for a review where an automated decision affecting you falls within the protections of POPIA. We will explain the process, any lawful identity checks and any permitted fee before it applies.

We do not knowingly seek children’s information without an appropriate lawful basis and, where required, the permission of a competent person. A parent or guardian can contact us about information a child has supplied.

Complaints and updates

You may contact us first, but you do not have to give up a right to complain to the Information Regulator. The Regulator’s current complaints information is at inforegulator.org.za/complaints. Privacy complaints may be sent to POPIAComplaints@inforegulator.org.za; its telephone number is 010 023 5200. Current contact and address details are at inforegulator.org.za/contact-us.

We may update this notice when our practices or legal requirements change. Material changes and new processing purposes will be explained as appropriate; an update does not retrospectively supply consent that was required.