Privacy Policy

Last updated: June 2026

MrsCrafty ("we", "us") respects your privacy. This policy explains what personal information we collect through mrscrafty.co.za, why we collect it, and your rights under the Protection of Personal Information Act 4 of 2013 (POPIA).

What We Collect

• Account details — name, email address and password (stored as a secure hash) when you register.
• Order details — name, email, phone number, shipping/billing address and the items you purchase.
• Payment — payments are processed by PayFast. We never see or store your card number; we receive only a payment reference and confirmation.
• Stock alerts & newsletter — your email address, if you opt in.
• Technical data — our hosting provider keeps standard server logs (IP address, pages requested) for security and troubleshooting.

Cookies & Local Storage

• A session cookie keeps you signed in while you browse.
• Your shopping cart is stored in your own browser (local storage) and, if you're signed in, saved to your account so it follows you between devices.
• We do not run third-party advertising or tracking cookies.

How We Use Your Information

• To process and deliver your orders and send order-related email.
• To operate your account, including password resets and optional two-factor authentication.
• To notify you about stock (only if you asked us to) and send newsletters (only if you opted in — every email contains an unsubscribe link).
• To keep the site secure, including rate-limiting login attempts.

Sharing

We share personal information only with service providers needed to fulfil your order: PayFast (payment processing), our courier partners (delivery details), and our hosting provider (where the site and database run). We never sell your information.

Retention

Order records are kept as required by South African tax and consumer legislation. Account data is kept until you ask us to delete it.

Your Rights (POPIA)

• You may request access to, correction of, or deletion of your personal information.
• You may object to direct marketing at any time (or simply use the unsubscribe link).
• You may lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email irene@mrscrafty.co.za.

Security

The site is served over HTTPS, passwords are stored using strong one-way hashing, payment pages are handled by PayFast, and administrative access is protected with two-factor authentication.

Changes

We may update this policy from time to time; the "last updated" date above reflects the current version.