Effective 7 October 2026
This policy explains how Curtfire processes personal information under the Protection of Personal Information Act, 2013 (POPIA).
We collect account and contact details; delivery and billing addresses; order, payment status and refund records; customer support messages; device, security and usage data; and marketing preferences. Seller applicants also provide identity, business, registration, banking and verification information.
We use information to create accounts, process orders and payments, calculate delivery, enable vendors and couriers to fulfil orders, prevent fraud, provide support, comply with tax and legal duties, improve the service, and send marketing where permitted.
Processing is based on performance of a contract, legal obligations, consent where required, and legitimate interests such as service security, fraud prevention and marketplace administration.
We share only what is needed with the vendor fulfilling an order, payment processors, delivery providers, hosting and communications providers, professional advisers, regulators and law enforcement where lawfully required. Vendors may use customer order data only to fulfil and support the relevant order.
Some service providers may process information outside South Africa. We use lawful safeguards and require an adequate level of protection where POPIA requires it.
We retain records only as long as needed for the stated purpose, legal obligations and disputes. We use access controls, encryption in transit, monitoring and restricted document access. No internet system can be guaranteed completely secure.
You may ask whether we hold your information, request access or correction, object to certain processing, withdraw consent, request deletion where legally available, and complain to the Information Regulator. Some records must be retained by law.
We use essential cookies for login, carts, security and checkout, and may use analytics or advertising technologies subject to applicable consent requirements and browser controls.
For privacy requests contact the Curtfire Information Officer at privacy@curtfire.co.za. We may verify your identity before releasing or changing information.