POPIA Notice

Under the Protection of Personal Information Act, 4 of 2013 (POPIA), Spaza Shop (Pty) Ltd is the Responsible Party for your personal information.

Why we ask for your ID number

We collect your South African ID number to:

• Confirm you are a real person and eligible to trade in South Africa (Know-Your-Customer).
• Prevent duplicate accounts and marketplace fraud.
• Comply with financial and tax obligations tied to marketplace payments.

How we protect it

Your ID number is never stored in plain text. It is transformed into a one-way SHA-256 hash before being written to the database. We keep only:

• The hash (for uniqueness checks)
• The last 4 digits (for support verification)
• The extracted date of birth, gender, and citizenship class

Your consent

By ticking the POPIA consent box during signup, you consent to the processing described above and in our Privacy Policy. You can withdraw consent at any time by emailing privacy@spazashop.co.za, though we may still need to keep some records to comply with law.

Information Officer

Contact our Information Officer at privacy@spazashop.co.za. You may also complain to the Information Regulator (South Africa) at inforegulator.org.za.