PRIVACY NOTICE / 26 SEPTEMBER 2026
Your data has a purpose.
InstruTech Marketplace (Pty) Ltd is responsible for personal information used to operate this marketplace. For privacy questions, contact b54848633@gmail.com.
1. Information we collect
We collect account details, contact information, consent records, cart contents, orders, delivery addresses, reviews, order messages and support requests. Sellers also provide business information, return addresses and verification documents. Password authentication is handled by Supabase Auth. We do not receive your Google password or store card details.
2. Why we use it
We process necessary information to provide accounts, manage orders, verify sellers, communicate about transactions, prevent fraud, resolve disputes and meet legal obligations. Optional marketing requires a separate choice and can be changed in your account. You can buy or sell without consenting to marketing.
3. Who receives information
A seller receives the buyer details needed to fulfil that seller’s order, including the delivery address and contact number. Sellers cannot see other sellers’ orders. Public storefronts, live listings and published reviews are visible to visitors. Verification documents and private order conversations have restricted access. The owner can review information needed to operate and protect the marketplace.
Service providers may process information for hosting, authentication, storage and email under appropriate arrangements. The application uses Supabase for authentication and data storage. Hosting and email providers must be configured before launch; cross-border processing may occur depending on the chosen region. Appropriate safeguards must be maintained for transfers under POPIA.
4. Cookies and local storage
Authentication cookies keep you signed in. Local storage remembers your chosen light or dark theme. The marketplace does not require advertising trackers or analytics cookies to work.
5. Retention and security
We retain information for the purposes described and for applicable accounting, fraud-prevention, legal and dispute obligations. Access controls separate buyer, seller and owner data. Owner access requires Google sign-in and an additional authenticator step in production. No system can guarantee absolute security; report suspected unauthorised access promptly.
6. Your choices and requests
You may request access, correction, export or deletion and may object to qualifying processing. Submit a request in My account or contact us by email. We may verify your identity before releasing information. Some records may need to be retained where the law permits or requires it; we will explain the outcome of your request.
7. Complaints
Contact us first so we can investigate. You may also contact South Africa’s Information Regulator about your rights under POPIA.
8. Updates
We will publish material changes to this notice and update its date. Consent choices and terms acceptances are logged with their version and time.