Privacy Policy

Yews is the responsible party for your personal information under the Protection of Personal Information Act, 2013 (POPIA). Our Information Officer is [Information Officer name], reachable at [privacy@yourdomain].

• Account details — your name, email address and password (stored only as a secure hash), or your Google profile name, email and photo if you sign in with Google.
• Profile and store — your avatar, store name, bio, and the listings, photos and videos you post.
• Addresses and contact numbers — the delivery and collection addresses you save (including the building type and details you add) and phone numbers needed for deliveries.
• Orders and payments — what you buy and sell, amounts, delivery choices and tracking. Card and other online payments (such as instant EFT) are handled by Peach Payments; we receive a payment reference and outcome, never your full card number.
• Payout details — the bank, account number and account holder name you enter for withdrawals.
• Messages and reviews — chats with other users and the reviews you write or receive.
• Device and usage information — push-notification subscriptions you allow, and technical logs (such as IP address, browser type and error reports) kept to run and secure the service.

• to create and secure your account and keep you signed in;
• to show your listings, store and reviews to other users;
• to process payments, hold funds until delivery is confirmed, handle refunds and send payouts;
• to book deliveries and share tracking updates;
• to deliver your messages and send notifications and emails about your orders, sales and account;
• to prevent fraud and abuse, resolve disputes, and enforce our Terms of Service;
• to meet our legal, tax and accounting obligations.

We process your information to perform our agreement with you, to meet legal obligations, and for our legitimate interest in running a safe marketplace. We don't sell your personal information, and we don't send marketing messages without your consent.

We share only what's needed for each purpose:

• Other users — your store name, avatar, listings and reviews are public. When you buy or sell, the other party sees the name and delivery details needed to complete the order.
• Peach Payments — card and other online payments, and payouts to your bank account.
• Couriers (such as Pudo) — names, phone numbers and addresses or locker choices for deliveries.
• Google — sign-in (if you choose it) and address lookup when you search for an address.
• Hosting and infrastructure — Cloudflare (hosting, file storage, email delivery) and Neon (database).
• Authorities — where the law requires it, or to protect the rights and safety of our users.

Some of these providers store or process information outside South Africa. We only use providers bound by agreements that give your information protection comparable to POPIA.

We use one essential cookie to keep you signed in (it lasts up to 30 days), and your browser's local storage to remember small preferences such as whether you've dismissed a prompt. We don't use advertising or third-party tracking cookies.

We keep your information while your account is open. After you close it, we delete or anonymise it, except records we must keep by law (such as transaction and tax records, generally five years) or need to resolve open disputes.

We use encryption in transit, hashed passwords, sealed session cookies and access controls to protect your information. No system is completely secure; if a breach affects you, we'll notify you and the Information Regulator as POPIA requires.

Under POPIA you can:

• ask what personal information we hold about you and get a copy;
• ask us to correct or delete information that is inaccurate, out of date or no longer needed;
• object to processing based on our legitimate interests, and withdraw consent you've given (for example, for push notifications);
• complain to the Information Regulator (inforegulator.org.za) if you're unhappy with how we handle your information.

You can update most details yourself in your profile. For anything else, email [privacy@yourdomain].

Yews sells goods for children but is only for adults. Please don't include children's faces or personal details in listing photos, descriptions or messages.

We'll post any changes here and update the date at the top. If a change materially affects how we use your information, we'll tell you in the app or by email first.