Privacy & Cookie Policy

Last updated: 28 October 2026

1. Who we are

Flamwood Sweet Mart (“we”, “us”), 89 Buffelsdroon, Romario Complex, Wilkoppies, Klerksdorp, is responsible for the personal information collected through this website. We handle it in line with the Protection of Personal Information Act (POPIA). Our information officer is the owner of Flamwood Sweet Mart, who you can reach on WhatsApp at 076 477 6647 or 061 541 9302.

2. What we collect

• When you order: your name, cell number, email address (if you give it), delivery address, order notes and what you ordered.
• If you create an account: your name, email address and password. Passwords are stored in encrypted (hashed) form, so we can’t see them.
• When you pay by card: your payment is handled by a secure third-party payment provider. We only receive a confirmation and a reference, never your card details.
• Technical information: our hosting provider processes your IP address and browser details to deliver the site and protect it from abuse.

3. How we use it

• To process, prepare, deliver and confirm your orders, including contacting you about them on WhatsApp, by phone or by email.
• To manage your account and show your order history.
• To handle payments, refunds, returns and queries.
• To keep our website secure and to meet our legal obligations, such as keeping financial records.

We don’t sell your information. We only send promotional messages if you’ve agreed to receive them, and you can opt out at any time.

4. Who we share it with

We only share what’s needed with providers that help us run the shop:

• our website hosting and security provider;
• our payment provider, for card payments;
• our email provider, for order receipts and account emails;
• courier companies, for courier deliveries (your name, address and cell number);
• our accountant or SARS, where the law requires it.

Some of these providers store data outside South Africa. When that happens, we only use providers that protect personal information to a standard similar to POPIA.

5. How long we keep it

We keep order and payment records for five years, because tax law requires it. We keep account details until you ask us to close your account. After that, we delete or anonymise your information.

6. How we protect it

The site uses encrypted connections (HTTPS) throughout, hashed passwords, secure login cookies and access controls, so only our staff can see orders. If a security breach puts your information at risk, we’ll let you and the Information Regulator know, as the law requires.

7. Your rights

You can ask us to tell you what personal information we hold about you, to correct it, to delete it (unless the law requires us to keep it), or to stop using it for marketing. WhatsApp us on 076 477 6647 or 061 541 9302 and we’ll respond within 30 days. If you’re unhappy with how we’ve handled your information, you can complain to the Information Regulator at inforegulator.org.za.

8. Cookies

• Login cookie: if you log in to your account, we use one essential cookie to keep you logged in. It’s removed when you log out or when it expires.
• Your cart is saved in your own browser (local storage), so it’s still there when you come back. It isn’t a tracking cookie, and we can’t see it until you place an order.
• Google Maps: the map on our home and contact pages is provided by Google, which may set its own cookies when the map loads. See Google’s privacy policy.

We don’t use advertising or analytics tracking cookies. You can block or delete cookies in your browser settings, but you won’t be able to stay logged in without the login cookie.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page. See also our Terms & Conditions.