1. Who we are
This website ( marthadapa.co.za ) is operated by Martha Dapa (“we”, “us”, “our”). We are committed to protecting your privacy and handling your personal information in a transparent and secure manner, in line with:
POPIA – Protection of Personal Information Act 4 of 2013 (South Africa)
GDPR – General Data Protection Regulation (EU) where applicable
Any other local data-protection laws that apply to visitors or customers.
2. What personal information we collect
Category Examples How we collect it
Contact data Name, email address, phone number, postal address Website forms, event registrations, orders, direct email
Identity / account data Account username, password (hashed) Account sign-up
Transaction data Products or tickets purchased, order value, courier details Checkout process
Payment data Cardholder name, masked card numbers, EFT proof-of-payment Secure payment gateway (we do not store full card numbers)
Technical data IP address, browser type, device ID, cookies Automated via analytics and cookies
Marketing preferences Newsletter opt-ins, event interests Checkbox selections, email interactions
We do not intentionally collect special-category information (e.g. health, biometric, religious data) unless you voluntarily provide it.
3. How we use your information
We process personal information only when there is a lawful basis, such as:
Contract performance: Fulfilling product or ticket orders, arranging delivery.
Legitimate interest: Improving our site, preventing fraud, keeping records of events.
Consent: Sending newsletters or promotional emails (you may withdraw consent at any time).
Legal obligation: Invoicing, tax, POPIA / GDPR requests.
4. Cookies & analytics
We use essential cookies for site functionality and analytics cookies (e.g. Google Analytics) to understand traffic patterns. You can control non-essential cookies in your browser or via our cookie banner.
5. Sharing & third parties
We share data only as needed with:
Payment processors (e.g. PayFast, PayPal)
Couriers / logistics partners (e.g. The Courier Guy)
Email service providers (for newsletters and order confirmations)
Event platforms (e.g. Quicket, if you purchase tickets)
All third parties are bound by confidentiality and data-processing agreements.
We do not sell or rent your personal information.
6. International transfers
Our website hosting and some service providers may be located outside South Africa or the EEA. We ensure adequate safeguards (e.g. standard contractual clauses or processor agreements) are in place before any cross-border transfer.
7. Data security & retention
We apply industry-standard security measures (SSL encryption, strong access controls, regular backups). Personal information is retained only as long as necessary for the purpose collected, or as required under tax and accounting laws (typically 5 years).
8. Your rights
Under POPIA, GDPR and other applicable laws you may:
Access – request a copy of the personal data we hold.
Rectify – correct inaccurate or incomplete data.
Delete / destroy – ask us to erase data (subject to legal retention).
Restrict / object – limit or oppose certain processing.
Data portability – receive data in a structured, machine-readable format (GDPR).
Withdraw consent – opt out of marketing at any time.
To exercise any right, email us at privacy@marthadapa.co.za. We will respond within 30 days.
9. Changes to this policy
We may update this Privacy Policy periodically. Material changes will be posted on this page and, where appropriate, notified via email. Please review it regularly.
10. Contact us
Data Controller: Martha Dapa
Email: info@marthadapa.co.za
If you feel your privacy rights have been infringed, you may lodge a complaint with the Information Regulator (South Africa) or your local supervisory authority.
