Privacy policy
Last updated: September 10, 2026
1. Who we are
Alburger Nr 67 CC, trading as Greeff's Butchery, is the responsible party for the personal information described in this policy, as that term is used in the Protection of Personal Information Act 4 of 2013 ("POPIA").
Information Officer: Nadya Greeff Email: onlineordersgreeffs@gmail.com Address: 45 Waterfront Drive, Knysna, 6570
This policy explains what we collect, why, who we share it with, and what you can ask us to do about it.
2. What we collect
When you place an order: your name, delivery address, billing address, email address, phone number, order contents, and any delivery or cutting instructions you give us.
When you pay: payment is processed by Peach Payments. We receive confirmation that payment succeeded and the last four digits of the card. We never see or store your full card number.
When you create an account: your login details and order history.
When you subscribe to emails: your email address, name, and how you interact with our emails.
When you use the site: your IP address, device and browser type, pages viewed, and referring site, through cookies and similar technology. See section 8.
When you contact us: whatever you send us by email, WhatsApp or the contact form.
When you leave a review: your name (or the name you choose to display), your rating and comments.
We do not knowingly collect information from anyone under 18.
3. Why we process it, and on what basis
| What we do | Why | Lawful basis under POPIA |
|---|---|---|
| Take and fulfil your order | To perform our contract with you | Necessary for a contract (s11(1)(b)) |
| Deliver to you | To get your meat to your door | Necessary for a contract |
| Take payment and issue invoices | To be paid, and to meet tax law | Contract, and legal obligation (s11(1)(c)) |
| Handle returns, claims and queries | To resolve problems | Contract, and legitimate interest (s11(1)(f)) |
| Keep accounting and VAT records | Required by the Tax Administration Act and the Companies Act | Legal obligation |
| Send marketing emails | To tell you what's new | Your consent (s69), which you may withdraw at any time |
| Improve the site and understand traffic | To run a better shop | Legitimate interest |
| Prevent fraud | To protect you and us | Legitimate interest |
Marketing. We only send marketing email to people who have asked for it or who have bought from us, as section 69 of POPIA allows. Every email has an unsubscribe link, and it works immediately.
4. Who we share it with
We share only what each party needs to do its job. We do not sell your personal information to anyone, ever.
- Peach Payments — to process payment.
- [Courier] — your name, address and phone number, so they can deliver.
- Shopify — our e-commerce platform, which hosts the store and order data.
- [Klaviyo] — our email platform, if you have subscribed.
- [Reviews app] — if you submit a review.
- Our accountants and auditors — for financial records, under confidentiality.
- Regulators or law enforcement — where we are legally required to.
5. Information sent outside South Africa
Some of our providers, including Shopify and our email platform, store data on servers outside South Africa. Section 72 of POPIA permits this where the recipient is bound by rules that provide an adequate level of protection.
We rely on the contractual data-protection terms these providers commit to, which include the safeguards required by POPIA and the GDPR. If you would like detail on a specific provider, ask us.
6. How long we keep it
- Order, invoice and tax records: five years from the end of the relevant tax year, as South African tax and companies legislation requires.
- Account details: while your account is open, and for [12] months after you close it.
- Marketing subscriptions: until you unsubscribe.
- Contact and WhatsApp correspondence: [24] months.
- Website analytics: [26] months.
We delete or de-identify information once it is no longer needed, unless the law requires us to keep it.
7. How we protect it
The store runs over an encrypted connection (HTTPS). Access to order and customer data is limited to the people who need it, protected by individual logins. Payment card data never reaches our systems.
No system is perfectly secure. If a breach occurs that creates a real risk to you, section 22 of POPIA requires us to notify both you and the Information Regulator, and we will.
8. Cookies
We use cookies to keep your cart working, remember you between visits, understand how the site is used, and measure our advertising.
You can block or delete cookies in your browser settings. Some parts of the site, including the cart and checkout, will not work properly without them.
9. Your rights
Under sections 23, 24 and 25 of POPIA, you may:
- Ask what we hold about you, and get a copy.
- Correct or delete information that is inaccurate, irrelevant, excessive, out of date, misleading or unlawfully obtained.
- Object to processing based on legitimate interest, on reasonable grounds.
- Withdraw consent to marketing at any time.
- Complain to the Information Regulator.
Email onlineordersgreeffs@gmail.com. We will respond within a reasonable time, and within 30 days where the request is a formal access request. We may ask you to confirm your identity first, so that we do not hand your information to somebody else.
Formal access requests under the Promotion of Access to Information Act are made on Form 2, available from the Information Regulator's website.
10. Complaints to the Regulator
If you are not satisfied with how we have handled your information:
The Information Regulator (South Africa) JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 Tel: 010 023 5200 complaints.IR@justice.gov.za inforegulator.org.za
11. Changes to this policy
We may update this policy. The version published on our website is the one that applies. Material changes will be notified by email to account holders.
Questions: onlineordersgreeffs@gmail.com