Legal
Privacy policy
What we collect when you order a book, why we need it, who else sees it, and what you can ask us to do with it.
Last updated
Who is responsible for your information
Veritas Advisory Group (Pty) Ltd — the business Lerato M. Motshana trades through — is the responsible party for the personal information collected through this website, as POPIA uses that term.
Veritas Advisory Group (Pty) LtdRegistration number 2021/394993/07Privacy questions go to info@leratomotshana.com.
What we collect
Only what is needed to get a book to you:
- your name
- your email address
- your phone number
- your delivery address, and any note you add for the courier
- what you ordered, what it cost, and whether it has been paid and sent
We never see or store your card details. Those go straight to Yoco on their own page and never reach this website.
Why we need it
Your name and address are how a parcel finds you. Your email is how we send the order confirmation and the tracking number. Your phone number is what the courier uses when they cannot find your gate.
We also keep a record of the sale itself, because tax law requires a seller to keep records of what was sold and to whom.
What we do not do
There is no analytics on this site, no advertising pixel, and no third-party tracking of any kind. Nothing follows you from here to anywhere else on the internet.
Browsing sets no cookies at all. The single cookie this site can set belongs to the shop owner's admin login, and a customer never receives one.
We do not sell, rent or trade your information, and we will not add you to a mailing list because you bought a book.
Who else sees it
Only the companies needed to complete your order, and only the part each of them needs:
- Yoco — takes the payment. They receive the amount and your order reference, and they hold the card details we never see.
- The Courier Guy — delivers the parcel, so they receive your name, address and phone number.
- Resend — sends the confirmation and tracking emails, so they handle your email address.
- Supabase — hosts the database the order is stored in.
- Vercel — hosts the website itself.
Some of these store data outside South Africa. POPIA permits that where the receiving country or the provider offers comparable protection, and each of these is bound by its own data protection terms.
We will also hand over information if the law requires it — a court order, a tax audit — and not otherwise.
How long we keep it
Order records are kept for five years from the end of the tax year they fall in, which is what South African tax law requires of a seller.
Orders that were started but never paid are cleared out automatically after a day.
How it is kept safe
The site is served over HTTPS, so what you send is encrypted in transit. Order data sits in a database that is not reachable from the public internet, and the page listing orders is behind a password.
No system is perfect. If information is ever breached in a way that puts you at risk, we will tell you and the Information Regulator, as POPIA requires.
Your rights
Under POPIA you may ask us to:
- tell you what information we hold about you
- correct anything that is wrong
- delete it, where we are not required to keep it
- stop using it for anything you did not ask for
Email info@leratomotshana.com and we will respond. There is no charge for asking.
If you are unhappy with our answer
You can complain to the Information Regulator, who oversees POPIA in South Africa:
Information Regulator (South Africa) Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Changes to this policy
If what we collect or who we share it with changes, this page changes with it, and the date at the top will tell you when.