Privacy policy

1. Who we are

Stillr (Mind Money Movement (Pty) Ltd (registration 2024/350331/07), trading as Stillr.co.za) is the responsible party for your personal information. You can reach our Information Officer at support@stillr.co.za, or by post at 20 2nd Avenue, Retreat, Cape Town, Western Cape, 7965, South Africa.

2. Information we collect

• Identity & contact: your name, email address, phone number and delivery address.
• Order information: what you bought, order history and related communications with us.
• Payment information: processed securely by our payment processor. We do not see or store your full card details.
• Account information: if you sign in, the email you use for magic-link sign-in.
• Technical & usage data: basic information such as your device, browser and how you use the site, including via cookies.

3. Why we use it

• To process and deliver your orders and handle returns.
• To take payment and prevent fraud.
• To provide customer support and send order updates.
• To send marketing (such as our newsletter) — only where you’ve asked us to, and you can unsubscribe any time.
• To meet legal and tax obligations.

We rely on the lawful bases in POPIA — performing our contract with you, your consent (for marketing), our legitimate interests (such as fraud prevention and improving the store), and compliance with the law.

4. Who we share it with

We share personal information only with the service providers (“operators”) we need to run the store, under confidentiality obligations, including:

• Paystack — to process your payment securely.
• Couriers & logistics (Bob Go, The Courier Guy, Pudo) — your name, address and phone number, to deliver your order.
• Fulfilment suppliers (including CJ Dropshipping) — for sourced-to-order items, we share the delivery details needed to ship your order to you.
• Hosting & data (Vercel, Supabase) — to run and store the website and order data.
• Email (Resend) — to send order and newsletter emails.

We do not sell your personal information. We may disclose information where the law requires it.

5. Cross-border transfers

Some of our providers process information outside South Africa (for example, a fulfilment supplier for a sourced-to-order item, or a cloud/email provider). Where this happens, we only transfer what’s necessary to perform our contract with you (such as delivering your order), and we take reasonable steps to ensure your information is adequately protected, as POPIA requires.

6. Cookies

We use essential cookies to run the store (for example, to keep your cart and sign-in working). You can control cookies in your browser settings, though some features may not work without them.

7. Security & retention

We take reasonable technical and organisational steps to protect your information against loss, misuse and unauthorised access. We keep your information only as long as needed for the purposes above and to meet legal, accounting and tax requirements, then delete or anonymise it.

8. Your rights

Under POPIA you may, subject to the law:

• ask what personal information we hold about you, and get a copy;
• ask us to correct or delete it;
• object to certain processing, and withdraw marketing consent;
• lodge a complaint (see below).

To exercise any of these, email support@stillr.co.za.

9. Complaints

If you’re not satisfied with how we’ve handled your information, you may contact the Information Regulator (South Africa): enquiries at enquiries@inforegulator.org.za or complaints at POPIAComplaints@inforegulator.org.za.

10. Changes

We may update this policy from time to time. The “last updated” date above shows when it last changed. Please also see our terms of service.