Last updated: 15 May 2026
This Privacy Policy explains how Pooja Box collects, uses, and protects your personal information when you use www.poojabox.co.za. We are committed to handling your information in line with the Protection of Personal Information Act, 2013 (POPIA).
What we collect
- Account details — name, email, phone number, password (hashed).
- Order details — billing and shipping address, items ordered, order value.
- Payment — we do not store card details. Bank transfers are reconciled by reference number; cash on delivery is settled directly with the courier.
- Site usage — cookies and analytics (page views, device type) to improve the Site.
How we use it
- To fulfill and deliver your orders.
- To communicate with you about your orders, account, and (if you opt in) marketing offers.
- To meet legal and tax obligations (e.g. VAT records).
- To improve and secure the Site.
Who we share it with
We share the minimum information needed with:
- Couriers, to deliver your order.
- Payment service providers, to process electronic payments.
- Email and analytics service providers we use to operate the Site (e.g. Klaviyo for transactional and marketing email).
- Authorities, where required by law.
We do not sell your personal information.
How long we keep it
We keep order records for as long as required by tax law (currently 5 years), and account data for as long as your account is active. You can ask us to delete your account at any time.
Your rights under POPIA
You have the right to access, correct, or delete the personal information we hold about you, and to object to certain processing (e.g. marketing). To exercise these rights, email privacy@poojabox.co.za.
Cookies
We use cookies for essential site functionality (cart, login) and for analytics. You can disable cookies in your browser, but parts of the Site may not work correctly.
Contact
Questions about this policy? Email privacy@poojabox.co.za or use our Contact page.