POPIA Compliance

How we process and protect personal information under South Africa’s Protection of Personal Information Act.

Privacy Governance Reasonable Safeguards Rights & Requests

This page provides a practical summary of our POPIA approach. For full detail on how we collect and use personal information, please read our Privacy Policy.

1. Overview

DeliKing processes personal information to deliver cross-border shopping and forwarding services (South Africa to Zimbabwe), provide customer support, manage payments, prevent fraud, and comply with legal requirements. We aim to process only what is required, keep it accurate, protect it, and retain it for no longer than necessary.

2. Roles & Responsibilities

2.1 Responsible party and operators

  • DeliKing acts as the responsible party where we determine the purpose and means of processing.
  • We may use trusted operators (e.g., payment processors, couriers, hosting providers) under appropriate safeguards and contractual terms.

2.2 Information Officer

Our Information Officer (or designated deputy) oversees POPIA governance, internal controls, and handling of access/objection requests. Contact details appear in section 11.

3. Personal Information We Process

Depending on your use of our services, we may process:

  • Identity & contact: name, email address, phone number.
  • Delivery details: delivery address, city, province, postal code, delivery notes.
  • Order & service data: order references, product details, tracking IDs, support communications.
  • Payment-related data: payment confirmation references and transaction metadata (we do not store full card details if processed by third parties).
  • Compliance & fraud prevention: risk signals, device/browser details, IP address, and related logs (where relevant).

Special personal information: We do not intentionally require special personal information (e.g., health, biometrics). If provided inadvertently, we limit access and handle it with extra care.

4. Why We Process It

Order fulfilment

Create, confirm, and fulfil orders and deliveries.

Payments

Manage payments, reconciliations, and refunds (where applicable).

Support

Provide tracking updates, service notifications, and customer support.

Fraud & security

Prevent fraud, abuse, and security incidents.

  • Meet legal, tax, customs, and regulatory obligations.
  • Improve service quality and user experience (where permitted).

5. Lawful Basis

We process personal information under one or more of the following grounds:

  • Contractual necessity: to deliver the services you request.
  • Legal obligation: where we must comply with applicable laws (e.g., record-keeping).
  • Legitimate interests: to prevent fraud, secure systems, and improve operations in a balanced way.
  • Consent: where required, for specific optional communications or features (you can withdraw consent anytime).

6. Sharing & Operators

We may share personal information with:

  • Payment processors to process or confirm payments.
  • Courier and logistics partners to deliver items and provide tracking updates.
  • Retailers or suppliers where required to purchase or verify items.
  • IT/hosting providers to host and maintain our platform.
  • Authorities where required by law or valid legal process.

Cross-border transfers: Because our service spans South Africa and Zimbabwe, information may be processed across borders. Where cross-border transfers occur, we take reasonable steps to ensure appropriate protections and safeguards.

7. Security Measures

We implement reasonable technical and organisational safeguards, such as:

  • Access controls (least privilege) and role-based permissions.
  • Encryption in transit (HTTPS/TLS) and secure storage practices.
  • Audit logging and monitoring for suspicious activity.
  • Vendor due diligence for operators handling information.
  • Incident response procedures for security events.

Security note: No system is 100% secure. If a security incident affects your personal information, we will take reasonable steps to notify you and relevant authorities where required.

8. Retention

We keep personal information only for as long as necessary to fulfil the purposes described above, unless a longer retention period is required by law or for legitimate business needs (e.g., record-keeping, dispute resolution, fraud prevention).

9. Your Rights

Subject to POPIA and applicable law, you may:

Access

Request access to your personal information we hold.

Correction / Deletion

Request correction or deletion of inaccurate or unlawful information.

Objection

Object to processing on reasonable grounds (where applicable).

Withdraw consent

Withdraw consent where processing relies on consent.

How to submit a request: Send your request using the contact details in section 11. We may ask you to verify your identity before we action requests.

10. Cookies & Analytics

We may use cookies and similar technologies to support core site functionality (e.g., keeping sessions active), improve performance, and understand general usage. Where required, we will present cookie choices and respect your preferences.

  • Essential cookies: required for the site to operate.
  • Performance/analytics: helps us understand and improve user experience (where enabled).

11. Complaints & Contact

If you have questions, concerns, or POPIA requests, contact us:

Email

Privacy enquiries

privacy@deliking.co.za

Phone

Business hours

+27 12 345 6789

Address

For written correspondence

Johannesburg, South Africa

Response time: We aim to respond within 2 business days for privacy-related enquiries.

Effective Date: January 15, 2024 • Version 1.0