Last updated: 11 October 2026
We're a small South African business and we take your privacy seriously. This policy explains what personal information we collect when you shop with us, why, who we share it with and what your rights are under the Protection of Personal Information Act, 2013 (POPIA).
Who we are
Coza Cards is the "responsible party" for your personal information. You can reach us (and our Information Officer) at:
- Email: info@cozacards.com
- Phone: +27 63 286 1857
- Address: Midrand, 1684, Johannesburg, South Africa
What we collect
We only collect what we need to get your cards to you:
- When you order: your name, email address, phone number, delivery address (street, suburb, city, province and postal code) and your order details (what you bought, prices, shipping and payment status).
- When you contact us (contact or wholesale form): your name, email address and your message, plus any tracking number or business details you choose to give us (company name, registration and VAT number, country and shop address).
- Your cart is stored on your own device (in your browser's local storage) until you check out.
- Analytics, only if you say yes: see "Cookies and analytics" below.
We don't collect or store your card or banking details, we don't have user accounts or passwords, and we don't ask for your ID number, date of birth or gender.
Why we use it
- To process, pack, deliver and support your order, and to send you order and shipping emails.
- To answer your messages and wholesale enquiries.
- To keep the records the law requires (for example tax and accounting records).
- To send you news and offers, only if you tick the newsletter box at checkout. You can unsubscribe at any time using the link in every email or by emailing us.
Who we share it with
We never sell your information. We share it only with trusted service providers who help us run the shop, and only as much as they need:
- PayFast (payment processing). You pay on PayFast's secure page; PayFast handles your card and banking details under its own privacy policy and PCI DSS security standards. PayFast tells us whether the payment succeeded and gives us a payment reference.
- Couriers and the Post Office to deliver your order (name, phone number and delivery address).
- Resend to send our order and contact emails.
- Vercel, which hosts this website.
- Our cloud database provider, which securely stores order and customer records.
- Mailchimp, only if you've opted in to our newsletter.
- Google, Meta (Facebook) and Hotjar analytics, only if you accept analytics cookies.
Some of these providers store information on servers outside South Africa (for example in the USA or the EU). Where that happens we rely on providers that are bound by data protection laws or agreements offering protection comparable to POPIA.
We may also disclose information if the law requires it, or to protect our rights (for example to prevent fraud).
Cookies and analytics
We use only what's essential to make the shop work (like remembering your cart and your cookie choice). With your permission, we also use analytics and marketing cookies from Google Analytics, the Meta (Facebook) Pixel and Hotjar to understand how people use the site and to improve it. These don't load until you click Accept analytics in the cookie banner, and you can change your mind any time with the Cookie settings link at the bottom of every page.
How long we keep it
We keep order records for as long as the law requires (generally five years for tax records), and contact messages only for as long as we need them to help you. After that we delete or anonymise them.
How we protect it
The site is served over HTTPS, our database is access-controlled and encrypted, and only the people who run Coza Cards can see your details. No card data ever touches our systems.
Your rights
Under POPIA you may ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct or update it;
- delete it (unless we must keep it by law);
- stop sending you marketing; or
- object to how we process it.
Just email info@cozacards.com. If you're unhappy with how we've handled your information, you may complain to the Information Regulator (South Africa) at inforegulator.org.za, though we'd love the chance to sort it out first.
Customers of our previous website
If you bought from or registered on our previous website, we've moved your name, contact details, addresses and order history to our new shop so we can keep supporting you. We did not move any passwords, and we won't send you marketing unless you've opted in. Email us if you'd like your details updated or removed.
Changes
We may update this policy from time to time. The latest version will always be on this page.