Privacy Policy

Last updated 1 October 2026

This policy explains how Rob Lucas (“we”) collects and uses your personal information on roblucas.co.za, in line with the Protection of Personal Information Act (POPIA).

Who is responsible

The responsible party and information officer is Rob Lucas, 20 Waratah Avenue, Melkbosstrand, 7437,hello@roblucas.co.za.

What we collect

When you order: your name, email address, mobile number, and, for delivery, your address and any delivery instructions. We also keep what you ordered and how much you paid.
When you email us: your email address, name and what you write.
When you visit: basic, anonymous usage statistics through Cloudflare Web Analytics. It uses no cookies and doesn’t identify you.

We never receive your card or banking details. PayFast handles those.

Why we use it

To process, deliver and support your order (this is needed to fulfil our agreement with you).
To send your order confirmation and updates about your order.
To reply when you contact us.
To keep records the law requires, such as payment records.

We don’t send marketing email, and we never sell or rent your information.

Who we share it with

Only the services we need to run the shop, each for its own part of the job:

PayFast (South Africa): to take your payment.
Aramex (South Africa): your name, mobile number, address and instructions, to deliver your parcel.
Google Maps: the address you type, to find and check it.
Cloudflare: hosts this site and stores order records.
Resend: sends and receives our email.
Telegram: we read and answer messages to hello@roblucas.co.za through a private Telegram group, and get order notifications there.

Some of these services store information outside South Africa. We only use providers that protect personal information to a standard comparable to POPIA, as section 72 requires.

How long we keep it

We keep order records for 5 years, because tax and consumer law require it. Emails are kept for as long as needed to help you, and no longer than 2 years.

Your rights

You may ask us to show you what we hold about you, correct it, or delete it where the law allows. Email hello@roblucas.co.za. We’ll respond within 30 days.

If you’re not happy with how we handle your information, you may complain to the Information Regulator:inforegulator.org.za, complaints.IR@inforegulator.org.za.

Security

The site runs over HTTPS. Order records are stored with access limited to the people who fulfil orders.