Privacy Policy
SmokeTrack Marketplace, operated by SparzaFi (Pty) Ltd • Last updated: 18 June 2026
This Privacy Policy explains how SparzaFi (Pty) Ltd ("we", "us") collects, uses, shares and protects your personal information when you use the SmokeTrack platform. We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). By creating an account you confirm you have read and understood this Policy.
1. Information We Collect
- Account details — name, phone number, password (stored only as a secure hash), and for shop owners, email and shop details.
- Optional details — delivery address and, only if you choose to provide it, an identity/passport number.
- Transaction data — orders, items, amounts, payment method, and (where applicable) credit balances and repayment history.
- Activity data — shops you follow, products you like, reviews you write, and pages you visit.
- Technical data — device/browser information and basic logs used to keep the service secure.
2. How We Use Your Information
- To create and manage your account and let you log in.
- To process and fulfil orders, deliveries and payments (including credit, where approved).
- To show you relevant shops, products and your order history.
- To calculate trust/reputation scores and manage credit responsibly.
- To keep the platform safe, prevent fraud and abuse, and comply with the law.
- To contact you about your orders or account.
3. Legal Basis (POPIA)
We process your information where it is necessary to provide the service you requested, to comply with a legal obligation, for our legitimate business interests, and/or with your consent. You may withdraw consent at any time (this will not affect processing already carried out).
4. Who We Share It With
- Shop Owners you order from — they receive the details needed to fulfil your order (name, phone, delivery address, order items).
- Service providers — including Google Firebase / Google Cloud, which host our database and application, and messaging tools such as WhatsApp where you choose to contact a shop.
- Authorities — where required by law or to protect rights, safety and property.
We do not sell your personal information.
5. How We Protect Your Information
Passwords are stored using salted bcrypt hashing and are never stored in plain text. Access to data is restricted, and administrative areas are protected. While we take reasonable measures to safeguard your information, no online service can be guaranteed 100% secure.
6. Data Retention
We keep your information for as long as your account is active and as needed to provide the service, resolve disputes, and meet legal, accounting or reporting requirements. You can ask us to delete your account, subject to records we must keep by law.
7. Your Rights
Under POPIA you have the right to: access the personal information we hold about you; ask us to correct or delete it; object to certain processing; and complain to the Information Regulator of South Africa. To exercise these rights, contact us using the details below.
8. Cookies & Local Storage
We use essential cookies/local storage to keep you signed in and remember preferences such as your light/dark theme. These are necessary for the platform to work.
9. Children
The platform is not intended for children under 18 without parental or guardian consent. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this Policy from time to time. Changes will be posted here with a new "Last updated" date.
11. Contact & Information Officer
For privacy questions or to exercise your rights, contact our Information Officer, Thubelihle Mahlangu, on 076 263 3541 or at kobdry@gmail.com. Registered address: Boshoek Farm, Machadodorp, Mpumalanga, 1170.
This document is a general template and does not constitute legal advice. SparzaFi (Pty) Ltd should have it reviewed by a qualified legal practitioner and register an Information Officer with the Information Regulator where required.