What we do with your information
This is our notice under section 18 of the Protection of Personal Information Act. It is short because this shop genuinely collects very little.
Who is responsible
i-LEAD Self Defence NPC, NPO 218-034, is the responsible party. Questions, corrections and complaints go to our Information Officer at info@i-lead.org.za.
What we collect, and why
| What | Why we need it |
|---|---|
| Your name | It goes on the parcel. The courier will not accept one without it. |
| Your mobile number | The locker sends your collection PIN to it by SMS. Without it you cannot open the door. |
| Your email address | Your order confirmation and your waybill number go there. |
| The locker you chose | It is where the parcel goes. |
| What you bought, and what you paid | We are required to keep records of what we sold, and you are entitled to a record of what you bought. |
That is the list. We do not ask for your home address, because you collect from a locker and we do not need to know where you live. We do not ask for your identity number, your date of birth, or your gender.
What we never see
Your card details. Payment happens on Payfast's own page. Nothing about your card, your bank or your balance reaches this site at any point, and there is nowhere in our database it could be stored.
What this site does not do
There are no accounts and no passwords on this shop — nothing to leak and nothing to reset. There is no advertising, no tracking pixel, no analytics, no social media button and no third-party JavaScript of any kind. This is enforced by the site's security policy rather than left to good intentions: the browser is instructed to refuse scripts from anywhere but this site, and there are none.
Your basket is remembered in one cookie that holds an identifier and nothing else — no prices, no products, no personal information. It is required for the shop to work at all.
Who else sees it
- PUDO / The Courier Guy get your name, mobile number and chosen locker. They cannot deliver without them.
- Payfast get your name and email with the payment request, and handle the payment itself.
- Whoever packs your order gets a single-use link showing what to put in the box and where it goes. It shows your name, your mobile number and your locker. It does not show your email address, what you paid, or anything about any other order, and it stops working once the parcel is delivered.
- Our hosting provider stores the database, in South Africa.
Nobody else. We do not sell, rent, share or trade your information, and we never will.
Marketing
We only send you marketing if you tick the box asking for it, and that box is never ticked for you. This is section 69 of POPIA and we do not treat it as a formality. Every such message carries a one-click unsubscribe, and unsubscribing has no effect on anything you have bought.
Your order confirmation and delivery updates are not marketing. You get those because you bought something.
How long we keep it
Order records for five years, because tax and company law require it. Baskets that were never checked out, and orders that were never paid for, are cleared out automatically. Once a parcel is delivered, the packing link that showed your details is revoked.
Your rights
You may, at any time and free of charge:
- ask what we hold about you, and get a copy
- have anything wrong corrected
- ask us to delete it, where we are not required by law to keep it
- object to us using it
- withdraw consent to marketing
Email info@i-lead.org.za and we will deal with it. If we get it wrong, you can complain to the Information Regulator of South Africa — inforegulator.org.za.
If something goes wrong
If personal information here is ever accessed by somebody who should not have it, we will tell the Information Regulator and we will tell you, as soon as we reasonably can. POPIA requires it and you would want to know.
Last updated 20 September 2026.