Privacy Policy

1. Who we are

Stellar Health is operated by [REGISTERED COMPANY NAME], registration number [REGISTRATION NUMBER], of 26 Ross Road, Wynberg, South Africa — the "responsible party" under the Protection of Personal Information Act (POPIA) for the personal information described below.

Our Information Officer, appointed as POPIA requires, can be reached at [INFORMATION OFFICER NAME / EMAIL].

2. What we collect

• Account details: name, email, and password (stored securely, never in plain text)
• Order details: delivery address, items purchased, order history
• Payment details: handled and tokenised by Paystack — we do not store full card numbers
• Seller details, for store owners: business information and banking details needed to pay you out
• Support requests: whatever you tell us via the Contact form

3. Why we process it

We process your information to fulfil orders, operate your account, pay sellers, comply with tax and consumer-protection law, and respond to support requests — each a lawful basis under POPIA (performance of a contract, legal obligation, or your consent).

4. Sharing with sellers & processors

When you buy from a seller, we share what they need to fulfil your order — your name, delivery address, and the items purchased. We share payment details with Paystack to process payment, and never sell your personal information to third parties.

5. Payment processing

Payments are processed by Paystack. If you save a card for future purchases, it is tokenised by Paystack — Stellar Health never sees or stores your full card number.

6. Cookies & similar technology

Stellar Health keeps you signed in using a secure session cookie, and remembers your shopping cart in your browser's local storage so it survives a page reload. We do not currently use third-party analytics or advertising cookies.

7. Your rights under POPIA

You can request everything Stellar Health holds about you, or ask us to delete it, at any time from your account page — this is self-service and takes effect immediately, no request to us needed.

Deleting your account removes your personal details permanently. Order amounts and dates are kept, without your name or address, because tax law requires financial records to be kept for five years. This cannot be undone.

8. Retention

We keep account and order data for as long as your account is active, and de-identified financial records for five years afterwards as required by the Tax Administration Act.

9. Security

Access to personal information is controlled by row-level security in our database, so that a seller can only ever see their own store's orders and a shopper can only ever see their own data.

10. Cross-border transfers

Some of our service providers (including Paystack and our hosting infrastructure) may process data outside South Africa. [CONFIRM CURRENT PROCESSOR LOCATIONS] — this section will be finalised once every processor is confirmed.

11. Children's privacy

Stellar Health is not directed at children and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

13. Complaints

If you're unhappy with how we've handled your information, you can contact our Information Officer above, or lodge a complaint with the Information Regulator (South Africa) — [VERIFY CURRENT INFORMATION REGULATOR CONTACT DETAILS BEFORE PUBLISHING].

14. Contact

Questions about this policy? Get in touch.