Privacy Policy

Effective Date: 11 June 2025

1. Who We Are

Our website address is: https://dontoshi.co.za.
This website is operated by Comrade Group (Pty) Ltd, trading as Dontoshi (Pty) Ltd, a South Africa-based e-commerce marketplace and multivendor platform.

Business Information:
Company Name: Comrade Group (Pty) Ltd
Registration Number: 2025 / 381722 / 07
Registered Address: 11 Kontiki Ave, Glen Ive, Cape Town, 7550
Email: info@dontoshi.co.za

2. What Personal Data We Collect and Why We Collect It

We collect personal data to operate our store, improve user experience, and meet legal obligations.

Types of Data Collected:

• Personal Identifiers: Name, email address, shipping/billing address, phone number.

• Account Information: Username, password, profile photo (if applicable).

• Transactional Data: Order history, payment info, delivery data.

• Technical Data: IP address, browser type, operating system, device information.

• Cookies: See our Cookie Policy below.

• Sensitive Data: Not collected intentionally. Health or similar sensitive information should not be submitted.

Legal Basis for Collection:

• Your consent

• Contractual necessity

• Legal compliance

• Legitimate business interests (e.g. site analytics, fraud prevention)

3. Comments

When visitors leave comments, we collect:

• The data shown in the comments form

• IP address and browser user agent string (for spam detection)

• An anonymised hash of your email address may be sent to the Gravatar service
  Gravatar Privacy Policy

After approval, your comment and profile image may be publicly visible.

4. Media

If you upload images, do not include embedded location data (EXIF GPS). Visitors can download and extract this data.

5. Contact Forms

Data collected via contact forms (e.g. name, email) is stored for up to 12 months for customer service purposes. We do not use this data for marketing unless explicitly opted in.

6. Cookies

We use cookies to:

• Remember login status and preferences

• Track cart contents

• Analyze traffic and visitor behavior

Default Cookies

• Comment form cookies (1 year)

• Login session cookies (2 days to 2 weeks)

• Editor cookies (1 day)

You may disable cookies in your browser, but some site functionality may be affected.

7. Embedded Content from Other Websites

Articles may include embedded media (e.g. videos, images). These sites may:

• Collect data

• Use cookies

• Monitor your interaction with embedded content

8. Analytics

We use:

• Google Analytics (IP anonymization enabled)

• Google for WooCommerce

You can opt out of tracking via browser settings or Google’s opt-out tool.
Google Privacy Policy

9. Who We Share Your Data With

We share data only with trusted partners and service providers for the following purposes:

Third-Party Services:

• Payment Processors: PayFast
  PayFast Privacy Policy

• Hosting Providers: GoDaddy
  GoDaddy Privacy Policy

• Shipping Partners: Courier Guy
  Courier Guy Privacy Policy

• Analytics and Marketing: Google, Meta (only if tracking enabled)

We do not sell or rent your personal data to third parties.

10. How Long We Retain Your Data

• Comments: Indefinitely

• Registered user profiles: Until account deletion

• Contact form entries: 12 months

• Orders and transactions: 7 years (for tax/legal compliance)

• Analytics data: 26 months (Google Analytics default)

11. What Rights You Have Over Your Data

You have the right to:

• Access and export your data

• Request correction or deletion

• Withdraw consent for marketing

• Lodge a complaint with a data protection authority

To exercise your rights, email: privacy@dontoshi.co.za

12. Where Your Data Is Sent

• Data may be transferred outside the EU (e.g., to the US via Google, PayPal)

• Transfers are safeguarded through:

  • Standard Contractual Clauses (SCCs)

  • Privacy Shield framework (where applicable)

  • Data Processing Agreements with third parties

13. How We Protect Your Data

We use:

• SSL encryption

• Two-factor authentication

• Limited admin access

• Regular software updates

• Staff training on data privacy

A Privacy Impact Assessment has been conducted to assess risks.

14. What Data Breach Procedures We Have in Place

In the event of a breach, we:

• Notify affected users within 72 hours (as required)

• Inform data protection authorities

• Log and document all incidents

• Conduct internal reviews and mitigation

15. What Third Parties We Receive Data From

If you interact with vendor stores, external platforms (like social logins, ad platforms), or APIs, we may receive usage or demographic data for analytics or profile enrichment.

16. Automated Decision Making and Profiling

We do not make fully automated decisions with legal or significant effects on individuals.
Some profiling may occur for:

• Personalized product recommendations

• Targeted promotions (with user consent)

17. Industry Regulatory Disclosure Requirements

We comply with:

• POPIA (South Africa)

• GDPR (EU/EEA)

• Other applicable local privacy laws

18. WooCommerce & Dokan Plugin-Specific Data

What We Collect and Store:

• Viewed products/stores

• Cart and checkout data

• Billing/shipping info

• Account data and order history

Who Has Access:

• Store Admins and Shop Managers can access your order and account details to assist with fulfillment and customer service.

What We Share with Others:

• Payment gateways

• Shipping providers

• Email marketing tools (if opted in)

Payments:

We accept payments via:

• PayFast

Data shared with these providers includes order details, name, and billing info.

19. Contact Information

For privacy-specific concerns, please contact:

Data Protection Officer:
Name: Daniel Tang
Email: privacy@dontoshi.co.za
Phone: +27 74 854 7140
Address: 11 Kontiki Ave, Glen Ive, Cape Town, 7550