Skip to content

Privacy policy

Last updated: [date of launch]

[Draft prepared for MI AMOR. Have it checked by a South African attorney before launch.]

We collect only what we need to sell and deliver your order, keep your account and, if you allow it, improve our shop. This page explains what we collect, why, who we share it with and your rights under the Protection of Personal Information Act (POPIA).

Who we are

MI AMOR™ is a trading name of Zenith XYZ Pty Ltd (registration number 2024/246531/07), 13 8th Avenue, Mayfair, Johannesburg, Gauteng, 2092. Our Information Officer is Hamza Jemal (info.zenithxyz@gmail.com). Contact us at info.zenithxyz@gmail.com or 068 041 7010.

What we collect and why

  • To deliver your order: your name, email, mobile number and delivery address. We share these with PayFast (payment) and Bob Go and the courier (delivery).
  • Payments: you pay on PayFast’s own secure page. We never see or store your card details.
  • Your account (optional): your name, email, a securely scrambled password and your order history.
  • Emails about your order: confirmation, shipping and delivery updates, and one review request after delivery.
  • Bag reminder (only if you tick the box): one email if you don’t finish your order. Every reminder has a stop link.
  • Reviews: your rating, review and the name you choose to show. Your email stays private.
  • Cookies: necessary cookies keep your bag and login working. Analytics (Google Analytics) and marketing (Meta) cookies only run if you allow them in our cookie banner. You can change your choice any time with “Cookie settings” at the bottom of every page.
  • Advertising measurement (only with marketing consent): when you buy, we may tell Meta that a purchase happened, using scrambled (hashed) contact details, so we can measure our ads.

Who we share it with

Only service providers who help us run the shop, and only what they need: PayFast (payments), Bob Go and couriers (delivery), Resend (emails), our hosting providers Vercel and Railway, and, with your consent, Google and Meta. Some of these store data outside South Africa (for example in the EU or USA); we only use providers bound by data-protection rules at least as strong as POPIA. We never sell your personal information.

How long we keep it

Order and payment records for as long as tax and consumer law requires [e.g. 5 years: to confirm]. Accounts until you ask us to close them. Unfinished bags for [e.g. 90 days: to confirm].

How we protect it

Encrypted connections, payments on PayFast’s secure page, passwords stored only in scrambled form, limits on login attempts, and access to our systems only for people who need it.

Your rights

  • Ask what personal information we hold about you, and get a copy.
  • Ask us to correct or delete it.
  • Object to us using it for marketing, and withdraw consent at any time.
  • Complain to the Information Regulator (South Africa): inforegulator.org.za.

To use these rights, email our Information Officer at Hamza Jemal (info.zenithxyz@gmail.com). Our PAIA manual explains how to request records.