Privacy Policy

Karavan Digital (Pty) Ltd (reg 2025/232551/07), trading as SuperSaver and operating the Stokvel.Shop platform, is the “Responsible Party” for the personal information it processes about you in terms of POPIA.

Registered address: 32 Kloof Street, Gardens, Cape Town, 8000, South Africa.

Our designated Information Officer can be contacted at accounts@karavan.media for any queries, requests, or complaints regarding your personal information or this policy.

• Identity & contact: name, email address, mobile number.
• Delivery: physical delivery address you provide at checkout.
• Payment: a payment reference and the last few digits of your card from our payment processor — we do not store full card numbers or CVV.
• Order & team activity: deals you join, teams you create or join, status of those teams, and the orders that result.
• Communications: messages you send to us, and our system messages to you (transactional email and SMS).
• Technical: device, browser, IP address and pages you visit, for security and to improve the Platform.

Site activity feeds: when you join a team, your first name and last initial (e.g. “Thabo M.”) may appear in our live activity strip and similar public team-progress displays on the Platform, together with the deal you joined. Full names, contact details, payment information and order numbers are never shown publicly.

• Performance of contract: to take payment, qualify your team, place orders with our store, and deliver to you.
• Legal obligation: tax, accounting, fraud prevention, and responding to lawful requests.
• Legitimate interest: securing the Platform, preventing abuse, and improving service quality.
• Consent: non-essential marketing, where you have opted in.

We do not send marketing or invitation SMS without an existing relationship and an opt-in. You can opt out of marketing at any time. Operational messages (e.g. “your team filled”) are part of the service.

• Payment processor — to authorise, capture and refund your payments.
• Courier — name, contact number, delivery address, order reference.
• Email and SMS providers — to send you transactional messages.
• Cloud hosting and database providers — to operate the Platform.
• Authorities — only when required by law or court order.

We do not sell your personal information. We require all operators to safeguard it under written agreements.

Some of our service providers process data outside South Africa. We rely on POPIA section 72 safeguards (binding agreements with comparable protections, or your express consent) when transferring personal information to another country.

We keep personal information only as long as needed for the purposes set out above, then delete or anonymise it. Order and payment records are retained for the period required by South African tax and accounting law (typically five years from the end of the relevant tax year).

We apply technical and organisational safeguards including database row-level security, encrypted transmission (HTTPS), least-privilege access, audited admin actions, and an append-only financial event ledger. No system is perfectly secure, and we cannot guarantee absolute security, but we treat your data with the care that POPIA requires.

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to fix inaccurate information.
• Deletion — ask us to delete information we are no longer entitled to keep.
• Objection — object to processing based on legitimate interest or direct marketing.
• Withdrawal of consent — at any time, for processing based on consent.
• Complaint — to us first, or to the Information Regulator (see below).

To exercise these rights, email accounts@karavan.media.

We use a small number of essential cookies to keep you signed in and to remember your cart and team membership. We use privacy-respecting analytics to understand traffic patterns. We do not run third-party advertising trackers.

The Platform is intended for adults (18 and over). We do not knowingly collect personal information of children. If you believe we have, contact the Information Officer and we will delete it.

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 · POBox 31533, Braamfontein, 2017 · inforegulator.org.za

We may update this Privacy Policy from time to time. Material changes will be highlighted on the Platform.

Information Officer: accounts@karavan.media
Customer support: hello@stokvel.shop
Postal: 32 Kloof Street, Gardens, Cape Town, 8000, South Africa