Lawful processing
We process personal information only where it is necessary to provide the marketplace, where you have consented, or where the law requires it.
Minimality
We ask for the least information needed. Bank details are collected only from sellers who want payouts, and ID verification only where required for trust.
Your POPIA rights
Under POPIA you may:
- Ask what personal information we hold about you
- Request correction or deletion
- Object to processing
- Complain to the Information Regulator
Information Officer
Requests can be sent to privacy@cradl.site. We respond within 30 days as required by the Act.
Cross-border transfers
Some infrastructure providers store data outside South Africa under contractual safeguards that require an equivalent level of protection.
Breach notification
If personal information is compromised, we notify affected users and the Information Regulator as soon as reasonably possible.