Privacy Policy

Last updated: 1 May 2026

OrdersFlow ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website and Chrome extension (collectively, the "Service"). We comply with the Protection of Personal Information Act 4 of 2013 ("POPIA") of the Republic of South Africa.

1. Information We Collect

1.1 Account Information

When you create an account we collect your email address and an encrypted password. We do not store your password in plain text.

1.2 Payment Information

Subscription payments are processed by PayFast. We do not store your card number or banking details on our systems. PayFast may collect payment information in accordance with their own privacy policy.

1.3 Order Data

The Chrome extension reads order details (customer name, delivery address, and phone number) directly from your Shopify order page and sends them to the Aramex Store-to-Door form within your browser. This data is processed locally in your browser and is not transmitted to or stored on our servers.

1.4 Licence Validation

The Chrome extension sends your licence key to our licensing server (api.ordersflow.co.za) to verify that your subscription is active. We record the date and time of the most recent validation. No order data, browsing history, or Shopify store content is included in this request.

1.5 Usage Data

We may collect technical information about how you use the Service, including browser type, operating system, pages visited on our website, and the date and time of your visit. This information is used to improve the Service and is not linked to your personal identity.

1.6 Communications

If you contact us for support, we will collect the information you provide in your communication, including your email address and the content of your message.

2. How We Use Your Information

2.1 Service Delivery

We use your email address to create and manage your account, authenticate your login, send transactional emails (such as subscription confirmations and password reset emails), and provide customer support.

2.2 Subscription Management

We use your account information to manage your subscription status, verify licence validity, and process subscription renewals or cancellations.

2.3 Service Improvement

Aggregated and anonymised usage data helps us understand how the Service is used and identify areas for improvement.

2.4 Legal Compliance

We may use or disclose your information as required by law, including to comply with a court order, subpoena, or other legal process, or to protect the rights and safety of OrdersFlow, our users, or the public.

3. Sharing of Information

3.1 Service Providers

We share your information with carefully selected third-party service providers who assist us in operating the Service:

These providers are contractually obligated to use your information only to provide services to us and to protect your information.

3.2 No Sale of Data

We do not sell, rent, or otherwise commercially exploit your personal information to third parties.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4. Data Retention

4.1 Active Accounts

We retain your personal information for as long as your account is active or as needed to provide the Service.

4.2 After Account Deletion

If you delete your account, we will delete or anonymise your personal information within 30 days, unless we are required to retain it for legal, regulatory, or fraud prevention purposes.

4.3 Order Data

Because order data (customer names, addresses, phone numbers) is processed locally in your browser and is never sent to our servers, we do not retain it and it is not subject to our data retention schedule.

5. Your Rights Under POPIA

5.1 Right of Access

You have the right to request a copy of the personal information we hold about you.

5.2 Right to Correction

You have the right to request correction of inaccurate personal information we hold about you.

5.3 Right to Deletion

You have the right to request that we delete your personal information, subject to any legal obligations that require us to retain it.

5.4 Right to Object

You have the right to object to the processing of your personal information for purposes of direct marketing.

5.5 How to Exercise Your Rights

To exercise any of these rights, please email us at support@ordersflow.co.za with the subject line "POPIA Request". We will respond within 30 days.

5.6 Complaints

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg/.

6. Cookies

6.1 What We Use

Our website uses essential session cookies to maintain your authenticated state (provided by Supabase). These are strictly necessary for the Service to function and cannot be opted out of while using the Service.

6.2 Analytics

We do not currently use third-party analytics or advertising cookies on our website.

7. Security

7.1 Measures

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data storage, secure HTTPS connections, and access controls.

7.2 No Absolute Guarantee

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the Information Regulator as required by law.

8. Contact

For any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact our Information Officer at:

OrdersFlow
Email: support@ordersflow.co.za