Privacy Policy
SourceFlora stores account, order, delivery, payment, notification, seller, supplier, and marketplace information needed to operate the platform. Data may be used for fulfilment, invoicing, dispatch, communications, fraud prevention, compliance, analytics, service improvement, and customer support. Payment proofs, delivery confirmations, uploaded documents, and communication logs may be retained for audit and operational purposes. Access to administrative tools is restricted by role-based permissions. Information is not shared except where required for service delivery, courier handling, payment processing, legal compliance, or authorised business operations.
Effective date: 2 October 2026. SourceFlora website: https://sourceflora.com/ Customer and compliance contact: admin@support.sourceflora.com.
1. RESPONSIBLE USE OF PERSONAL INFORMATION
SourceFlora processes personal information to operate accounts, orders, invoices, marketplace transactions, procurement, memberships, support, delivery, fraud prevention, compliance and business administration. Processing is intended to be consistent with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African law.
2. INFORMATION WE PROCESS
Information may include names, business details, contact information, delivery/collection addresses, account roles, order and invoice records, payment references and statuses, support communications, uploaded proofs/documents, device/security logs, seller or supplier information and delivery/POD records. SourceFlora does not need to store a customer's online-banking credentials when the customer pays through an external payment provider.
3. PAYMENT PROVIDERS
Ozow processes marketplace, membership and managed auction payments. PayFast may be used as an alternative for marketplace product purchases only after approval and enablement. Payment providers receive the information reasonably required to process, verify, prevent fraud, reconcile and refund transactions under their own legal and security obligations.
4. OTHER SERVICE PROVIDERS
Information may be shared with authorised sellers, suppliers, couriers, messaging providers such as Twilio, hosting/security providers, professional advisers and regulators only to the extent reasonably required for the relevant service, security, audit or legal obligation.
5. COOKIES, ANALYTICS AND SECURITY
The website may use essential cookies for login, cart and security functions and, where configured, analytics/measurement tools. Non-essential tracking should follow the user's available consent choices.
6. RETENTION AND SECURITY
SourceFlora keeps operational, accounting, tax, payment, dispute and fulfilment records for periods reasonably required by law, audit needs and legitimate business operations. Access controls, role separation, security monitoring and backups are used to reduce unauthorised access or loss, although no online system can guarantee absolute security.
7. YOUR RIGHTS
Subject to applicable law, individuals may ask what personal information SourceFlora holds about them, request correction of inaccurate information, object to certain processing, or request deletion where no lawful retention basis applies. Privacy requests can be sent to the contact address above.
8. CROSS-BORDER OR EXTERNAL PROCESSING
Some technology providers may process data outside South Africa. SourceFlora will use such providers only where appropriate contractual, operational or legal protections are in place.
9. UPDATES
Material changes to this policy will be published on this page with an updated effective date.