Privacy Policy
Last updated: 1 February 2026
OneDayOnly (Pty) Ltd (“OneDayOnly”, “we”, “us”, or “our”) is committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, store, and share your information when you use our website at www.onedayonly.co.za and related services. This policy complies with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation.
1.Information We Collect
We may collect and process the following categories of personal information:
Information you provide directly:
- Name, surname, and contact details (email address, phone number)
- Physical and delivery address
- Account credentials (email and password)
- Payment information (processed securely via third-party payment providers)
- Communications with our support team
Information collected automatically:
- Device information (browser type, operating system, device type)
- IP address and approximate geographic location
- Browsing behaviour (pages visited, products viewed, time spent)
- Referring website or search terms
- Cookie and tracking technology data
2.How We Use Your Information
We use your personal information for the following purposes:
- Order fulfilment: Processing, shipping, and delivering your purchases
- Account management: Creating and maintaining your user account
- Customer support: Responding to enquiries, complaints, and return requests
- Marketing: Sending deal alerts, newsletters, and promotional content (with your consent)
- Personalisation: Tailoring product recommendations and website content to your preferences
- Analytics: Understanding site usage to improve our platform and user experience
- Legal compliance: Meeting our obligations under South African law
- Fraud prevention: Detecting and preventing fraudulent transactions
4.Third Parties
We may share your personal information with the following categories of third parties, only to the extent necessary:
- Payment processors: To securely process your transactions (e.g., PayFast, Peach Payments)
- Delivery partners: To ship your orders (e.g., The Courier Guy, Dawn Wing)
- Marketing platforms: To send communications you have opted into (e.g., email service providers)
- Analytics providers: To analyse website usage (e.g., Google Analytics)
- Legal authorities: When required by law or to protect our legal rights
We do not sell your personal information to third parties. All third-party service providers are contractually obligated to protect your information in accordance with POPIA.
5.Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- SSL/TLS encryption for all data transmitted between your device and our servers
- PCI-DSS compliant payment processing (we never store full card details)
- Regular security audits and vulnerability assessments
- Access controls limiting who can view personal information
- Secure data backups and disaster recovery procedures
While we take every reasonable step to protect your information, no system is completely secure. We encourage you to use a strong, unique password for your account.
6.Your Rights (POPIA)
Under the Protection of Personal Information Act (POPIA), you have the following rights regarding your personal information:
- Right to access: Request confirmation of what personal information we hold about you
- Right to correction: Request that we correct or update inaccurate information
- Right to deletion: Request that we delete your personal information (subject to legal retention requirements)
- Right to object: Object to the processing of your information for direct marketing purposes
- Right to data portability: Request a copy of your data in a commonly used format
- Right to withdraw consent: Withdraw previously given consent at any time
- Right to lodge a complaint: File a complaint with the Information Regulator of South Africa
To exercise any of these rights, please contact our Information Officer at the details provided below.
7.Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. Specifically:
- Account information is retained for as long as your account is active
- Transaction records are retained for 5 years (as required by SARS)
- Marketing preferences are retained until you unsubscribe
- Analytics data is anonymised after 26 months
When your information is no longer needed, we will securely delete or anonymise it.
8.Contact Details
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
OneDayOnly (Pty) Ltd
Information Officer: Legal Department
Email: privacy@onedayonly.co.za
Phone: 021 555 1234
Information Regulator (South Africa): inforegulator.org.za