← Back to Stockist

Privacy Policy

Last updated: 23 August 2026

Stockist (“Stockist”, “we”, “us”, “our”) is a South African business-to-business platform for ordering stock, coordinating deliveries and managing bookkeeping, available as a mobile app (Android & iOS) and web dashboards. This policy explains what personal information we collect, why, how we use and share it, and the rights you have. We handle personal information in line with the Protection of Personal Information Act, 2013 (POPIA).

1. Information we collect

a) Information you give us

• Account & business details — your name, business/trading name, email address, phone number, physical/delivery address, and (where applicable) VAT number.
• Operational data — suppliers, goods and prices you capture, orders you place or receive, delivery notes, invoices, expenses and receipts, and inventory records.
• Driver details — where you register as, or add, a delivery driver: name, contact details, vehicle and licence information, and identity/verification documents you submit.
• Support communications — messages you send us or send through in-app chat.

b) Information collected automatically

• Location — with your permission, drivers’ device location is used to power live delivery tracking and navigation. Location tracking runs only in the context of an active delivery.
• Device & usage data — device type, operating system, app version, push-notification token, and basic activity needed to run the service and diagnose problems.

c) Payment information

Subscription payments are processed by Paystack, a licensed payment provider. Card details are entered on Paystack’s secure, PCI-DSS-compliant systems — Stockist never sees or stores your full card number. We receive only a payment reference, status and the plan you chose.

2. How we use your information

• To create and manage your account and provide the ordering, delivery and accounting features.
• To route orders between buyers and suppliers, generate invoices and delivery notes, and enable live delivery tracking and proof of delivery.
• To take subscription payments, manage the 14-day free trial, renewals and cancellations.
• To send service messages and notifications (order updates, delivery status, receipts).
• To provide support, keep the platform secure, prevent fraud and abuse, and comply with legal and accounting obligations.
• To improve and maintain the service.

3. Legal grounds for processing (POPIA)

We process your information because it is necessary to perform our contract with you (running the service you signed up for), because you have consented (for example to location tracking or marketing), to meet a legal obligation (such as tax and accounting record-keeping), or for our legitimate interests in operating and securing the platform.

4. How we share information

We do not sell your personal information. We share it only as needed to run the service:

• The other party to a transaction — when you place or receive an order, the relevant buyer and supplier see the order, contact and delivery details needed to fulfil it.
• Delivery drivers — assigned drivers receive the pickup/delivery address and contact details required to complete the delivery.
• Service providers — Google Firebase / Google Cloud (hosting, database, authentication, notifications), Paystack (payments), and mapping/geocoding providers, acting as our operators under contract.
• Legal & safety — where required by law, court order, or to protect the rights, property or safety of users and the public.

5. International transfers

Our infrastructure providers (Google Firebase/Cloud) may process and store data on servers outside South Africa. Where information is transferred across borders, it is protected by the safeguards those providers maintain and by POPIA’s requirements for cross-border transfers.

6. Data retention

We keep personal information for as long as your account is active and as long as needed to provide the service. Certain records — such as invoices, delivery notes and transaction history — are retained for the periods required by South African tax and company law (generally up to 5 years) even after account closure. When information is no longer needed, we delete or anonymise it. See our Data & Account Deletion policy.

7. Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS/TLS), authenticated access, and access controls that limit who can see your data. No system is perfectly secure, but we work to protect your information and will notify you and the Information Regulator of a compromise as required by POPIA.

8. Your rights

Under POPIA you have the right to:

• Access the personal information we hold about you.
• Ask us to correct or update information that is inaccurate.
• Request deletion of your account and personal information (subject to records we must keep by law).
• Object to processing, or withdraw consent you have given (for example, turn off location).
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these, email support@stockist.site. You can delete your account and data at any time — see Data & Account Deletion.

9. Children

Stockist is a business tool intended for users aged 18 and over. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new “last updated” date and, for material changes, notify you in the app or by email.

11. Contact us