Privacy Policy

Last updated: 18 October 2026

This policy explains how personal information may be handled when you visit celebdrop.co.za, create an account, follow profiles, apply to sell, contact support or place an order. It is intended to describe the Celeb Drop marketplace. Review and complete each yellow-highlighted instruction with verified details before treating this notice as complete.

1. Who is responsible for your information?

The POPIA responsible party for this website is:

Trading name: Celeb Drop.
Full legal name and legal status: [SITE OWNER ACTION: Insert the full legal name and legal status of the person/entity that decides why and how this website processes personal information.]
Physical address: [SITE OWNER ACTION: Insert the responsible party’s physical business address.]
Privacy contact: [SITE OWNER ACTION: Insert a monitored privacy email address and telephone number.]
Information Officer: [SITE OWNER ACTION: Insert the Information Officer’s name and contact details, or the appropriate registered contact channel.]
Address for privacy/legal correspondence: [SITE OWNER ACTION: Insert the address for formal privacy requests and legal notices.]

2. Personal information we may collect

The information depends on which parts of the marketplace you use. It may include:

Account and contact details, such as name, username, email address and telephone number.
Order and delivery information, such as items ordered, transaction references, billing or delivery address, order history and communications about an order.
Seller and application information, such as public profile details, business/contact details, listing information and information or documents submitted to support an identity or seller application.
Fan activity and preferences, such as profiles you follow and communication preferences.
Support and communication records, including information you choose to send in a form or email.
Technical and security information that may be recorded when the website is used, such as IP address, device/browser details, access times, and security or diagnostic logs.

Please do not send sensitive personal information unless it is specifically requested for a legitimate marketplace or legal purpose. If identity documents are requested for verification, provide them only through the designated secure process. [SITE OWNER ACTION: Confirm exactly which account, checkout, seller-application, identity-verification, log and payment fields the live site collects. Remove any category that does not apply and add anything material that does.]

3. How information is collected

We collect information you provide through account, checkout, seller application and support features. Some technical information may be collected automatically when you use the website. We may also receive information from a payment, delivery or verification provider, or from a publicly available source, where relevant to an order, application or fraud-prevention check.

[SITE OWNER ACTION: Identify any information collected from third parties or public sources, the source/category and purpose; remove this paragraph if no such collection takes place.]

4. Why we use personal information

Depending on the feature, personal information may be used to:

create and manage accounts, profiles and seller applications;
display public seller profiles and listings as requested;
process orders, payments, delivery, returns and customer support;
send essential account, application and order communications;
protect the website, users and transactions, including investigating fraud or misuse;
keep business, tax, transaction and compliance records and meet legal obligations; and
send marketing communications where permitted by law and, where required, with your consent.

We use information for specific, lawful purposes and limit access to what is reasonably needed for those purposes. Where POPIA requires a lawful basis, the applicable basis may include performance of a contract, compliance with a legal obligation, consent, or a legitimate interest that does not override your rights.

5. Required and optional information

Some information is needed to create an account, process an order, deliver an item, review a seller application or respond to a support request. If required information is not provided, the relevant feature or transaction may not be available. Optional profile or marketing information can be left blank, and marketing preferences can be changed as described below.

[SITE OWNER ACTION: Confirm which fields are mandatory at registration, checkout and seller application, explain the consequence of leaving each required category blank, and identify any applicable law that requires collection.]

6. Who may receive information

We may disclose information only as reasonably needed to operate the marketplace, including to:

the seller responsible for fulfilling an order, who may need the buyer’s order, contact and delivery details;
payment providers to process and reconcile a transaction;
delivery or fulfilment providers to deliver an item and manage delivery issues;
website hosting, security, email, support and technical service providers that process information for us;
professional advisers, regulators, law-enforcement bodies or courts where disclosure is lawful or required; and
a successor in connection with a business transfer, subject to applicable privacy protections.

Service providers should receive only the information needed for their assigned function and must protect it under applicable arrangements. We do not sell personal information as a standalone product.

[SITE OWNER ACTION: List or accurately describe the actual hosting, payment, delivery, email, support, security, analytics and other service-provider categories; explain if vendors process data on our behalf or determine their own purposes. Confirm what buyer data sellers receive.]

7. Transfers outside South Africa

Some service providers may store or process information outside South Africa. Where a cross-border transfer occurs, we will take steps required by POPIA to ensure that the transfer is permitted and that appropriate protection applies.

[SITE OWNER ACTION: Identify any countries or international organisations to which personal information is sent, the relevant provider/category and the protection relied on under POPIA section 72. If there are no cross-border transfers, say so only after confirming the hosting, email, payment and other provider locations.]

8. Cookies and similar technologies

The website may use cookies or similar technologies needed for functions such as account sign-in, security, shopping-cart or checkout continuity, and remembering preferences. Optional analytics or advertising technologies should be described separately and used in line with applicable law and your choices.

[SITE OWNER ACTION: Audit the live site and identify each cookie/similar technology, purpose, provider and duration; state how users can manage optional cookies. Remove claims about analytics or advertising if those tools are not installed.]

9. Retention and deletion

We keep personal information only for as long as reasonably needed for the purpose for which it was collected, including to complete orders, provide support, resolve disputes, maintain required business or tax records, protect the service, and meet legal obligations. When it is no longer required, it will be deleted, destroyed or de-identified where reasonably practicable and lawful.

[SITE OWNER ACTION: Set or confirm the retention periods or criteria for inactive accounts, orders/payment records, seller applications and verification documents, support records, security logs, and marketing preferences. Ensure the schedule matches legal duties and actual system backups.]

10. Security

We use reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, disclosure or alteration. No internet transmission or storage system can be guaranteed completely secure. If a security compromise occurs, we will take the steps required by applicable law.

[SITE OWNER ACTION: Add a concise, accurate description of the safeguards in place and the process for reporting suspected security incidents. Do not claim certifications or specific controls unless verified.]

11. Marketing and your choices

You can opt out of marketing emails by using the unsubscribe link in the message or contacting the privacy contact below. Opting out of marketing does not stop essential service messages about accounts, applications or orders. You can update account details and communication preferences where those controls are available.

12. Your rights

Subject to applicable law, you may request access to personal information, correction or deletion of inaccurate or unlawfully held information, object to certain processing, withdraw consent where processing is based on consent, or complain to the Information Regulator. We may need to verify your identity and may retain information where the law permits or requires it. Submit requests to the privacy contact above.

Information Regulator (South Africa): inforegulator.org.za. The Regulator provides information and complaint channels on its official website.

13. Children

[SITE OWNER ACTION: State the minimum age for accounts and purchases, whether the service is directed to children, and how information about children is handled. Confirm the policy with the actual service design and applicable law.]

14. Third-party websites and services

Links to third-party websites or embedded services are governed by those parties’ own privacy notices. Review their terms before using them. We are not responsible for privacy practices on websites we do not operate.

15. Changes to this policy

We may update this policy when our processing or the law changes. The current version will appear on this page with its update date. If a change materially affects how information is used, we will provide further notice where required.

16. Completion checklist

[SITE OWNER ACTION: Before treating this notice as complete, replace every yellow SITE OWNER ACTION with verified information, remove the yellow highlight and instruction text, and confirm the notice reflects all live forms, checkout fields, seller tools, cookies, vendors, international transfers and retention settings. POPIA section 18 requires collection notices to cover the responsible party and other relevant collection details.]

Privacy law: Protection of Personal Information Act 4 of 2013 (POPIA). See especially sections 18 and 72.