Privacy Policy

OneShop ("we", "us", or "our") operates https://oneshop.co.za, a South African product discovery and price comparison platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website, mobile experiences, and related services (collectively, the "Service").

We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African law. By using the Service or creating an account, you acknowledge this Privacy Policy.

1. Who we are

OneShop is operated from Cape Town, South Africa. OneShop helps shoppers discover products, compare prices across participating retailers, save items, follow brands, and engage with editorial and community content. We are a comparison and discovery platform — we do not sell products directly and we are not the merchant of record for items listed on the Service.

For privacy-related enquiries, contact us at [email protected]. Merchant partnership enquiries may be directed to [email protected].

2. Information we collect

We may collect the following categories of information:

Account information

• Name, email address, and profile photo when you register or sign in.
• Authentication details when you use email and password sign-in.
• Basic profile information supplied by third-party login providers (such as Google, Facebook, or Apple) when you choose social sign-in.

Usage and interaction data

• Pages viewed, products searched, categories browsed, and items liked or saved.
• Clicks on product offers and outbound redirects to retailer websites.
• Lists, collections, interests, taste profile preferences, and notification settings.
• Community posts, comments, votes, tags, and other content you submit in forum or Q&A areas.
• Device type, browser, approximate location derived from IP address, referring URLs, and timestamps.

Technical and cookie data

• Session identifiers, authentication tokens, and security logs.
• Cookie and similar technology data used to keep you signed in, remember preferences, measure traffic, and serve relevant advertising where enabled.

Communications

• Messages you send to our support team and any feedback you provide.
• Service-related emails or in-app notifications about your account or activity, where permitted.

3. How we use your information

We use personal information to:

• Provide, maintain, and improve the Service, including personalised feeds, search, and recommendations.
• Authenticate you, manage your account, and protect against fraud or abuse.
• Remember saved items, lists, brand follows, and taste preferences.
• Operate community features and moderate content according to our community rules.
• Measure performance, analyse trends, and understand how the Service is used.
• Display advertising and sponsored placements where configured, including through Google AdSense or similar partners.
• Communicate with you about the Service, security notices, or support requests.
• Comply with legal obligations and enforce our Terms of Service.

4. Legal basis under POPIA

We process personal information where:

• Consent — for example, when you create an account, accept cookies, or opt in to certain communications.
• Contract — where processing is necessary to provide the Service you request.
• Legitimate interests — such as securing the platform, improving features, measuring usage, and preventing misuse, balanced against your rights.
• Legal obligation — where we must retain or disclose information to comply with law.

5. Cookies and analytics

We use cookies and similar technologies to operate the Service, remember your preferences, and understand audience behaviour. We may use analytics tools such as Google Analytics to collect aggregated usage statistics. Where advertising is enabled, partners such as Google AdSense may use cookies to serve and measure ads.

You can control cookies through your browser settings. Disabling certain cookies may limit sign-in, saved items, or personalised features.

6. How we share information

We do not sell your personal information. We may share information:

• With service providers who help us host, search, analyse, secure, or support the Service (for example cloud hosting, search indexing, email delivery, or AI-assisted content enrichment), under appropriate confidentiality and data protection terms.
• With authentication providers when you choose social login.
• With retailers indirectly when you click through to a merchant website — the retailer may receive its own tracking data under its privacy policy, but we do not pass your OneShop account details to retailers solely because you viewed a product.
• Publicly when you post community content, publish a public collection, or otherwise choose to make information visible to other users.
• For legal reasons if required by law, court order, or to protect the rights, safety, and integrity of OneShop, our users, or others.
• In a business transfer if OneShop is involved in a merger, acquisition, or sale of assets, subject to this Privacy Policy or equivalent protections.

7. International transfers

Our infrastructure and some service providers may process data outside South Africa. Where personal information is transferred cross-border, we take reasonable steps to ensure appropriate safeguards consistent with POPIA.

8. Data retention

We retain personal information for as long as needed to provide the Service, fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or anonymise it using reasonable technical measures.

9. Security

We implement administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, or misuse. No online service can guarantee absolute security; please use a strong password and keep your login credentials confidential.

10. Your rights

Subject to POPIA and applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Request correction or deletion of inaccurate or outdated information.
• Object to certain processing or withdraw consent where processing is consent-based.
• Lodge a complaint with the Information Regulator (South Africa).

To exercise these rights, email [email protected]. We may need to verify your identity before responding.

11. Children

The Service is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

12. Third-party websites

When you leave OneShop to visit a retailer, brand, or other third-party site, that site’s privacy policy applies. We are not responsible for the privacy practices of external websites linked from the Service.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when it was revised. Material changes will be posted on this page. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact

Questions about this Privacy Policy or our data practices: [email protected]