Privacy policy

What we collect

When you place an order or contact us, we collect the details you provide: your name, email address, phone number and delivery address. Your cart is stored locally in your browser and is not sent to us until you check out.

Account registration adds your email and account details; checkout records the products, delivery details (including any company name and VAT number you add for a tax invoice), payment reference and outcome, and the version and time of your terms acknowledgement. Hosting and security systems may process technical request data such as network addresses and access logs. A contact form opens a draft in your own email app; you choose whether to send it.

How we use it

We use your information to process and deliver orders, to respond to enquiries, and to meet the record-keeping and transport requirements that apply to fuels and dangerous goods. We do not sell your personal information.

We process the information needed to respond to your request, administer your account, perform an order, protect the service and meet applicable legal duties. Providing delivery and contact details is necessary to fulfil an order; optional company details can be left blank. We do not enrol you in marketing from a purchase or account registration.

Reseller applications

If you apply to become a reseller, we collect your contact details, business name/type and location, any company registration and VAT numbers and public shop links you provide, product interests, expected volume and descriptions of your business and handling arrangements. We use this to assess the business, verify relevant information, contact you and record our decision. Applying does not subscribe you to marketing or appoint you as an agent.

When the application service is enabled, applications are stored privately in Supabase and sent to our review inbox through Resend. Applicants cannot read other applications. We may request supporting business information during review; do not submit identity documents, bank details or passwords through this form. Application data follows the business retention schedule and the rights described below.

Cookies and local storage

This site uses your browser's local storage to remember the contents of your cart between visits. It does not use advertising or tracking cookies.

If you create an account, Supabase manages your sign-in and password reset emails. Your sign-in session is remembered in this browser. Saved delivery details and orders are stored in our Supabase project; your account can only read its own profile and orders. The latest order confirmation is also kept in this tab's session storage.

If you choose Ozow, we send the order amount and payment reference to Ozow so it can process payment. Banking details are entered on the payment provider's page. We store the payment reference and verified outcome with your order. A temporary token in this tab lets you check that order's payment status. Payment requests are also rate limited using a hashed network identifier.

When enabled, Cloudflare Turnstile processes security signals to distinguish legitimate requests from automated abuse on account, payment and reseller forms. Its token is validated by the relevant service. We do not use this security check to enrol you in advertising.

Service providers and transfers

Our hosting, account/database and payment providers process information needed to operate the service. Delivery providers receive the details needed for delivery; professional advisers or authorities may receive information where required or permitted by law. Supabase manages accounts and order storage, and Ozow handles its hosted payment flow. A selected hosting provider and its processing locations must be confirmed before launch.

Some providers may process information outside South Africa. Before enabling those services for live customers, we must confirm the applicable processing agreements and lawful safeguards for those transfers. We restrict access to customer data and do not publish customer addresses or order histories in search results.

Retention and your rights

We keep order records only as long as needed for the order and for legal and tax obligations, disputes and security needs. The business must maintain and apply a retention schedule; a request to delete an account may not remove records that must legally be retained. You can request access or correction, ask for deletion where applicable, or object to processing as permitted by law. We may need to verify your identity proportionately before acting.

You can edit saved delivery details in your account, sign out on shared devices, and clear the site's browser storage. Clearing browser storage removes the local cart/session; it does not itself delete server records. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

Contact

Use the published privacy contact above, or the contact page.

You may also lodge a complaint with South Africa's Information Regulator. We will investigate suspected compromises and make notifications where the law requires them. Changes to this notice will be published here with a revised version.