Privacy & POPIA
Last updated 2 September 2026
Prana Trading (Pty) Ltd (“WaterWands”) processes personal information under South Africa’s Protection of Personal Information Act (POPIA). This notice says what we collect, why, where it goes, and what your rights are. It is short because we collect little.
Who is responsible
Prana Trading (Pty) Ltd, trading as WaterWands, is the responsible party under POPIA.
Our information officer can be reached at support@waterwands.co.za. Any question, request or complaint about your personal information goes there first.
What we collect
At checkout: your name, email address, delivery address and phone number. We need these to take your order, deliver it, and reach you if something goes wrong in transit.
Payment details are collected and processed by Paystack, our payment provider. Your card number never reaches our servers and we never store it.
Analytics (PostHog) run only if you opt in through the consent banner. They are off by default. We use no advertising trackers.
Why we process it
To conclude and perform the sale: taking payment, reserving stock, dispatching your order, and delivering it.
To send transactional email about your order — confirmation, dispatch with tracking, and any refund.
To handle support requests and returns.
To keep the records tax and consumer law require us to keep.
We send marketing only with your consent, and you can withdraw that consent at any time.
Who else touches it
We use a small number of operators and service providers, each only for its stated job: Paystack (payment processing), Resend (transactional email), Supabase (our database, hosted in the EU), Vercel (website hosting), and courier partners including The Courier Guy (delivery — they receive your name, address and phone number to deliver your parcel).
We do not sell or rent personal information to anyone.
Where it is stored
Our database is hosted in the European Union. POPIA permits this kind of cross-border transfer where the destination is subject to laws that protect personal information in a substantially similar way; EU data-protection law meets that standard.
How long we keep it
Order records are kept for five years. SARS requires tax records to be retained, and the Consumer Protection Act gives you rights that run for months after purchase — five years covers both.
Marketing consent records are kept until you opt out.
Analytics data exists only if you opted in, and is deleted if you withdraw consent.
Your rights
You may ask what personal information we hold about you, ask us to correct or delete it, and object to processing.
Send any of these requests to support@waterwands.co.za. We will respond within a reasonable time and say plainly what we did or why we could not.
If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) — inforegulator.org.za.