MerchantMind ← Back to home

Privacy Policy

Last updated: July 2026  ·  Compliant with the Protection of Personal Information Act (POPIA), South Africa

1. Who We Are

MerchantMind ("we", "us", "our") operates the MerchantMind automated repricing platform available at merchantmind.co.za. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.

For privacy-related queries, contact our Information Officer at info@merchantmind.co.za.

2. Information We Collect

We collect the following categories of personal information:

Account Information

Name, email address, and username provided during registration.

Business Information

Your Takealot store name and Takealot Seller API key, used solely to interact with the Takealot platform on your behalf.

Payment Information

Subscription payments are processed by PayFast. We do not store your card details. We retain a PayFast subscription token to manage recurring billing.

Usage and Technical Data

Log data, IP addresses, browser type, and usage patterns collected automatically when you use the Service.

Product and Pricing Data

Product listings, pricing rules, and repricing history associated with your account.

3. How We Use Your Information

We use your personal information only for the following purposes:

  • To provide, operate, and improve the Service
  • To authenticate your account and verify your identity
  • To process subscription payments and manage your billing
  • To interact with the Takealot Seller API on your behalf using your API key
  • To send you transactional emails (account notifications, billing receipts, trial expiry alerts)
  • To respond to support requests and enquiries
  • To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal information on the following grounds under POPIA:

  • Contract performance — to provide the Service you have subscribed to
  • Consent — where you have agreed to receive communications
  • Legitimate interests — to operate, secure, and improve the Service
  • Legal obligation — to comply with applicable South African law

5. Data Storage and International Transfers

MerchantMind is hosted on Railway's cloud infrastructure, which may operate servers outside South Africa. By using the Service, you acknowledge that your personal information may be transferred to and processed in a country outside South Africa. We take reasonable steps to ensure such transfers comply with POPIA's requirements for cross-border transfers of personal information.

6. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the Service. If you cancel your account, we will delete or anonymise your personal data within 90 days, unless we are required to retain it for legal or regulatory purposes.

7. Your Rights Under POPIA

You have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information (subject to legal obligations)
  • Object to the processing of your personal information
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at info@merchantmind.co.za. We will respond within 30 days.

The Information Regulator of South Africa can be contacted at inforeg@justice.gov.za.

8. How We Protect Your Data

We implement technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction, including:

  • Encrypted connections (HTTPS) for all traffic to and from the Service
  • Strict per-customer data isolation — your product listings, pricing rules, and Takealot API key are logically separated from every other customer's data at the database layer, and are never visible or accessible to other MerchantMind customers
  • Your Takealot API key is used exclusively to act on your own store — it is never shared, sold, or exposed to other customers or used for any purpose beyond operating the Service on your behalf
  • Access controls restricting production system access to authorised personnel only
  • Secure, access-controlled database storage for account and credential data

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. In the unlikely event of a security compromise affecting your personal information, we will notify affected users and the Information Regulator without undue delay, as required under POPIA.

9. Third-Party Services

We use the following third-party services that may process your data:

  • PayFast — payment processing (payfast.co.za)
  • Railway — cloud infrastructure and hosting
  • Takealot Seller API — price updates submitted on your behalf

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.

10. Cookies

MerchantMind uses session cookies that are strictly necessary for the Service to function (authentication, CSRF protection). We do not use tracking or advertising cookies. By using the Service, you consent to the use of these essential cookies.

11. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service. The date at the top of this page reflects when the policy was last updated.

13. Contact

For any privacy-related questions or to exercise your rights, contact our Information Officer at info@merchantmind.co.za.