Claycraft
Privacy
How we look after personal information, in plain words. We follow South Africa’s Protection of Personal Information Act (POPIA).
Last updated: 25 September 2026
Draft: the company details on this page still need to be filled in and checked before Claycraft opens to the public.
Who we are
Claycraft is run by Claycraft (Pty) Ltd (registration [registration number]), [registered address]. Our information officer is [name of the information officer]. You can reach us at help@claycraft.co.za.
Two kinds of people
- Business owners who build a website with Claycraft. For your account, we decide how your information is used.
- Their customers and visitors who order or send a message on an owner’s website. The owner decides how that information is used; we store and process it for them.
What we collect from business owners
- Your name, email address and password (we only keep a scrambled version of the password; nobody can read it).
- What you put on your website: words, photos, prices, business details and settings.
- Payment settings you choose. Keys for PayFast and Yoco are locked with encryption before we store them.
What we store for the owner’s customers
- For an order: name, phone number, email address (if given), delivery address (if delivered), what was ordered and a note.
- For a message: name, phone number or email address, and the message.
- We never see or store card numbers. Card payments happen on PayFast’s or Yoco’s own secure pages.
Why we use it
- To run your website and shop, and to send orders and messages to the right business.
- To send emails you expect: order confirmations, “your order is ready”, and notices about your account.
- To keep Claycraft safe, for example to stop spam and too many login attempts.
We don’t sell personal information, and we don’t use it for advertising.
Cookies
We only use cookies that are needed: one keeps business owners logged in, and one lets owners preview their unpublished changes. Shoppers’ baskets are kept in their own browser. We don’t use advertising or tracking cookies.
Who helps us
We use trusted services to host the websites and database, to store photos and to send email. Some of them store information outside South Africa, with protection comparable to POPIA. We only share what each service needs to do its job.
How long we keep it
We keep an owner’s information while their account is open. When an account is closed, we delete the website, orders and messages within 90 days, except what the law requires us to keep (such as invoices).
Your rights
You may ask to see the personal information we hold about you, to correct it or to delete it, and you may object to how it is used. If you ordered from a business on Claycraft, you can ask that business directly, or ask us and we will pass it on. If you are unhappy with our answer, you may complain to the Information Regulator (inforegulator.org.za).
Keeping it safe
Connections are encrypted (https), passwords are scrambled, payment keys are encrypted, and each owner can only see their own website’s information.
Changes
If we change this page in an important way, we will tell business owners by email before the change takes effect.