AllesLocal Web

Privacy Policy

How we handle your personal information.

This policy explains what personal data AllesLocal collects, how we use it, and the rights you have under the Protection of Personal Information Act (POPIA). Last updated 5 May 2026.

Who we are

AllesLocal Web is a South African website-builder and online-shop platform operated from the Republic of South Africa. References to "we", "us", and "our" mean AllesLocal. Contact: info@alleslocal.com.

What we collect

We only collect information needed to operate the platform:

  • Account information — name, email, password (hashed), and phone number when you register.
  • Site content — pages, products, orders, blog posts, recipes, photos, and any other content you publish through your AllesLocal site.
  • Payment data — we do not store card numbers. Payment processing is handled by PayFast (PayFast Pty Ltd, registered in South Africa). We store a tokenised reference so we can charge your monthly subscription.
  • Customer data on your site — if you run a shop, your customers' names, email addresses, shipping addresses, and order histories are stored in our database. You are the data controller for that information; we are the data processor.
  • Traffic analytics — we count page views and broad referrer categories (e.g. "Facebook", "Google") server-side. We do not use third-party tracking pixels or set advertising cookies.
  • Technical logs — standard request logs (IP, user agent, timestamp) for security and debugging, retained for 30 days.

How we use it

  • To operate, maintain, and improve the platform.
  • To bill your subscription via PayFast.
  • To send you transactional email about your account (e.g. payment receipts, security alerts). We don't send marketing email without explicit opt-in.
  • To respond to support requests.
  • To detect and prevent abuse, fraud, and security threats.

Who we share with

We share data only with the service providers we need to run the platform:

  • PayFast — payment processing.
  • Cloudflare — CDN, image hosting (R2), and DDoS protection. Servers are in the EU/UK.
  • AWS (EC2) — application hosting. Our database is in the eu-west-1 region.
  • Anthropic — we use Claude (an AI model) to power optional features like AI content rewriting, social-caption generation, and PDF recipe import. Your input is sent to Anthropic only when you actively use one of these features. Anthropic does not train on this data.
  • Email providers — outbound email is sent via mail21.domains.co.za (a South African SMTP service).
  • Meta & Pinterest — only if you connect their accounts to your AllesLocal site for social posting. We then exchange OAuth tokens with them. You can disconnect at any time.

We do not sell, rent, or trade personal information.

How long we keep it

  • Active sites — for as long as your account exists.
  • Deleted sites — 30-day grace window (see "Deleting your site" below) then permanently destroyed.
  • Closed accounts — same 30-day window.
  • Financial records — invoices and payment records are retained for 5 years to comply with the South African tax laws (Section 29 of the Tax Administration Act).
  • Anonymised analytics — aggregate, non-personal usage statistics are retained indefinitely.

Deleting your site

You can delete your site at any time from your dashboard under Account → Delete site. When you do:

  • Your site goes offline immediately. Public visitors will see a "not found" page.
  • Active billing is paused — you won't be charged during the grace period.
  • We retain your data for 30 days so you can restore the site if you change your mind. During this window, log in and click Restore on the dashboard banner.
  • After 30 days, your site and all associated data are permanently and irrevocably deleted from our systems — pages, products, orders, blog posts, recipes, gallery images, customer records, and analytics history. Uploaded files are also deleted from our object storage.
  • Aggregate non-personal metrics and anonymised audit logs are retained for legal and statistical purposes only.

Platform administrators may delete a site on your behalf if you request it via support, or if the site violates our terms of service. The same 30-day grace period applies.

If you require immediate erasure (e.g. for legal reasons), email info@alleslocal.com and we'll process it within 7 days.

Your rights under POPIA

Under the Protection of Personal Information Act, you have the right to:

  • Access the personal information we hold about you.
  • Correct or update inaccurate information.
  • Request deletion of your information (right to be forgotten).
  • Object to processing for direct marketing.
  • Lodge a complaint with the Information Regulator: inforegulator.org.za.

To exercise any of these rights, email info@alleslocal.com. We respond within 14 working days.

Cookies

We use only first-party functional cookies needed to keep you logged in and remember preferences. We do not use advertising or tracking cookies. Your browser allows you to clear cookies at any time.

Children

AllesLocal is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe we have, contact us and we'll delete it.

International transfers

Some of our infrastructure providers (Cloudflare, AWS, Anthropic) operate from outside South Africa. By using AllesLocal, you consent to these transfers. We rely on the contractual safeguards each provider offers under their own privacy commitments.

Changes to this policy

We may update this policy as the platform evolves. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated by email to the address on file with your account.

Contact

For privacy queries, requests under POPIA, or complaints, contact our Information Officer at info@alleslocal.com.