Privacy Policy

1. Who We Are

Sesotho Fashioneng ("SF", "we", "us", or "our") is a premium Basotho streetwear brand operating in Lesotho and South Africa. We operate the website at sesothofashioneng.co.za and related subdomains (the "Site").

Contact: 266penyaplay@gmail.com or WhatsApp: +27 78 110 8296

2. Personal Information We Collect

We collect only the information necessary to process your order and provide our services:

• Email address — collected at checkout to send your order receipt.
• Mobile phone number — collected only if you choose to pay via M-Pesa (Vodacom Lesotho). Used solely to initiate your payment request.
• Order details — items, sizes, quantities, and total — stored temporarily to generate your receipt.
• IP address — automatically recorded in server access logs for security monitoring and fraud prevention.
• Chat messages — if you use the Megahurtz chatbot, your messages are processed entirely within the browser using rule-based logic. No chat messages are transmitted to any external server or stored beyond your active browser session.

We do not collect South African ID numbers, passport details, banking credentials, or any special personal information as defined by POPIA.

3. Purpose of Processing

We process your personal information for the following specific, lawful purposes:

• Processing and fulfilling your purchase order (contractual necessity)
• Sending your order confirmation receipt via email
• Processing your card payment via iVeri / NedSecure
• Processing your M-Pesa mobile payment via Vodacom Lesotho
• Security monitoring and fraud prevention (legitimate interest)
• Responding to your queries and support requests

We do not use your personal information for marketing without your explicit consent.

4. Operators (Third-Party Service Providers)

We share your personal information with the following operators, only to the extent necessary to provide you with our services:

5. Data Retention

• Email address & order details — retained in Resend's delivery logs for up to 30 days, then automatically deleted.
• Server access logs (IP addresses) — retained by Vercel for up to 30 days for security purposes.
• M-Pesa transaction records — retained by Vodacom Lesotho according to their policy and applicable financial regulations.
• Chat messages — processed entirely within your browser using rule-based logic. No messages are transmitted to any external server and nothing is stored beyond your active session.

6. Cookies and Local Storage

This Site does not use tracking cookies or advertising cookies. We use browser localStorage solely to temporarily store your shopping cart contents between page visits. This data never leaves your device and is deleted when you clear your browser data or complete your purchase.

We do not use Google Analytics, Meta Pixel, or any other third-party tracking scripts.

7. Your Rights Under POPIA

As a data subject, you have the following rights under the Protection of Personal Information Act, 4 of 2013 (POPIA):

• Right to access — you may request a copy of the personal information we hold about you.
• Right to correction — you may request correction of inaccurate information.
• Right to deletion — you may request deletion of your personal information, subject to legal retention obligations.
• Right to object — you may object to the processing of your personal information in certain circumstances.
• Right to complain — you have the right to lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg/.

To exercise any of these rights, contact us at 266penyaplay@gmail.com or WhatsApp +27 78 110 8296. We will respond within 30 days.

8. Security

We implement industry-standard security measures to protect your personal information, including HTTPS encryption for all data in transit, secure serverless API architecture, and no storage of card numbers or banking credentials on our servers (all card processing happens directly on NedSecure's PCI-DSS compliant infrastructure).

9. Cross-Border Transfers

Some of our service providers (Resend, Vercel) are based outside South Africa and Lesotho. By using this Site, you consent to your personal information being transferred to and processed in countries that may have different data protection laws. We ensure such transfers are subject to adequate safeguards as required by POPIA.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Continued use of the Site after changes constitutes your acceptance of the updated policy.

11. Contact Us

For any privacy-related queries, access requests, or complaints:

• Email: 266penyaplay@gmail.com
• WhatsApp: +27 78 110 8296