Privacy Policy

Arcovia Privacy Policy

Last updated: 21 July 2026.

This policy explains how Arcovia collects, uses, shares, stores and protects personal information when you use arcovia.africa, submit a sourcing request, pay, receive updates or arrange delivery. Arcovia aims to process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable law.

1. Responsible party and contact

Arcovia determines why and how personal information is used for the sourcing service. Privacy questions, access requests, corrections, objections or deletion requests can be sent to arcovia.africa@gmail.com. Include enough information to identify the request, but never email passwords, payment-card numbers or one-time codes.

2. Information we collect

• Name, email address, phone number and country code.
• Delivery address and address-search selection.
• Sourcing brief, category, specifications, size, condition, preference, budget, notes and links you provide.
• Shopify order number, payment status, quote, option selection, cancellation, refund, supplier-order and tracking status.
• Messages, support history and evidence you send for a return, fault or delivery issue.
• Technical information ordinarily collected by Shopify and the site, such as device, browser, IP address and cookie information.

Arcovia does not receive or store your full payment-card credentials; payment details are handled by Shopify and the enabled payment provider.

3. Why we use it

We use information to create and manage your request; tailor research to your specifications; estimate delivery and landed cost; verify suppliers and routes; prepare quotes; prevent fraud and abuse; process payments and refunds; purchase and deliver the selected option; send operational updates; provide support; keep lawful business records; secure the service; and comply with tax, customs, consumer and legal obligations.

4. Legal basis

Depending on the information and purpose, processing is necessary to take steps at your request or perform the service agreement, comply with law, pursue a legitimate business or security interest that does not unjustifiably override your rights, protect a legitimate interest, or is based on your consent. You may withdraw consent where consent is the basis, without affecting earlier lawful processing.

5. Address search and maps

When you use address autocomplete, the address text you type may be sent to the configured mapping or geocoding provider to return suggestions. Select only your intended delivery address. Arcovia stores the chosen address with the sourcing request because it is needed to estimate shipping and complete delivery. The mapping provider may process technical data under its own privacy terms.

6. Who receives information

Information is shared only as reasonably necessary with service providers such as Shopify, the payment provider, email provider, secure hosting or tunnel provider, mapping provider, relevant supplier, courier, freight forwarder, buying or shipping agent, customs or clearing party, professional adviser, or authority legally entitled to it. Supplier candidates shown privately to Arcovia do not automatically receive customer information. A chosen supplier or delivery provider receives only the details reasonably needed to quote, purchase, clear or deliver.

7. International processing

Some suppliers and technology providers operate outside South Africa. Where personal information is transferred across borders, Arcovia will use a lawful basis and take reasonable steps to ensure appropriate protection, contractual safeguards or another measure required by POPIA. International suppliers receive only necessary fulfilment information.

8. Retention

Arcovia keeps information only as long as reasonably needed for the sourcing and delivery service, refunds, disputes, fraud prevention, support, tax, accounting, customs and other legal records. When it is no longer required, it is deleted, de-identified or securely archived as permitted by law.

9. Your rights

Subject to lawful limits, you may ask whether Arcovia holds your personal information; request access or correction; object to certain processing; request deletion or restriction where the information is no longer lawfully required; withdraw consent; and complain to the Information Regulator. We may need to verify your identity before acting on a request.

10. Security

Arcovia uses reasonable technical and organisational safeguards, including restricted administrative access, signed Shopify webhook verification, private customer tokens, separation of customer-safe and administrator-only supplier data, secure payment pages, secret management and limited sharing. No internet service can promise absolute security. If a security compromise creates a legal notification duty, Arcovia will notify the affected person and regulator as required.

11. Cookies, accounts and communications

Shopify and necessary service providers may use cookies for checkout, account access, security, preferences and performance. Operational messages about a paid request are necessary to provide the service. Marketing messages will be sent only where permitted and will provide an appropriate way to opt out.

12. Children

The paid sourcing service is intended for people legally able to enter the transaction or acting with the assistance of a parent or guardian. Do not submit a child's personal information unless it is necessary and you have lawful authority to do so.

13. Changes

We may update this policy when providers, legal obligations or the sourcing process change. The effective date appears above. Material changes will be communicated where required.