POPIA Compliance

Stallspace, operated by Kwry (Pty) Ltd, is committed to complying with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This page summarises the measures we take to protect personal information processed on our platform.

Information Officer

Under POPIA the head of a private body is its Information Officer by operation of law, and is required to register with the Information Regulator. For Kwry (Pty) Ltd that is Mujahid Hendricks.

You can contact our Information Officer with any questions, access requests, or complaints relating to your personal information at: privacy@stallspace.co.za

Kwry (Pty) Ltd trading as Stallspace
A private company registered in the Republic of South Africa
Registration number 2026/269289/07
Telephone +27 62 025 1903
hello@stallspace.co.za
South Africa

The Eight Conditions for Lawful Processing

We process personal information in accordance with POPIA's eight conditions:

• Accountability — We take responsibility for ensuring all processing on Stallspace complies with POPIA.
• Processing Limitation — We only collect personal information that is necessary to operate the marketplace (account details, order information, vendor applications).
• Purpose Specification — Information is collected for clearly defined purposes: facilitating orders, vendor verification, and customer support.
• Further Processing Limitation — We do not use your information for purposes incompatible with why it was originally collected.
• Information Quality — We take reasonable steps to ensure the personal information we hold is accurate and up to date.
• Openness — This page and our Privacy Policy document how and why we process your information.
• Security Safeguards — We use SSL encryption, Supabase Row-Level Security, role-based access control, and secure password hashing to protect data.
• Data Subject Participation — You may request access to, correction of, or deletion of your personal information at any time.

Security Measures in Place

• SSL encryption across the platform
• Role-based access control separating customer, vendor, and admin permissions
• Supabase Row-Level Security policies restricting data access at the database level
• Secure password hashing — passwords are never stored in plain text
• Encrypted handling of sensitive vendor payment configuration details
• Automated backups of platform data

Cross-Border Data Transfers

Some of our service providers (such as our hosting and database infrastructure) may process data outside South Africa. Where this occurs, we ensure these providers maintain a comparable level of data protection in accordance with Section 72 of POPIA.

Submitting a Request or Complaint

To exercise any of your rights under POPIA — including access, correction, deletion, or objection to processing — please email privacy@stallspace.co.za. We aim to respond to all requests within a reasonable time as required by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:

Website: inforegulator.org.za
Email: complaints.IR@justice.gov.za