POPIA, in plain language
Privacy notice
This notice explains, in plain language, how cliviasforsale.com (operated by Salon Spotlight, trading as cliviasforsale.com) handles personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). Version v1-2026.
What is collected, and why
- Account details: full name, email address and a password (stored only as a hash, never as the password itself). These operate the account and tie orders to their owner.
- Order details: the contact name, email address and optional phone number given at checkout, and a delivery address when delivery is chosen. These are needed to fulfil the order.
- Consent records: which version of the terms and this notice was accepted, and when. This is the proof of consent.
- Plant requests: the name, email address and description given on the request-a-plant form, kept so the request can be answered.
- The greenhouse list: the email address of anyone who joins the keep-me-posted list, with its own explicit marketing consent record (see Marketing below).
- Wishlist: which listings a signed-in account has saved, so the account page can show them. Visible only to that account and to the shop.
Nothing more is asked for than the order needs. Card details never touch this site: payment happens on Yoco's hosted payment page, and no card number is ever seen or stored here.
Cookies
The site sets three small cookies: a session cookie (clivia_session) that keeps you signed in, a cart token (clivia_cart) that keeps your shopping cart between visits, and a theme preference (clivia_theme) that remembers which look of the site you see. The version of the terms and this notice that you accepted is recorded against your account, not in a cookie. There are no advertising cookies, and site analytics, when enabled, runs cookieless.
Storage and protection
Personal information is stored in the site's database with passwords hashed, access restricted to authorised store roles, and pages served over an encrypted connection. Order records are kept as long as South African financial record-keeping requires; a deletion request removes the account and personal identifiers while anonymised transaction records may be retained.
Your rights
POPIA gives every person the right to see the personal information held about them, to have it corrected, to ask for it to be deleted, and to object to its processing. Signed in, you can see the details held against your account, and your name and phone number can be edited on the account page. To ask for anything else held about you, to request deletion, or to object, email info@cliviasforsale.com. A complaint may also be lodged with the Information Regulator (South Africa).
Information Officer
The Information Officer is Daniel Pretorius, the owner (the default the Act provides), reachable at info@cliviasforsale.com. Data requests are received and answered through that address, and requests for records under the Promotion of Access to Information Act 2 of 2000 (PAIA) go to the same address.
Marketing
Marketing email goes only to addresses that joined the greenhouse list themselves, through the keep-me-posted form's separate, explicit consent (version v1-2026). It is an occasional note about new listings and shows, nothing more, and consent can be withdrawn at any time by writing to info@cliviasforsale.com. Order emails (confirmation and delivery) are not marketing and are always sent.
If personal information is compromised
If personal information held by this site is ever compromised, the Information Regulator and the affected users are notified.
This notice is read together with the terms of sale, published under the same version, and the delivery and returns page.