Privacy Policy

Last updated: 14 August 2026

This Privacy Policy explains how KUIERALOT (PTY) LTD, trading as kuieralot® (“kuieralot”, “we”, “us” or “our”), collects, uses, stores, shares and protects personal information when you use kuieralot.com (the “Website”), contact us or use our services.

We process personal information in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013 (“POPIA”) and, where applicable, the Promotion of Access to Information Act 2 of 2000 (“PAIA”).

By using the Website or providing personal information, you acknowledge the practices described in this Policy. Where consent is required, we will ask for it separately and you may withdraw it as explained below.

1. Responsible party

KUIERALOT (PTY) LTD is the responsible party for personal information where we determine why and how it is processed.

Privacy and Information Officer enquiries may be sent to:

KUIERALOT (PTY) LTD
Trading as kuieralot®
Email: kuier@kuieralot.com

Independent sellers on Market Space, the Bookshelf and the Art Gallery may be separate responsible parties for personal information they receive from buyers or prospective buyers. Their own privacy practices also apply to their processing.

2. Scope of this Policy

This Policy applies to personal information processed through or in connection with:

  • the kuieralot® Shop and WooCommerce checkout;
  • user registration, login, profiles and account administration;
  • Market Space listings and communications;
  • Bookshelf and Art Gallery subscriptions and listings;
  • advertising purchases and campaign administration;
  • Quick Lit submissions and publication;
  • contact, enquiry and project-submission forms;
  • newsletters and other marketing communications;
  • comments, reviews, favourites and other interactive features;
  • Website analytics, security and cookies; and
  • communications with our team.

This Policy does not govern an independent seller’s website, payment method, delivery provider or separate processing, or another third-party website reached through a link. Review that party’s privacy policy before providing information.

3. Personal information we collect

The information we collect depends on how you interact with us.

Identity and contact information
  • name, surname, display name, username and account identifier;
  • email address, phone number and delivery or billing address;
  • business, trading, author, artist or brand name;
  • company, tax or registration details where relevant; and
  • age or confirmation that you meet an age requirement, where necessary.
Account and profile information
  • encrypted password or authentication credentials;
  • profile image, biography, language and preferences;
  • account status, roles, subscriptions and activity;
  • saved favourites, reviews and user-generated content; and
  • security events and login-related information.
Shop, order and subscription information
  • products or services viewed, placed in a cart or purchased;
  • order number, quantities, prices, discounts, taxes and status;
  • billing and delivery information;
  • selected payment method, payment status and transaction reference;
  • subscription plan, renewal date, cancellation and payment history;
  • courier, tracking, delivery, return and refund information; and
  • customer-service messages and supporting photographs.

Card, bank or payment credentials may be collected directly by the payment provider. We generally receive transaction confirmation and limited payment information rather than complete card or banking credentials.

Seller and listing information
  • seller identity, contact and business details;
  • listing titles, descriptions, categories, prices and availability;
  • product, book or artwork photographs and specifications;
  • author, artist, publisher, rights and delivery information;
  • subscription and listing status; and
  • reports, complaints and communications concerning a listing or user.

Information intentionally included in a public profile or listing may be displayed publicly and indexed by search engines. Do not place banking details, identity numbers, private residential details or other sensitive information in a public listing.

Quick Lit and creative submissions
  • contributor name, phone number, email address and biography;
  • author photograph, if supplied;
  • title, category, written work, uploaded document or shared-drive link;
  • submission notes and AI-use disclosure;
  • editorial correspondence, selection status and publication records; and
  • rights, consent, withdrawal and infringement information.
Advertising information
  • advertiser and representative details;
  • campaign brief, brand assets, destination links and approvals;
  • orders, payments, campaign dates and support messages; and
  • campaign-view, impression, click and reporting information.
Forms and communications
  • information entered in contact, enquiry, project and submission forms;
  • emails, attachments, replies and customer-support history;
  • survey, feedback, competition or promotion entries; and
  • communication preferences and consent records.
Technical and usage information
  • IP address, browser, device type, operating system and language;
  • pages viewed, links clicked, referring page and approximate location derived from IP;
  • cookie, session and similar identifiers;
  • date, time, duration and interaction information; and
  • error, performance, fraud-prevention and security logs.

4. How we collect personal information

We collect information:

  • directly from you when you create an account, place an order, subscribe, submit a listing or form, communicate with us or use an interactive feature;
  • automatically through cookies, logs and similar technologies when you use the Website;
  • from payment processors, couriers and other service providers involved in your transaction;
  • from an independent seller or buyer where necessary for a report, complaint or platform-safety matter;
  • from social networks or another service when you choose to interact through that service;
  • from public, regulatory or verification sources where lawful and necessary; and
  • from another person authorised to act for you.

If you provide another person’s information, you confirm that you are authorised to do so and have given them any notice required by law.

5. Why we process personal information

We may process personal information to:

  • create, authenticate, secure and administer accounts;
  • process kuieralot® Shop orders, payments, subscriptions, deliveries, returns and refunds;
  • provide kuieralot® Market Space, kuieralot® Bookshelf and kuieralot® Art Gallery listing services;
  • display public listings, profiles, contributor credits and selected content;
  • receive, review, edit and publish kuieralot® Quick Lit submissions;
  • create, approve, run and report on advertising campaigns;
  • respond to questions, complaints, rights requests and support enquiries;
  • send transactional and service messages;
  • send marketing where permitted and manage opt-outs;
  • personalise content and remember preferences;
  • measure Website use, performance and campaign activity;
  • detect, prevent and investigate fraud, abuse, prohibited listings, security incidents and unlawful conduct;
  • moderate, suspend or remove content and accounts;
  • establish, exercise or defend legal claims;
  • comply with tax, accounting, consumer, privacy, law-enforcement and other legal obligations; and
  • operate, maintain, protect and improve the Website and our services.

6. Grounds for processing

Depending on the context, we process personal information because:

  • you consented to the processing;
  • processing is necessary to conclude or perform a contract with you;
  • processing is necessary to comply with a legal obligation;
  • processing protects your legitimate interest;
  • processing protects our legitimate interests or those of a third party, where permitted and balanced against your rights; or
  • another lawful justification under POPIA applies.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already lawfully performed and may prevent us from providing a feature that genuinely requires the information.

7. Information required and consequences of not providing it

Some information is optional, such as a Quick Lit author photograph. Other information is required to create an account, process an order, deliver a product, administer a paid subscription, review a submission or comply with law.

Required fields are ordinarily marked on the relevant form. If you do not provide required information, we may be unable to create the account, process the order, publish the listing, provide the service or respond to the request.

8. Public information and independent sellers

kuieralot® Market Space, kuieralot® Bookshelf and kuieralot® Art Gallery listings are intended for public discovery. Public information may include a seller or business name, public biography, profile image, product details, images, price, delivery information and the contact method intentionally selected for enquiries.

Independent sellers and prospective buyers may exchange personal information to discuss or complete a transaction. They must use it only for a genuine transaction, related legal compliance or dispute and must protect it in accordance with applicable law.

kuieralot does not control information that a user copies, shares or processes outside the Website. Report suspected misuse to kuier@kuieralot.com.

9. Cookies and similar technologies

We and authorised service providers may use cookies, pixels, local storage and similar technologies.

Necessary cookies

These support core functions such as security, network management, login, language, shopping cart, checkout and cookie preferences. The Website may not function properly without them.

Preference cookies

These remember choices such as language, display settings and other preferences.

Analytics and performance cookies

These help us understand Website traffic, page use, errors, campaign views and clicks so we can measure and improve performance.

Advertising and social-media technologies

Where enabled, these may measure campaigns, support embedded content, enable sharing or help deliver relevant communications. Third-party platforms may process information under their own privacy policies.

Where consent is required, optional cookies will be used only after you make a choice through the cookie banner or preference tool. You can also restrict cookies through your browser, although this may affect Website functionality.

10. Direct marketing

We may send newsletters, promotions and service information where you consented or where another lawful basis permits it. Marketing communications will identify the sender and provide a reasonable way to opt out.

You can unsubscribe using the link in a marketing email or by contacting kuier@kuieralot.com. We may retain limited suppression information so we can respect the opt-out.

Opting out of marketing does not stop necessary account, order, subscription, security, editorial or service communications.

11. When we share personal information

We may share relevant information with:

  • hosting, Website, database, backup and technical-support providers;
  • payment gateways, banks and fraud-prevention providers;
  • couriers, fulfilment and delivery-service providers;
  • email, form, newsletter and customer-communication providers;
  • analytics, security, performance and cookie-consent providers;
  • account, subscription, e-commerce and directory-platform operators;
  • professional designers and campaign-service providers where needed for advertising work;
  • independent sellers or buyers where necessary for an enquiry, transaction, complaint or safety issue;
  • professional advisers, auditors, insurers and legal representatives;
  • regulators, courts, law-enforcement agencies and public authorities where required or lawfully justified;
  • a purchaser, investor or successor involved in a lawful business transaction, subject to appropriate safeguards; and
  • another person when you direct or consent to the disclosure.

Service providers acting as operators may process information only for authorised purposes and must apply appropriate confidentiality and security safeguards.

We do not sell personal information.

12. Payment information

Payments are handled through the payment option selected at checkout. Payment providers may independently collect and process card, bank, identity, device and transaction information for authorisation, fraud prevention and legal compliance.

Review the selected provider’s privacy terms. We receive information needed to confirm and administer the transaction but do not ordinarily store complete payment-card credentials.

13. Cross-border processing

Some service providers, platforms or storage systems may process or store personal information outside South Africa. We will transfer personal information across borders only where permitted by POPIA, including where:

  • the recipient is subject to a law, binding corporate rules or agreement providing an adequate level of protection;
  • the transfer is necessary for a contract or your benefit as permitted by law;
  • you consent to the transfer after being informed; or
  • another lawful basis applies.

14. Information security

We use reasonable and appropriate technical and organisational safeguards designed to protect personal information against accidental or unlawful loss, damage, destruction, access, use, alteration or disclosure.

Measures may include access controls, authentication, encryption in transit, trusted payment processing, software updates, backups, logging, least-privilege access, confidentiality requirements and incident procedures.

No internet transmission or system is completely secure. You are responsible for using a strong, unique password, keeping login and one-time codes confidential, securing your device and notifying us promptly of suspected unauthorised access.

15. Security compromises

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will investigate, take appropriate containment and remediation steps and notify the Information Regulator and affected data subjects where required by POPIA.

Notifications may be delayed where a lawful authority determines that notice would impede a criminal investigation.

16. Retention

We keep personal information only for as long as reasonably needed for the purpose collected, a compatible lawful purpose, contractual administration, dispute resolution, security, backup or a legal retention requirement.

Retention periods vary. In determining them, we consider:

  • the duration of an account, order, listing, subscription, campaign or publication;
  • tax, accounting, company, consumer and transaction-record obligations;
  • limitation periods and potential disputes;
  • fraud, safety and platform-integrity needs;
  • consent withdrawal, objection, deletion and withdrawal requests; and
  • technical backup cycles.

When information is no longer required, we will delete, destroy or de-identify it in accordance with applicable law. De-identified information that cannot reasonably be re-identified may be retained for analytics and research.

17. Your rights

Subject to POPIA and other applicable law, you may have the right to:

  • ask whether we hold personal information about you;
  • request access to that information;
  • request correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete, misleading or unlawfully obtained information;
  • object, on reasonable grounds, to certain processing;
  • withdraw consent where processing relies on consent;
  • object to direct marketing and unsubscribe;
  • request information about third parties or categories of third parties who had access, where provided by law;
  • complain to the Information Regulator; and
  • in appropriate circumstances, institute civil proceedings regarding unlawful processing.

Some rights are subject to lawful limitations, including another person’s rights, legal privilege, record-retention duties, security, fraud prevention and PAIA procedures.

18. Exercising your rights

Send a request to kuier@kuieralot.com with the subject “Privacy Request” and explain what you need.

We may ask for information reasonably necessary to verify your identity and authority before acting. Do not email a full identity document unless we specifically request an appropriately protected copy.

We will respond within the period and in the manner required by applicable law. A fee may apply only where law permits it and any required notice has been given.

19. Children

Accounts, purchases and seller services are intended for persons aged 18 or older. We do not knowingly allow a child to independently create a seller account, purchase a subscription or enter into a transaction requiring adult legal capacity.

A person under 18 may submit to Quick Lit only with the involvement and consent of a competent parent or legal guardian as required by the Quick Lit Submission Terms and applicable law.

If you believe we processed a child’s information without proper authority, contact us so that we can investigate and take appropriate action.

20. Special personal information

Please do not provide health, biometric, religious, political, criminal, sexual-life or other special personal information unless it is genuinely necessary and we have asked for it or another lawful basis applies.

Creative writing or user content may incidentally contain sensitive information. Consider carefully what you choose to submit for possible publication, especially information about another identifiable person.

21. Automated decisions

We do not ordinarily make a decision producing legal or similarly significant effects about you solely through automated processing without human involvement.

Automated tools may assist with spam, fraud, security, payment, content or account-risk detection. Where applicable law provides rights concerning a solely automated significant decision, we will honour them.

22. Third-party links and embedded content

The Website may link to or embed maps, videos, social networks, payment services, seller websites, shared drives and other third-party content. Those parties may collect information under their own privacy policies and cookie practices.

A link or embed does not make us responsible for the third party’s processing. Review its privacy information before interacting or providing information.

23. Changes to this Policy

We may update this Policy to reflect changes in law, technology, providers or our services. The updated version will be published on this page with a revised “last updated” date.

Where a change is material, we may provide additional notice by email, account message or a Website notice where reasonably appropriate or legally required.

24. Contact us

For privacy questions, rights requests or concerns:

KUIERALOT (PTY) LTD
Trading as kuieralot®
Email: kuier@kuieralot.com