Privacy Policy

Last updated: June 2026

1. What we collect

When you create an account or place an order, we collect your name, email address, shipping address, and payment reference. We do not store card numbers — payment data is handled entirely by Stripe and Dodo Payments.

2. How we use your data

Your data is used to process orders, send transactional emails (order confirmations, shipping notifications, and password resets), and improve the shopping experience. We do not sell your data to third parties.

3. Cookies

We use a single session cookie to keep you signed in. No third-party tracking or advertising cookies are used.

4. Data retention

We retain your account data for as long as your account is active. Order records are kept for 7 years for legal and financial compliance. You can request deletion of your account and associated data at any time by contacting us.

5. Your rights

You have the right to access, correct, or delete your personal data. To exercise these rights, email us at shop@metafor.co.za.

6. Security

All data is transmitted over HTTPS. Authentication is handled by Better Auth with bcrypt password hashing and secure session tokens stored in an AWS Aurora PostgreSQL database.

7. Contact

For any privacy-related queries, contact us at shop@metafor.co.za.