Privacy policy

Last updated 29 September 2026

Swappies is a South African online shop for single stickers, trading cards and minis. This policy explains what personal information we collect, why, who we share it with and what your rights are under the Protection of Personal Information Act, 2013 (POPIA).

What we collect

  • Your account: your name, email address and password (stored only as a secure hash), or your Google account name and email if you sign in with Google.
  • Orders: your name, mobile number and the delivery details you give us, such as the PUDO locker you choose, and what you ordered and paid.
  • Selling to us: your name, email, mobile number, the items you list and the condition you give them, your courier tracking number and, if you choose an EFT payout, your bank details. Bank details are encrypted before they are stored.
  • Your wishlist and watch list, so we can tell you when something you want comes into stock.
  • How the site is used: pages visited, device and browser type, collected through Google Analytics, and basic server logs including IP addresses, which we use for security.

Why we use it

  • To run your account, process your orders and deliver them.
  • To quote for, receive and pay for collectables you sell to us.
  • To send you emails about your orders, sales and account. These are part of the service and cannot be switched off while you have an order or sale in progress.
  • To tell you when items on your wishlist are back in stock, and - only if you ask for them - about offers. Every such email has an unsubscribe link.
  • To keep the site secure, stop spam and fraud, and understand which pages are useful.

Who we share it with

We do not sell your personal information. We share only what each service needs to do its job:

  • PayFast processes card and instant EFT payments. We never see or store your card details.
  • The Courier Guy (PUDO) delivers orders, using the name, mobile number and locker you give us.
  • Amazon Web Services hosts the site and sends our emails.
  • Trustpilot sends you one invitation to review us after an order has shipped or after we have paid you for a sale, using your name, email address and order reference. Leaving a review is optional, and every invitation has an unsubscribe link.
  • Google provides sign-in (if you use it), Google Analytics, reCAPTCHA spam protection and advertising on some pages. Google may use cookies to show ads based on your visits to this and other sites; you can turn personalised ads off at Google Ad Settings.

Cookies

We use cookies to keep you signed in, remember your cart and protect forms against forgery. Google Analytics, reCAPTCHA and Google's advertising also set cookies. You can block or delete cookies in your browser, but signing in and checking out will not work without our own.

How long we keep it

We keep order and payout records for as long as South African tax and accounting law requires. Account information is kept while your account is open. Bank details are only used for the payout they were given for.

Your rights

Under POPIA you may ask what personal information we hold about you, ask us to correct or delete it, object to us using it for marketing, and complain to the Information Regulator (inforegulator.org.za). To make a request, email us at [contact].

Changes

If we change this policy we will update the date at the top of this page.