Privacy policy

Last updated: 22 October 2026

Maitha respects your privacy. This page explains, in plain words, what personal information we collect, why, and what you can ask us to do with it. It follows South Africa’s Protection of Personal Information Act (POPIA).

Who is responsible

Responsible party: Maitha (Pty) Ltd (registration 2026/825031/07), a division of Bahati
Information officer: Tererai (Terry) Mhungu, Chief Executive Officer
Contact: 067 721 5985 (phone or WhatsApp) or info@maitha.co.za
Address: 99 Riverside Road, Glen Athol, Sandton, Johannesburg, 2090

What we collect

Your details: name, phone number, email address and delivery address.
Your orders: what you bought, when, how much you paid and how it was delivered.
Messages: what you send us on WhatsApp, by phone or by email about your orders.
Website use: small files (cookies) that keep your cart working and keep you signed in. We do not use advertising cookies.

We do not collect or store your card details. Card payments go straight to Payfast.

Why we use it

To take, pay for, pack and deliver your orders, and to contact you about them.
To answer your questions and sort out problems.
To keep the records the law requires, such as tax records.
To send you news and specials, only if you have said yes. You can say stop at any time.

Who we share it with

We never sell your information. We only share what is needed with:

Payfast, to process card payments;
Google, if you choose to sign in with Google, and to suggest addresses as you type at checkout;
our drivers or courier, who need your name, phone number and address to deliver;
the companies that run our website and messages: our website is hosted, and our order emails are sent, by Amazon Web Services in London (United Kingdom), and WhatsApp messages are carried by Meta.

Because our website is hosted in the United Kingdom, your information is stored outside South Africa. The United Kingdom has data-protection law that gives similar protection to POPIA, which POPIA (section 72) allows.

How long we keep it

We keep order and payment records for 5 years, as tax law requires. We delete marketing contact details within 30 days of you asking us to stop.

How we keep it safe

Our website uses an encrypted connection (https). Only Maitha staff who need your details to serve you can see them, and each has their own password-protected account.

Your rights

You may ask us to:

tell you what personal information we hold about you;
correct it if it is wrong;
delete it, where the law allows;
stop sending you news and specials (just reply “stop” or tell us).

If you are not happy with how we handled your information, you may complain to the Information Regulator: inforegulator.org.za, email POPIAComplaints@inforegulator.org.za, phone 010 023 5200.

Changes

If we change this policy, we will update the date at the top of this page.