Legal

Privacy Policy

Last updated: May 2026

Artifacts Coffee ("we", "us", "our") is committed to protecting the personal information of our customers in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and applicable South African law.

1. Who We Are

Artifacts Coffee is a Johannesburg-based micro-roastery operating at artifactscoffee.co.za. For privacy enquiries, contact us at artifacts.coffee.roastery@gmail.com or +27 61 383 2478.

2. Information We Collect

When you place an order or create a Brew Circle account, we may collect:

Full name and email address
Delivery address (street, suburb, city, province, postal code)
Phone number
Order history and product preferences
Birthday (optional, for Brew Circle bonus points)
Payment confirmation data (we do not store card details — all card processing is handled by PayFast)

3. How We Use Your Information

To process and fulfil your order
To book and track courier delivery via The Courier Guy
To send order confirmation and shipping updates by email
To manage your Brew Circle loyalty account and reward points
To communicate about your order if there is an issue

We do not use your personal information for unsolicited marketing without your consent.

4. Third Parties We Share Data With

PayFast — payment processing. Subject to PayFast's own Privacy Policy.
The Courier Guy — your name, phone, and delivery address are shared solely for the purpose of shipping your order.
Resend — transactional email delivery. Email addresses are shared to send your order confirmation.
Supabase — our backend database provider, hosted on secure cloud infrastructure.

We do not sell, rent, or share your personal information with any other third party for commercial purposes.

5. Data Retention

We retain order-related personal information for a minimum of 5 years in accordance with South African tax and consumer protection law. Brew Circle account data is retained for as long as the account is active. You may request deletion at any time.

6. Your Rights Under POPIA

You have the right to:

Request access to the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information (subject to legal retention obligations)
Object to the processing of your personal information
Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za

To exercise any of these rights, email us at artifacts.coffee.roastery@gmail.com.

7. Cookies and Tracking

Our website uses browser localStorage to store your shopping cart contents between sessions. We do not use advertising cookies or third-party tracking pixels. Google Fonts are loaded from Google's CDN, which may log your IP address per Google's own privacy policy.

8. Security

All data transmitted between your browser and our site is encrypted via HTTPS/TLS. Payment card data is never transmitted to or stored on our servers — it is entered and processed directly by PayFast in their PCI DSS-compliant environment.

9. Changes to This Policy

We may update this policy from time to time. The most current version will always be available at artifactscoffee.co.za/privacy. Continued use of the site after any change constitutes acceptance of the updated policy.