Privacy

De Pet Valley sells pet food, treats, toys and grooming, and delivers around Paarl and the Winelands. We are the responsible party for the information described here. Questions, or a request about your own information, go to info@depetvalley.co.za or +27 65 685 0773.

• Your name, email address, phone number and delivery address.
• What you ordered, what you paid, and your order history.
• Your pet’s name and type, if you tell us — so we can talk about them properly.

We never see or store your card number. Payments are handled by PayFast, who take the card details directly. If you save a card for a repeat box, PayFast keeps it and gives us a token that only works for charging your own orders.

We record how the shop is used, so we can tell which products people are actually looking for and whether our advertising is worth what it costs:

• Pages and products you view, items you add to your basket, and checkouts you start.
• How you arrived: the campaign parameters on the link (utm_source, utm_medium, utm_campaign), the website that referred you, the first page you landed on, and advertising click identifiers that Google and Meta add to their own links (gclid, gbraid, wbraid, fbclid).
• The pages you open on this site, and when. Web addresses are stored without their query string, so a link we emailed you never leaves its one-time code behind here.
• Your browser and device type, and your approximate location — the country, province and nearest city. Our hosting provider works that out from your network connection and tells us only those three things; the city is a rough one, being where your connection appears rather than where you are.
• The internet (IP) address your device connected from, kept once per visit for 90 days — the shortest we keep anything. It is there so we can tell whether two visits or two complaints came from the same place. We do not use it to work out where you live, and it is deleted automatically along with the rest of that visit.
• Whether our emails to you were delivered, opened, and which links you clicked.

This is first-party only. We run no third-party trackers — there is no Google Analytics tag, no Meta pixel and no advertising script on this site. Nothing described in this section is sent to anyone else.

If you leave something in your basket, we may use that record to remind you about it — but only by a channel you have opted in to, and every such message carries a way out. Turn marketing off and we will not, however full the basket. While you are signed in your basket is also saved to your account, so you can carry on with it on another device.

Saying hello when you are signed out.Once you have ordered from us, we remember which browser was yours. If you come back on it without signing in, we may greet you by first name and mention your cash back balance, your pet’s name, or your rate — one of them, and nothing more. We will nevershow your orders, your address, your email or your saved basket to a browser that has not signed in, because a shared computer is somebody else’s too. Press “Not you?” and we stop, on that browser, for good.

The email address you type at checkout.When you enter it and move on, we save it so that a basket you never finished can be sent back to you. We only ever email it if it already belongs to an account that has ordered from us before — if it does not, the address is deleted, unread, within the hour, and nothing is ever sent to it. You can stop the whole thing with the “Don’t save it” link beside the field. What we keep after that is a one-way fingerprint of the address, so that if you ever ask us where we got it, we can tell you.

All of our cookies are set by us, and none of them are for advertising.

dpv_customer

Keeps you signed in to your account. 30 days.

dpv_admin

Signs staff in to the admin area. 8 hours.

dpv_att_first / dpv_att_last

Remembers how you first found us and what brought you back, so we can tell which advertising works. 400 and 90 days.

dpv_vid / dpv_sid

An identifier for your browser and your current visit, so the pages you view can be counted as one journey rather than as strangers. If you have ordered from us before, it also lets us say hello by name and offer you your cash back.

dpv_notme

Set when you press “Not you?”, so we stop greeting you on this browser. 400 days.

dpv_ref

Remembers who invited you, so their reward is paid when you order. 30 days.

Clearing your cookies removes all of these. The shop keeps working without them; you will simply be signed out and we will lose track of how you found us.

Under the Protection of Personal Information Act, we rely on two things. Your order information we hold because we need it to perform the contract — we cannot deliver food to an address we do not have. The browsing and advertising measurement we hold on the legitimate-interest basis in section 11(1)(f): a small shop is entitled to know which of its adverts brought a customer, and this is the least intrusive way to find out, because it stays inside our own systems.

Marketing messages are different, and always your choice. Email newsletters and WhatsApp promotions are sent only if you opt in, every one carries a way out, and turning them off changes nothing about your orders or the messages that go with them — an invoice is not marketing.

90 days

How you arrived at the site each visit — the campaign link, the referring website, and the internet address your device connected from.

30 days

Browsing by someone who never signed in or ordered, so it could never be linked to a person.

12 months

Pages and products you viewed, searches, and delivery-area checks.

24 months

Items you added to your basket and checkouts you started.

24 months

Orders you placed, repeat-box charges, and refunds.

30 days

A basket you left in your account, if you were signed in — so you can pick it up on another device. Untouched for 30 days, it is deleted.

7 years

Orders and invoices — the period the Companies Act and SARS require for accounting records.

Deletion is automatic, on a schedule. We do not keep browsing history indefinitely.

Only the suppliers who make the shop work, and only the part each one needs: PayFast (payments), Resend (email delivery), Meta (WhatsApp messages, if you have opted in), Vercel and Neon (hosting and database), and our courier for deliveries.

We do not sell your information, and we do not upload customer lists to advertising platforms. If that ever changes we will ask you first — separately, and in plain words. Agreeing to receive our newsletter is not agreement to that.

• Tell you what we hold about you, and give you a copy.
• Correct anything that is wrong.
• Delete your account and the information attached to it, except what the law makes us keep.
• Stop using your browsing history for advertising measurement, while you keep shopping normally.
• Stop marketing messages — instantly, from the link in any email or by replying STOP on WhatsApp.

Email info@depetvalley.co.za and we will do it within 30 days. If we get it wrong you can complain to the Information Regulator at complaints.IR@justice.gov.za.