Privacy Policy

Rleaf is a cannabis marketplace operating in Johannesburg, South Africa, connecting adults with licensed local dispensaries for same-day delivery. In this policy “we”, “us” and “Rleaf” refer to the operator of this platform. You can reach us at contact@rleaf.co.za.

Rleaf is strictly for adults aged 18 and over. We do not knowingly collect information from anyone under 18, and we may ask you to confirm your age before browsing or ordering. If we learn that we have collected information from a minor, we will delete it.

We collect only what we need to take and deliver your order:

• Account details — your email address and, where used, your phone number, for sign-in and order updates.
• Delivery address — the address and any instructions you provide so your order can be delivered.
• Order history — the items, prices and stores associated with your orders.
• Full name — so the store and courier know who the order is for.
• Date of birth — collected once, solely to verify that you are 18 or older. It is never shown to store staff and never used for marketing.
• Marketing preference — whether you have opted in to marketing email. This is optional and off by default.

We use your information to:

• process, fulfil and deliver your orders;
• send order confirmations, delivery updates and receipts;
• verify that you are 18 or older;
• provide support and respond to your enquiries; and
• send marketing email only if you opted in — you can withdraw that consent at any time on your account page; and
• meet our legal, regulatory and record-keeping obligations.

Owners and managers of a store you have ordered from can see your name, contact details and order history for that store, so they can fulfil your orders and assist you. Your date of birth is never shown to any store staff. We do not sell or share your information with anyone else for their own purposes.

You can delete your account at any time on your account page. Your profile is removed immediately. Records of completed orders are kept, with the link to your account removed, because we are required to retain transaction records for tax and business purposes.

We use a small number of cookies that are necessary for the site to work — for example, to keep you signed in and to remember the contents of your cart. We do not use cookies to build advertising profiles. You can clear cookies in your browser settings, though some features may stop working if you do.

We share information only with the service providers we rely on to run the platform, and only to the extent they need it:

• our hosting provider, which serves the website;
• our database provider, which stores your account and orders;
• our payment provider, which processes payments securely; and
• our delivery partner, which receives the delivery address to bring your order to you.

These providers are bound to protect your information and to use it only for the services they perform for us. Our database is hosted in the European Union (Stockholm), which provides a level of protection consistent with section 72 of POPIA for transfers outside South Africa.

We take reasonable technical and organisational measures to protect your information, including encrypted connections and access controls. No system is perfectly secure, but we work to keep your data safe and to limit access to those who need it.

Under POPIA you have the right to:

• ask what personal information we hold about you;
• ask us to correct or update inaccurate information;
• ask us to delete information we no longer have a lawful reason to keep;
• object to certain processing; and
• lodge a complaint with the Information Regulator.

To exercise any of these rights, contact us at contact@rleaf.co.za.

Our Information Officer for the purposes of POPIA is Mic Levendig, reachable at miclevendig@gmail.com.

Questions about this policy or your information? Email us at contact@rleaf.co.za. We will respond as soon as we reasonably can.