Privacy Policy

Rleaf is a cannabis marketplace operating in Johannesburg, South Africa, connecting adults with licensed local dispensaries for same-day delivery. In this policy “we”, “us” and “Rleaf” refer to the operator of this platform. You can reach us at [contact email].

Rleaf is strictly for adults aged 18 and over. We do not knowingly collect information from anyone under 18, and we may ask you to confirm your age before browsing or ordering. If we learn that we have collected information from a minor, we will delete it.

We collect only what we need to take and deliver your order:

• Account details — your email address and, where used, your phone number, for sign-in and order updates.
• Delivery address — the address and any instructions you provide so your order can be delivered.
• Order history — the items, prices and stores associated with your orders.

We use your information to:

• process, fulfil and deliver your orders;
• send order confirmations, delivery updates and receipts;
• verify that you are 18 or older;
• provide support and respond to your enquiries; and
• meet our legal, regulatory and record-keeping obligations.

We use a small number of cookies that are necessary for the site to work — for example, to keep you signed in and to remember the contents of your cart. We do not use cookies to build advertising profiles. You can clear cookies in your browser settings, though some features may stop working if you do.

We share information only with the service providers we rely on to run the platform, and only to the extent they need it:

• our hosting provider, which serves the website;
• our database provider, which stores your account and orders;
• our payment provider, which processes payments securely; and
• our delivery partner, which receives the delivery address to bring your order to you.

These providers are bound to protect your information and to use it only for the services they perform for us.

We take reasonable technical and organisational measures to protect your information, including encrypted connections and access controls. No system is perfectly secure, but we work to keep your data safe and to limit access to those who need it.

Under POPIA you have the right to:

• ask what personal information we hold about you;
• ask us to correct or update inaccurate information;
• ask us to delete information we no longer have a lawful reason to keep;
• object to certain processing; and
• lodge a complaint with the Information Regulator.

To exercise any of these rights, contact us at [contact email].

Questions about this policy or your information? Email us at [contact email]. We will respond as soon as we reasonably can.