Skip to content
LP TRADERVINYL MARKETPLACE
0

Draft — to be reviewed by a South African attorney before launch.

Privacy Policy

Version Draft 0.3 · Updated 28 Sep 2026

This policy explains how LP Trader collects, uses and protects your personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

Summary

  • We collect what we need to run the marketplace — your account, orders, listings and messages.
  • PayFast processes payments and PostNet delivers parcels; they act as our operators.
  • We never sell your personal information.
  • You can access, correct or delete your information, and complain to the Information Regulator.

Who is responsible for your information

LP Trader (Pty) Ltd is the responsible party, as defined in POPIA, for personal information processed through the LP Trader app and website.

  • Responsible party: LP Trader (Pty) Ltd
  • Information Officer: [Information Officer name] (registered with the Information Regulator)
  • Email: privacy@lptrader.app
  • Address: [Registered address]

What we collect

  • Account: Name, @handle, email, password (stored hashed), mobile number and verification status, profile photo, bio, city and province.
  • Orders: Items, amounts, payment status and method (we never see or store full card numbers), shipping service, PostNet branch or delivery address, and waybill numbers.
  • Sellers: Shop details, PostNet drop-off branch and banking details for payouts (bank, account holder, account number, branch code, account type).
  • Content: Listings and photos, your collection and Wanted List, messages, swap proposals, ratings and reviews.
  • Technical: Device type, app version, IP address, sign-in and security events and — on the web, with your consent — analytics cookies.

Why we use it

  • To create and secure your account, including OTP verification of your mobile number (to perform our contract with you).
  • To process payments, hold funds in escrow, arrange PostNet shipping and pay sellers (contract).
  • To keep the records tax and financial laws require (legal obligation).
  • To prevent fraud, detect suspicious activity and keep the marketplace safe (legitimate interest).
  • To send service messages — order updates, payout completions and security alerts (contract).
  • To send marketing, only if you opt in. You can unsubscribe at any time (consent, POPIA section 69).

Who we share it with

We share personal information only as needed, and only with operators bound by written agreements that require appropriate security safeguards (POPIA sections 20 and 21):

  • PayFast: Card and Instant EFT payments. PayFast processes card details directly — they never reach LP Trader.
  • PostNet: Parcel collection, delivery and tracking. PostNet receives the names, phone numbers and addresses needed to deliver your order.
  • Supabase: Cloud database, authentication and file storage.
  • SMS & email providers: One-time PINs, notifications, receipts and payout emails.
  • Other users: Your public profile, listings and ratings — and, once an order is placed, the details needed to complete it.

We may also disclose information when required by law, a court order or a regulator. We never sell personal information.

Information stored outside South Africa

Some operators (for example, cloud hosting) store data outside South Africa. We only transfer personal information to countries or companies that provide an adequate level of protection, or with your consent, as required by POPIA section 72.

How long we keep it

  • Account & profile: Until you delete your account, then erased within 30 days.
  • Orders, invoices & payouts: 5 years after the transaction, as required by the Tax Administration Act 28 of 2011 — anonymised once your account is deleted.
  • Messages: While your account is active, unless you delete the conversation.
  • Security logs: 12 months.
  • Marketing consent: Until you withdraw it.

How we protect it

We use encryption in transit (TLS) and at rest, row-level security in our database, role-based admin access, OTP verification and continuous security monitoring. Access to banking details is restricted to authorised payout staff and logged. If a security compromise affects you, we’ll notify you and the Information Regulator as POPIA section 22 requires.

Your rights

  • Access the personal information we hold about you (section 23).
  • Ask us to correct or delete information that is inaccurate, irrelevant, excessive or unlawfully obtained (section 24).
  • Object to processing based on our legitimate interests (section 11(3)).
  • Withdraw consent to marketing at any time.
  • Delete your account in Settings → Account → Delete account.
  • Lodge a complaint with the Information Regulator.

To exercise these rights, use Settings → Account → Download my data, or email privacy@lptrader.app. We respond within 30 days.

Cookies (web)

Our website uses essential cookies to keep you signed in and remember your cart. With your consent we also use analytics cookies. You can change your choice at any time in Settings → Privacy.

Children

LP Trader isn’t intended for children under 18. We don’t knowingly process children’s personal information without the consent of a competent person.

The Information Regulator

If you’re unhappy with how we’ve handled your personal information, please contact our Information Officer first. You also have the right to complain to the Information Regulator (South Africa).

  • Website: www.inforegulator.org.za
  • Complaints email: [Confirm the current address on the Regulator’s website]
  • Physical address: [Confirm the current address on the Regulator’s website]

Changes to this policy

We’ll tell you about material changes in the app and by email before they take effect.

Want to delete your account? See how to delete your LP Trader account.

LP Trader (Pty) Ltd · registration [Company registration number] · registered address [Registered address] · Information Officer [Information Officer name] · support@lptrader.app · privacy@lptrader.app · legal@lptrader.app · lptrader.app

See also: Terms · Privacy · Account deletion · Help Centre