Privacy notice

• Account details: full name, email address and a password (stored as a secure hash). These details operate the account and tie orders and wishlists to the account owner.
• Order details: the contact name, email address and optional phone number given at checkout, and a delivery address when delivery is chosen. These are needed to facilitate and fulfil the order.
• Consent records: which version of the terms and this notice was accepted, and when. This stores proof of consent.
• Plant requests: the name, email address and description given on the Request a plant form are kept so the request can be answered.
• The Greenhouse List: the email address of anyone who joins the Greenhouse List, with its own explicit marketing consent record (see Marketing below).
• Wishlist: which listings a signed-in account has saved, so the account page can show them. Visible only to that account and to the shop.
• Problem reports: what you tell us when you report a problem with an order, and the photos you add. The photos are stored privately, seen only by you and the shop, and kept with the order record.
• Emails we send: a record of each email the site sends you (the date, which email it was and its subject, never its text, codes or links), so the shop can confirm what was sent. It is kept with your account; a deletion request removes your email address from it.

Nothing more is asked for than the order needs. Card details are never accessed by cliviasforsale.com: payment is redirected to Yoco's hosted payment page which handles all sensitive payment processes and information.

The site sets three small cookies: a session cookie (clivia_session) that keeps you signed in, a cart token (clivia_cart) that keeps your shopping cart between visits, and a theme preference (clivia_theme) that remembers which look of the site you see. The version of the terms and this notice that you accepted is recorded against your account, not in a cookie. There are no advertising cookies, and site analytics, when enabled, run cookieless.

Personal information is stored in the site's database with passwords hashed, access restricted to authorised store roles, and pages served over an encrypted connection. Order records are kept as long as South African financial record-keeping requires; a deletion request removes the account and personal identifiers while anonymised transaction records may be retained.

POPIA gives every person the right to see the personal information held about them, to have it corrected, to ask for it to be deleted, and to object to its processing. Signed in, you can see the details held against your account, and your name and phone number can be edited in Your account. Your account also lets you download a copy of your data and request deletion. To ask for anything else held about you, to request deletion, or to object, email info@cliviasforsale.com. A complaint may also be lodged with the Information Regulator (South Africa).

The Information Officer is Daniel Pretorius, the owner (the default the Act provides), reachable at info@cliviasforsale.com. Data requests are received and answered through that address, and requests for records under the Promotion of Access to Information Act 2 of 2000 (PAIA) go to the same address.

Marketing email only goes to addresses that joined the Greenhouse List themselves, through the Join the Greenhouse List form or the unticked box on the sign-up form, each a separate, explicit consent (version v1-2026). It is an occasional note about new listings and shows, nothing more, and consent can be withdrawn at any time with the Leave the list button on Your account or by writing to info@cliviasforsale.com. Order emails (confirmation and delivery) are not marketing and are always sent. When you create an account we send you one email with your single-use first-purchase discount code; this is not a mailing list.

If personal information held by this site is ever compromised, the Information Regulator and the affected users are notified.