Privacy policy

Effective 20 October 2026 Legal owner: Needeverything (Pty) Ltd. Business address: 6 Bosbok Nook, Gauteng, South Africa. Information we process Needeverything (Pty) Ltd processes account names, email addresses, authentication details, store content, uploaded artwork, order information, delivery addresses and customer contact details to operate the platform, fulfil orders, provide support and prevent fraud. For creator payouts we also process legal identity details, ID/passport evidence, bank details and proof of bank ownership. Providing payout verification is necessary for withdrawal approval. Purposes and sharing We process information to perform orders and account services, meet legal obligations and protect legitimate security and business interests. Optional marketing requires an appropriate lawful basis and an unsubscribe option. Authorised printing partners receive necessary production information; couriers receive delivery information; payment providers process payments; hosting and email providers support the service. Creators see sales and purchased variants; customer contact and delivery details are restricted to authorised fulfilment staff. Private verification documents and print files require authorisation. We do not sell your personal information. Payments and security Payments are handled through Paystack. Do not send card details or passwords to support. Access controls and private storage protect identity documents and bank evidence, although no internet service can promise absolute security. Service providers may process data outside South Africa; transfers must use applicable POPIA safeguards. Cookies and analytics Essential cookies support sign-in and security. Aggregate traffic measurements and an optional first-party browser session identifier estimate visits and browsers active in the last five minutes. Analytics exclude raw IP addresses, customer contact details and query strings. Do Not Track and Global Privacy Control are respected. Detailed analytics events are retained for up to 91 days. Online totals are estimates, not identified people. Retention and your rights We retain personal information only as necessary for services, legal records, fraud prevention and dispute resolution. Account deletion does not require deletion of records that must lawfully be retained. You may request access, correction, lawful deletion or restriction, object where applicable, and withdraw consent for consent-based processing without affecting prior lawful use. Contact the support address displayed here; identity confirmation may be required. You may lodge a complaint with South Africa's Information Regulator at https://inforegulator.org.za. We communicate material privacy changes through the platform where appropriate.