Privacy Policy

DeluxeXchange (“we”, “us”) respects your privacy. This policy explains what personal information we collect through this website, why we collect it, how we protect it and what rights you have over it. It is written to align with South Africa’s Protection of Personal Information Act, 2013 (POPIA).

What we collect

When you submit an enquiry through this site, we collect:

• Your name and surname, email address and mobile number — so we can reply to you.
• The description of your items that you type into the enquiry form.
• Any photographs you attach, which are compressed in your browser and then stored privately so an appraiser can review them.
• A one-way cryptographic hash of your IP address, and your browser’s user-agent string. The hash cannot be reversed to recover your IP address. We use it only to limit how many enquiries can be submitted from one source in a short window, which is what keeps the form usable and free of automated spam.

We do not use advertising trackers, we do not build behavioural profiles, and we do not ask for identity numbers, banking details or any other sensitive information through this website.

Why we may lawfully process it

We process your details because you asked us to — you submit an enquiry, and we need the information to respond to it. You give that consent explicitly by ticking the consent box on the form, and you may withdraw it at any time. Retaining a hashed IP address for rate limiting rests on our legitimate interest in keeping the service secure and available.

Who can see it

Enquiries are stored in a database hosted by Supabase and are reachable only by our team using privileged server-side credentials. Photographs are stored in a private bucket that is not publicly addressable. We do not sell your personal information, and we do not share it with third parties for their own marketing.

Two third-party services are involved in running this site:

• Supabase — database and file storage for enquiries.
• Google Places — used server-side to fetch our public Google rating and reviews. This call is made by our server, not by your browser, so Google does not receive your details or set cookies on you when you view the review section.

How long we keep it

We keep enquiry records for as long as we need them to serve you and to meet our record- keeping obligations, and no longer. You can ask us to delete yours sooner.

Your rights

Under POPIA you may:

• ask what personal information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete it;
• withdraw your consent to being contacted;
• lodge a complaint with the Information Regulator (South Africa) if you believe we have mishandled your information.

To exercise any of these, email us at info@deluxexchange.co.za and we will respond as promptly as we reasonably can.

Security

This site is served exclusively over HTTPS. Enquiries and uploads are transmitted encrypted in transit and stored in systems that are not publicly readable. Access is restricted to server-side credentials that are never exposed to your browser. No system is perfectly secure, but we take the protection of information you entrust to us seriously — it is the same duty of care we apply to the valuables you bring us.

Cookies

This site sets no advertising or cross-site tracking cookies. If analytics are enabled, they are used only to understand aggregate traffic patterns and never to identify you personally.

Contact us

Questions about this policy, or about the information we hold, can go to info@deluxexchange.co.za or WhatsApp +27 71 101 5729.