Dot.Emall

Last updated: 6 August 2026

This Privacy Policy explains how BluePin Inc ("BluePin", "we", "us", "our"), the company responsible for Dot.Emall, collects, uses, stores, and shares personal information when you use Dot.Emall and the wider Dot Ecosystem it connects to. It is written to align with South Africa's Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Who we are

BluePin Inc is the responsible party for the personal information Dot.Emall processes. Our Information Officer can be reached at privacy@infodot.co.za for any question, request, or concern about your personal information.

2. What we collect

  • Account information — your name, email address, and password (stored as a salted hash, never in plain text), via your Dot Ecosystem account.
  • Seller information — if you open a store, your store profile and product listings.
  • Orders and cart activity — as a buyer, the products you add to cart, orders you place, and your order history across every store in the marketplace.
  • Delivery information — the delivery address and contact details needed to fulfil an order.
  • Technical information — IP address, browser and device information, and session activity, collected automatically for security and to keep you signed in.

3. Why we process your information

We process personal information to:

  • create and maintain your account, and authenticate you when you sign in;
  • let you sign in once and move between connected Dot Ecosystem platforms without re-entering your credentials;
  • operate the marketplace — listings, catalogue, cart, and order flow — for buyers and sellers;
  • fulfil and deliver orders; and
  • keep Dot.Emall secure and prevent abuse.

4. Ecosystem single sign-on

When you use another Dot Ecosystem platform to sign in to Dot.Emall (or vice versa), a short-lived, single-use authentication token confirms who you are without exposing your password to the connected platform.

5. Sharing between buyers and sellers

Placing an order necessarily shares your name and delivery details with the seller fulfilling it. When card payment is switched on, your email address and the order amount are sent to Paystack so it can take your payment; your card details go to Paystack only and never reach Dot.Emall. Seller payouts and finance are handled outside Dot.Emall (Dot.Billing, Dot.Finance) — we share only what's needed to complete the order and settlement.

6. Cookies

Dot.Emall uses a small number of strictly necessary cookies to keep you signed in, remember your cart, and protect your account and forms from cross-site attacks. See our Cookie Policy for the full list and what each one does.

7. How long we keep your information

We keep your account and order history for as long as your account is active, and for as long afterward as required for warranty, dispute, or legal purposes. If you delete your account, we remove your personal account information within a reasonable period, subject to those requirements.

8. How we protect your information

Passwords are hashed, never stored in plain text. Ecosystem sign-on tokens are short-lived and single-use. We apply reasonable technical and organisational security measures appropriate to the information we hold.

9. Your rights under POPIA

As a data subject under POPIA, you have the right to:

  • ask us to confirm what personal information we hold about you, and to access it;
  • ask us to correct or delete personal information that is inaccurate, out of date, incomplete, misleading, or obtained unlawfully;
  • object, on reasonable grounds, to the processing of your personal information;
  • withdraw any consent you've given us, at any time, for a specific purpose;
  • ask us not to use your information for direct marketing; and
  • lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za if you believe we have processed your personal information unlawfully.

To exercise any of these rights, contact our Information Officer at privacy@infodot.co.za.

10. Children

Dot.Emall is not directed at children, and we do not knowingly collect personal information from children without the consent of a parent or guardian as required by POPIA.

11. Changes to this policy

We may update this Privacy Policy from time to time. We'll change the "Last updated" date above when we do, and for material changes we'll take reasonable steps to let you know before they take effect.

12. Contact us

Questions about this Privacy Policy can be sent to privacy@infodot.co.za, or via our Contact page.