Privacy Policy
Effective 1 July 2026 · Last updated 10 August 2026
PourPilot ("we", "our", "us") operates this website and the PourPilot mobile app. This policy explains what information we handle when you browse this site, place an order, or use the app, and the choices and rights you have. We designed everything to collect as little as possible.
1. Information we collect on this website
- Order information. When you buy a coaster we collect your first name, email address and order details (product, quantity, amount). Payment happens on PayFast's secure pages — your card details never touch our systems.
- Back-in-stock requests. If a product is sold out and you ask to be notified, we store the email address you enter, use it once to tell you the product is back, and nothing else.
- Anonymous visit counting (our own server). So we can see how many people reach each step of the shop — opened the site, viewed the landing page, viewed the product, started a checkout — we record those four events ourselves. Each is stored with a random ID that exists only in the browser tab you are using and is discarded the moment you close it. No IP address, no device or browser details, no name or email address, and nothing that could identify you or follow you between visits, devices or websites. These counts are deleted after 90 days. Because they identify nobody, they sit outside the consent banner — that banner exists for the Meta pixel below, which sends data to a third party.
- Ad measurement (only with your consent). We advertise on Meta platforms (Facebook/Instagram) and use a single Meta pixel to see whether those ads lead to visits and orders. The pixel loads only after you choose "Allow" on the consent banner — if you decline (or ignore the banner), nothing from Meta loads at all. When allowed, Meta receives standard pixel data (pages viewed, checkout started, purchase completed, plus device/browser information Meta collects itself) under Meta's privacy policy. You can withdraw consent at any time by clearing this site's data in your browser — the banner will ask again.
- Nothing else. No third-party analytics, no advertising trackers beyond the consented Meta pixel, no marketing cookies. We do not build profiles, and nothing we store can follow you across other sites.
2. Information the app handles
- Optional account. Creating an account in the app is optional (email + password, hashed by our provider). It only exists to sync your "My Bar" list across devices. You can delete your account (and all its data) in the app under Settings → Account, or via this page.
- Bluetooth measurements. Pour data is processed on your phone in real time and is never transmitted to us or stored on our servers.
- No analytics, no ads, no trackers in the app — the app and coaster phone nothing home. (This website uses one consent-gated ad-measurement pixel, described above.)
The full app-specific policy (the one linked from the app stores) lives at pourpilot.co.za/app-privacy.html.
3. How we use your information
Only to fulfil and support your order (confirmation, delivery, warranty and returns), to provide the optional account sync, and to respond when you contact us. We do not sell, rent or trade personal information.
4. Third-party services
| Service | Purpose | Data involved |
|---|---|---|
| PayFast | Payment processing | Payment details (handled entirely by PayFast), order reference, amount |
| Supabase | Order records, optional app accounts, back-in-stock requests | Name, email, order details; app account email + hashed password; notification email addresses |
| Meta (Facebook) | Ad measurement — only after you consent on the banner | Standard pixel events (page view, checkout started, purchase) and the device/browser data Meta's pixel collects |
5. Data retention
Order records are kept as long as required for warranty, tax and consumer-protection purposes. App account data is deleted within 30 days of an account-deletion request. Back-in-stock email addresses are used for one notification and then have no further use — email us if you'd like yours removed sooner. Bluetooth pour data is never retained by us. Anonymous visit counts are deleted after 90 days.
6. Your rights (POPIA)
We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). You may request access to, correction of, or deletion of your personal information at any time by emailing us. You may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.
If you are in the EU/EEA/UK, equivalent rights apply under the GDPR, including restriction, objection and portability.
7. Security
All communication with our providers is encrypted in transit (TLS/HTTPS). Database access is protected by row-level security so order data is only readable by us. Payments are processed entirely by PayFast under their PCI-DSS compliance.
8. Age restriction
PourPilot relates to preparing alcoholic beverages and is intended solely for adults of legal drinking age. We do not knowingly collect personal information from anyone under 18.
9. Contact
Questions or requests: support@pourpilot.co.za