Your privacy, in plain words.

Published and last updated 26 October 2026

Who we are

Pepper Mills For Africa is a mill workshop in Pretoria, South Africa. We turn and sell handmade wooden pepper, salt and spice mills, CrushGrind® mechanisms and tools, and we ship across South Africa and abroad. If anything on this page is unclear, or you want to ask about information we hold on you, write to info@peppermills.co.za or phone 082 456 8372.

What we collect, and why

We only ask for what a sale actually needs, and we keep the collection to three places:

• When you place an order — your name, email address, phone number and delivery address, plus the items, quantities and totals on the order, the delivery option you chose, the payment method and status, and a courier tracking number once your parcel is on its way. This is the information we need to make your mill, deliver it and account for the sale.
• When you send us a message — your name, email address and (optionally) phone number, together with whatever you write about a mill, mechanism, custom commission or corporate order. We use it to reply and to quote you.
• When you open an account — an email address and password, so you can sign in again. Shopping and checking out does not require an account.

Card payments are taken by our payment provider, Yoco. Your card number, expiry date and security code go straight to Yoco’s own secured checkout — they never reach our website or our servers. We keep only the order reference and whether payment came through. If you pay by EFT, we keep the order and ask you to send proof of payment.

Google Analytics — what it records

We use Google Analytics to understand how the shop is used: which mill pages people spend time on, where shoppers give up, and whether a price or a wood choice is confusing. That helps us fix the shop rather than guess at it.

Analytics runs only if you choose “Allow analytics” on the banner that appears when you first arrive. Until you make a choice, nothing is sent to Google. If you choose “No thanks”, no Analytics code is loaded at all.

With your permission, Analytics sees:

• the pages you open, as a web address path — without the search part of the URL;
• which mill, mechanism or tool you are looking at;
• items added to your cart, with the price in rand and the quantity;
• checkout steps — starting checkout, choosing a delivery option, and adding a delivery address to a quote;
• a completed purchase, carrying the order number, the items and the total in rand, and only once payment has actually been confirmed.

Analytics never receives your name, email address, phone number, delivery address, or any banking or card details. Our admin screens are not tracked, and we deliberately strip query strings so order references and sign-in links are never sent. Once you allow Analytics, Google stores its own cookies in your browser so it can count visits rather than people.

Managing your consent

Your decision is remembered in this browser, so the banner does not follow you from page to page. You are never locked in:

• Change or withdraw at any time — press Privacy settings in the footer of any page and the choice opens again. Switching to “No thanks” stops tracking on the spot, and anything queued for sending is discarded.
• Clear your browser data (or use a different browser, device or private window) and the shop will ask you again — your choice is stored on your device, not against your name.
• Google’s own opt-out — the Google Analytics browser-add-on blocks Analytics on every site that uses it: tools.google.com/dlpage/gaoptout.

If you decline analytics, your visits simply do not appear in our reports. Nothing about your ability to browse, order, get a warranty claim or talk to us changes.

Storage on your device

• Your privacy choice — so the banner asks you once and your answer keeps applying.
• Your cart — the mills and mechanisms you have added, so it is still there when you come back. It holds product and price details only, not your name or address.
• A short-lived purchase note — held for the visit that ends in an order, so a confirmed sale is counted once and not twice if you refresh the page.

We do not place advertising or cross-site tracking cookies of our own, and we do not use your information for profiling.

Who we share your details with

Only the parties needed to complete your order or run the shop: courier and locker partners, who receive the name, address and phone number required to deliver; Yoco, which handles card payments; Google Analytics, only if you allowed it; and the hosting and database services that keep the shop and its records running. Our own team receives a new-order notice so your mill can be queued, packed and followed up. We do not sell, rent or trade your personal information.

Promotional messages

We send promotional messages only with your explicit consent. Placing an order, requesting a quote or allowing Google Analytics does not give us permission to send marketing. Order confirmations, delivery updates and replies to your enquiries are separate from promotional messages.

How long we keep things

Order and payment records are kept while they are needed for delivery, warranty support and our own accounting and tax obligations, after which they are deleted or anonymised. Messages and enquiries are kept until the conversation is finished and no longer needed for a quote. Analytics data is held by Google under its own retention settings; your consent record and cart stay in your browser until you clear them.

Your rights

We process your information under South Africa’s Protection of Personal Information Act (POPIA). You may ask us what we hold about you, ask for anything incorrect to be corrected, object to a use of your information, or ask us to delete it where we are not required by law to keep it. Email info@peppermills.co.za and we will answer you directly. If you are not satisfied with our answer, you may complain to the Information Regulator.

How we protect your information

The shop and checkout are served over HTTPS. Access to order records is limited to staff accounts that need them for production and delivery, and every admin action is checked against your own signed-in session rather than a shared master key. Payment credentials are held as server-side secrets and are never sent to your browser. Product photographs and internal files sit behind access control, so only approved accounts can reach them.

Children

Our shop is written for adults buying for their own kitchens and businesses. We do not knowingly collect information from children; if you believe a child has sent us details, write to us and we will remove them.

If this policy changes

When we change it we update the date at the top of this page, and if a change materially affects how we use your information we will say so plainly here before it takes effect.

Talk to us