Cookie Notice

Last updated: 28 October 2026

1. What this notice covers

This notice explains how our website (www.blackleaf.co.za), operated by BlackLeaf Group Holdings (Pty) Ltd (2025/879490/07), uses cookies and similar technologies. It forms part of our Privacy Policy and Collection Notice.

2. What cookies are

Cookies are small files a website saves on your device. Similar tools include local storage, pixels and tracking scripts. They are used to make a site work, remember choices and measure use.

3. What this website does

3.1 We set no cookies, and load no optional tool, unless you accept it. Our website does not use tag managers, chat widgets, heat-maps, embedded videos, maps or social-media widgets. The optional tools are Google Analytics (3.4) and the Meta pixel (3.5). You can accept either, both or neither.

3.2 Our typefaces are hosted on our own domain, so no font request goes to Google. Your shopping basket is kept in your browser page only. It is lost if you reload the page. If you use the cookie banner, we save your choice in your browser's local storage so that we do not ask you again. We ask again after 12 months. This is a record of your choice and is not used to track you.

3.3 The social media icons are ordinary links to LinkedIn, Facebook and Instagram. Those sites have their own cookies and privacy notices that apply once you click through.

3.4 Google Analytics. The website shows a cookie banner. If you accept analytics, we load Google Analytics 4 (provided by Google). It sets cookies named _ga and _ga_ followed by an identifier, which last up to 400 days, and sends Google the pages you view, your approximate location, your device and browser type, and basic shop events such as adding an item to the cart or starting checkout. We switch off Google's advertising features and Google signals, and we do not send your name, email address or order details. If you decline analytics, or your browser sends a Global Privacy Control signal, Google Analytics is not loaded and no analytics cookie is set. You can change your choice at any time with the Cookie settings link at the bottom of every page.

3.5 Meta pixel (advertising measurement). If you accept advertising measurement on the cookie banner, we load the Meta (Facebook) pixel (provided by Meta). It sets first-party cookies on our own domain, which Meta uses to recognise your browser, and sends Meta: the page you view, including its address (which may include the name of an advertising campaign in the link you used); that you sent an enquiry or other form; that you added an item to the shop basket or started checkout; your IP address, browser and device type; and an identifier from Meta's cookie. The pixel runs on every page and again when you move between parts of a page, such as when you open the checkout. We do not send Meta what you type into a form. We have switched off Meta's automatic matching of customer details and its automatic button-click and form-field events. We use this only to measure whether our advertisements lead to enquiries or shop activity. Meta handles the information it receives under its own terms and privacy policy, which we do not control. Meta may process this outside South Africa. From 12 November 2026, if you accepted advertising measurement on the cookie banner, Meta may also measure on your own device whether you sent an enquiry or form after seeing an advertisement. Meta may process information about this outside South Africa. If you decline advertising measurement, or your browser sends a Global Privacy Control signal, the Meta pixel is not loaded and no Meta cookie is set. You can change your choice at any time with the Cookie settings link at the bottom of every page.

4. Third parties that receive information when you use the website

Third party	When	What is sent	What you should know
MailerLite (email marketing)	When you sign up to our newsletter, and when you open or click our emails	Your email address, name if given and consent record; when you open or click an email, your IP address, device details and which links you click	MailerLite may process this outside South Africa. You can stop the emails at any time with the unsubscribe link
Google Analytics (website statistics)	Only if you accept analytics on the cookie banner	Pages viewed, approximate location, device and browser type, and basic shop events. No names, email addresses or order details	Google may process this outside South Africa. You can withdraw your consent at any time with Cookie settings
Meta pixel (advertising measurement)	Only if you accept advertising measurement on the cookie banner	Page viewed and its address, that you sent a form or added an item to the basket or started checkout, IP address, browser and device type, and an identifier from Meta's cookie. No names, email addresses or form contents	Meta handles this under its own terms and may process it outside South Africa. You can withdraw your consent at any time with Cookie settings
PayFast (hosted checkout)	Only when online payment is available, you choose Pay online (PayFast) and are sent to PayFast's page	Your order reference, amount and the contact details you entered at checkout. You enter your card or bank details on PayFast's page; they never reach us	PayFast's own cookies and privacy notice apply on its page
Our form handler	When you submit a form	What you typed in the form	Sent without cookies

5. Other information our systems handle

• Server logs. Our hosting provider keeps standard logs: IP address, date and time, page requested and browser.

• Spam control. When you submit a form we keep a one-way scrambled version (a hash) of your IP address with the time, to stop repeated submissions. The IP address is not kept in readable form for this purpose.

• Form records. Form submissions are emailed to us and logged with the form name and your email address.

• Newsletter sign-ups. We also record your IP address, the consent you gave and the time, as proof of consent under the Protection of Personal Information Act 4 of 2013 (POPIA).

We use this information only to run and secure the website, answer you and prove consent. See the Privacy Policy for your rights.

6. Your choices

6.1 You can block or delete cookies in your browser settings. You can also change your analytics and advertising choices at any time with the Cookie settings link at the bottom of every page.

6.2 You can unsubscribe from marketing at any time using the link in each message or by writing to [email protected]. You may withdraw consent without affecting what we did before you withdrew.

7. Transfers outside South Africa

Google and Meta may process information outside South Africa, as may some other third parties named above. Where they do, we require protection that meets section 72 of POPIA, or we rely on your consent.

8. Questions and complaints

Write to [email protected]. You may also complain to the Information Regulator (South Africa). See our Complaints Procedure.

9. Changes

We will update this notice before we add any other cookie or tracking tool. The version on the website, with its date, applies.