Privacy policy

Gawula (Pty) Ltd is the responsible party under POPIA. We collect only what we need to run the service.

When you sign up we store your name, email, phone and password hash. When you order we store your delivery address, order contents, payment reference and device details needed to keep the account secure.

Prescription requests include health information and your chosen fulfilment method. We encrypt uploaded files, restrict access to authorised staff, and share them with a dispensing pharmacy only to respond to your request. We delete the file when the request is resolved or deleted; you can delete an open request from your account.

We use this information to take and fulfil orders, send receipts and status updates, prevent fraud, and improve the product. We do not sell your personal information.

PayFast processes card payments. We store a payment reference, not your full card number. Hosting, email and maps providers may process data on our instruction, in or outside South Africa, under contract.

We keep account and order records for as long as the law requires, then delete or anonymise them. You may ask to see, correct or delete your data, or object to processing, by emailing hello@gawula.co.za.

We use cookies and local storage to keep you signed in and remember your cart. You can clear them in your browser; you will need to sign in again.

Information officer: hello@gawula.co.za. You may also lodge a complaint with the Information Regulator of South Africa.