Cookie Policy

**TOSHZA (Pty) Ltd** · Registration 2025/929932/07

Website: https://toshza.co.za

Version 1.0 · Effective 17 July 2026 · Last updated 17 July 2026

This Cookie Policy explains how TOSHZA (Pty) Ltd (Registration Number 2025/929932/07) uses cookies, local storage, and similar technologies on https://toshza.co.za. It covers essential session and cart cookies, analytics and performance tools (if and when enabled), marketing technologies, preference storage including newsletter-related localStorage, consent and opt-out choices, and third parties such as PayFast, Google Maps, Twilio, and Resend that may process technical data.

1. Introduction

TOSHZA (Pty) Ltd ("TOSHZA", "we", "us", or "our") operates the TOSHZA multi-vendor marketplace at https://toshza.co.za.

This Cookie Policy describes the cookies and similar technologies we use, why we use them, and the choices available to you. It should be read with our Privacy Policy and POPIA Compliance Notice.

By continuing to use the Platform where permitted by law, or by providing consent where required, you acknowledge the use of technologies described in this Policy.

2. What are cookies and similar technologies

Cookies are small text files placed on your device when you visit a website. They are widely used to make sites work, keep you signed in, remember preferences, and understand how services are used.

Similar technologies include local storage, session storage, pixels, software development kits, and device identifiers that store or access information on your browser or device.

Some cookies are set by TOSHZA (first-party). Others may be set by third parties that provide services on or through the Platform (third-party).

3. Who controls cookie-related processing

TOSHZA (Pty) Ltd, Registration Number 2025/929932/07, is the responsible party for cookie and similar-technology processing described in this Policy, except where a third-party provider acts as an independent responsible party for its own services.

Contact for privacy and cookie questions: privacy@toshza.co.za. General support: support@toshza.co.za. Website: https://toshza.co.za.

Our operations are based in South Africa and this Policy is intended to align with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable requirements.

4. Essential cookies

Essential cookies are required for the Platform to function securely and reliably. They are ordinarily used without a separate opt-in because the service cannot operate properly without them.

Essential uses on TOSHZA typically include:

Session management for authenticated users, including cookies named in the pattern toshza_*_session (for example, role- or app-specific session cookies that keep a customer, supplier, driver, or admin session active).
Security, fraud prevention, and request integrity controls.
Shopping cart continuity so selected items persist while you browse and check out.
Load balancing, basic availability, and prevention of abusive automated traffic where implemented.

If you block essential cookies in your browser, parts of the Platform — including sign-in, checkout, and cart — may not work.

5. Analytics cookies (if and when enabled)

Analytics cookies and similar tools help us understand how visitors use the Platform, which pages are visited, how journeys perform, and where errors occur.

TOSHZA may enable analytics technologies only if and when they are configured for the production Platform. Until such tools are enabled, analytics cookies described in this section may not be active.

Where analytics are enabled, they may collect technical and usage data such as approximate location derived from IP address, device/browser type, referring URLs, page views, and interaction events. We use this information to improve usability, reliability, and content.

Where required, non-essential analytics will be subject to consent or an equivalent lawful basis and can be controlled through the consent tools or browser settings described below.

6. Performance and diagnostic technologies

Performance technologies help us measure site speed, availability, crash reports, and operational health of marketplace features such as search, checkout, and delivery tracking.

These tools may use cookies, local storage, or telemetry endpoints to identify slow pages, failed requests, or client-side errors so that we can repair and improve the service.

Performance data is used for platform integrity and service improvement. Where a tool is not strictly essential, we will treat it according to the consent and control approach applicable at the time it is deployed.

7. Marketing cookies

Marketing cookies and similar technologies may be used to measure campaign effectiveness, attribute referrals, or deliver relevant promotions where TOSHZA runs advertising or partner campaigns.

Marketing technologies are not required for core marketplace checkout. Where used, they will be configured as non-essential unless a specific tag is strictly required for a transactional flow.

You may opt out of non-essential marketing cookies through consent controls where available, browser settings, and any industry opt-out mechanisms offered by the relevant advertising partners.

8. Preferences and localStorage

We may store preference and interface data on your device using cookies or localStorage so that the Platform remembers choices such as dismissed notices, UI state, or similar settings.

Newsletter and marketing-signup related storage: TOSHZA may use localStorage (or similar browser storage) to remember that a newsletter prompt was dismissed, that a signup form was completed on this device, or to avoid repeatedly showing the same promotional banner. This is a client-side convenience signal and is not a substitute for a server-side subscription record.

If you subscribe to a newsletter or marketing list, the subscription itself is processed as personal information under our Privacy Policy (for example, via email service providers). Clearing localStorage may cause banners or prompts to reappear even if you remain subscribed or unsubscribed on the server.

Preference storage can usually be cleared by clearing site data in your browser. Doing so may reset saved local settings.

9. Consent management

Where South African law or our risk posture requires consent for non-essential cookies, TOSHZA will present consent controls or equivalent notices before or when those technologies are activated.

Essential cookies required for security, sessions (including toshza_*_session cookies), and cart operation may be set on the basis of legitimate interests / necessity to provide the service you request.

You may withdraw or change non-essential consent where consent tools are provided. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

If consent tooling is updated as the Platform matures, the categories presented in the banner or preference centre will control the then-current optional technologies.

10. How to opt out and control cookies

You can control cookies and site data in several ways:

Browser settings: block third-party cookies, delete existing cookies, or clear localStorage and site data for toshza.co.za.
Platform consent or preference controls, where published on the website.
Device-level advertising or tracking limitations offered by your operating system or browser.
Email unsubscribe links for marketing messages (this manages email preferences and is separate from browser cookie controls).

Please note that blocking or deleting essential cookies may sign you out, empty your cart, or impair checkout and account features.

11. Third-party services and technical data

TOSHZA uses carefully selected third parties that may set cookies, receive technical identifiers, or otherwise process technical data when you use related features:

PayFast and related payment providers process payment-session and transaction technical data to authorise and reconcile payments. Their cookies or hosted payment pages are governed by their own policies when you interact with their checkout environment.
Google Maps or related mapping services may process location queries, map-tile requests, and technical usage data when address entry, store location, or delivery-map features are used.
Twilio and/or Resend (or similar communications providers) may process technical delivery metadata when we send SMS, WhatsApp, email OTP, or transactional messages. These providers primarily process message-routing data rather than website cookies, but they may receive IP addresses, device hints, or message identifiers as part of delivery.

Third parties may act as operators on our instructions or, in some cases, as independent responsible parties. We encourage you to review their privacy and cookie notices when you are redirected to or interact with their services.

12. Relationship to personal information and POPIA

Where cookies or similar technologies identify you or can be linked to you (for example, account session tokens, order identifiers, or contact details associated with analytics events), the information is personal information under POPIA.

Our Privacy Policy explains the purposes, sharing, security, retention, and your rights of access, correction, deletion, and objection.

Cookie identifiers that cannot reasonably be linked to an identifiable person are treated as technical data, but we still apply proportionate security and retention practices.

13. Retention of cookie and storage data

Session cookies such as toshza_*_session cookies typically expire when you sign out or when the session lifetime ends.

Persistent cookies and localStorage entries remain until they expire, are replaced, or you clear them.

Server-side logs associated with cookie identifiers (for security, payments, or abuse prevention) are retained only for as long as reasonably necessary for those purposes, legal claims, and regulatory requirements.

14. Children

The Platform is directed at persons who can lawfully create accounts and enter marketplace transactions in South Africa.

We do not knowingly use cookies to target children for marketing. If you believe a child has provided personal information via the Platform, contact privacy@toshza.co.za.

15. Updates to this Cookie Policy

We may update this Cookie Policy when we change technologies, add or remove third-party tools, or to reflect legal or operational requirements.

The version and dates published with the Legal Documents Package identify the current text. Material updates will be made available on https://toshza.co.za.

If a new non-essential technology category is introduced, we will update consent or notice mechanisms where appropriate.

16. Contact

Questions about cookies, localStorage, or related preferences may be directed to:

Privacy: privacy@toshza.co.za
Support: support@toshza.co.za
Website: https://toshza.co.za

TOSHZA (Pty) Ltd, Registration Number 2025/929932/07, Florida Hills, Roodepoort, Gauteng, South Africa. You may also contact the Information Regulator (South Africa) regarding POPIA concerns via https://inforegulator.org.za.

Contact: support@toshza.co.za · Privacy: privacy@toshza.co.za