Facts & Fiction Online Bookstore — last updated 24 September 2026
1. Who we are
Facts & Fiction Online Bookstore (“we”, “us”, “our”) sells second-hand books and media online at https://factsandfiction.net.
For the purposes of the Protection of Personal Information Act 4 of 2013 (“POPIA”), the responsible party is:
| Legal status | R.P. Bruwer, trading as Facts & Fiction Online Bookstore (sole proprietor) |
| Address | 107 Klip Street, Hennopspark, Centurion, 0157 |
| admin@factsandfiction.net | |
| Telephone | 084 703 6129 |
| Information Officer | R. Bruwer |
2. The information we collect
When you place an order: your name, delivery address, email address and telephone number, the items ordered, the amount, and your payment reference.
When you create an account: your name, email address, password (stored encrypted and never visible to us) and your order history.
When you contact us: whatever you choose to include in your message, and our reply.
Automatically, when you visit: your IP address, browser type and version, device type, the pages you view and the time of your visit. This is collected by our web server, our security software and our content delivery network, and is used to keep the site secure and working.
What we do not collect: we do not accept card payments, so we never receive or store your card number, CVV or banking login details. Payment reaches us as an ordinary bank transfer.
3. Why we process your information
| Purpose | Lawful basis under POPIA |
|---|---|
| To accept, process, pack and deliver your order | Necessary to perform our contract with you |
| To confirm payment and reconcile it to your order | Contract, and our legal obligation to keep accounting records |
| To contact you about your order | Contract |
| To answer your questions | Our legitimate interest in responding to you |
| To keep the site secure and prevent fraud | Our legitimate interest in protecting the site and its users |
| To keep accounting and tax records | Legal obligation |
| To send you marketing, if you asked for it | Your consent, which you may withdraw at any time |
We do not sell your personal information to anybody, and we do not share it for anyone else’s marketing.
4. Who we share it with
We share only what is necessary, and only with:
- Our courier, to deliver your order — your name, delivery address and telephone number.
- Our bank, when we reconcile your payment.
- Our web host and content delivery network, who store and serve the website on our behalf.
- Our accounting software, where your invoice is recorded.
- SARS, our auditors, or a court or regulator, where the law requires it.
Cloudflare. Since 24 September 2026 this website is served through Cloudflare, a content delivery and security network. Cloudflare sits between your browser and our server, so it processes your IP address and request details in order to deliver pages quickly and to block attacks. Cloudflare operates servers in several countries, including a point of presence in Johannesburg, and may process this traffic data outside South Africa. It acts as our operator and does not use your information for its own purposes.
5. Information sent outside South Africa
Some services we use to run the website — including our content delivery network and security provider — process information on servers outside South Africa. Where this happens we rely on section 72 of POPIA, and satisfy ourselves that the recipient is subject to laws or binding agreements providing an adequate level of protection.
6. How long we keep it
| Information | Retention |
|---|---|
| Order and invoice records | 5 years from the end of the tax year, as South African tax law requires |
| Account details | Until you ask us to delete the account |
| Enquiries and correspondence | 12 months |
| Website security and access logs | Up to 12 months |
| Marketing consent records | Until withdrawn, plus 12 months as proof of when |
7. How we protect it
The site is served over an encrypted HTTPS connection. Access to the administration area is restricted, password protected and monitored. We keep the platform updated and take regular backups.
No system is perfectly secure. If a breach occurs that creates a real risk of harm to you, we will notify you and the Information Regulator as section 22 of POPIA requires.
8. Your rights
Under POPIA you have the right to:
- Ask what we hold about you, and receive a copy
- Correct or complete information that is wrong or out of date
- Ask us to delete information we no longer have grounds to keep
- Object to processing based on legitimate interest
- Withdraw consent to marketing at any time
- Complain to the Information Regulator
To exercise any of these, email admin@factsandfiction.net. We will respond within a reasonable time, and in any event within 30 days. We may need to confirm your identity first, so that we do not disclose your information to someone else.
9. Cookies
The site uses cookies necessary for it to function — to keep items in your basket, to keep you signed in, and to protect against fraudulent requests. Without these the shop cannot work.
We also use cookies set by our security and performance provider to distinguish genuine visitors from automated traffic.
We also use Google Analytics cookies to count visits and see which pages are used, so we can improve the shop. Google processes this data on its servers, some of them outside South Africa; we see only totals, not who you are. You can block these cookies in your browser without affecting your basket or checkout.
You can block or delete cookies in your browser settings. If you block the necessary ones, the basket and checkout will not work.
10. Children
The site is not intended for children under 18. We do not knowingly collect information from a child. A parent or guardian who believes we have done so should contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The current version is always the one on this page, and the date at the top shows when it last changed.
12. Complaints
Please contact us first at admin@factsandfiction.net — most problems are quickest to fix directly.
If you are not satisfied, you may complain to the Information Regulator (South Africa):
- Website: https://inforegulator.org.za
- General enquiries: enquiries@inforegulator.org.za
- Toll free: 0800 017 160
- Telephone: 010 023 5200