Privacy policy


Milk Box (Pty) Ltd t/a Tau Supplies — Registration No: K2019149125 | 

Created: 15/07/20256

This Privacy Policy explains how Milk Box (Pty) Ltd t/a Tau Supplies ("we", "us", "our") collects, uses, stores, and protects your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable, the Electronic Communications and Transactions Act 25 of 2002 (ECTA).


1. Who We Are (Responsible Party)

Milk Box (Pty) Ltd t/a Tau Supplies
Physical address: 109 Van Riebeeck, Avenue, Edenvale, 1609.
Email: laurence@tausupplies.co.za

Information Officer: Laurence Bekink contactable at laurence@tausupplies.co.za


2. Personal Information We Collect

We may collect and process the following personal information:

  • Identity and contact details: name, surname, business name, email address, phone number, billing and delivery addresses.

  • Business details (for trade/wholesale accounts): company registration number, VAT number, trading references.

  • Transaction information: order history, products purchased, payment records. We do not store full card details — card payments are processed by our third-party payment provider, Stitch Money Proprietary Limited.

  • Technical information: IP address, browser type, device information, and website usage data collected via cookies and similar technologies.

  • Communications: correspondence with us, including support queries and reviews.


3. How We Collect It

Directly from you when you register an account, place an order, complete a credit/trade application, subscribe to our mailing list, or contact us; and automatically through cookies when you use our website.


4. Why We Process Your Information (Purpose)

We process personal information to:

  1. Register and manage your account and verify your identity;

  2. Process orders, payments, deliveries, and returns;

  3. Communicate with you about your orders and account;

  4. Assess credit applications for trade accounts (where applicable);

  5. Send you marketing communications about products and offers, only where you have opted in or where permitted by law — you may unsubscribe at any time;

  6. Improve our website, product range, and service;

  7. Comply with legal obligations (e.g. tax and accounting records under the Companies Act, Income Tax Act, and VAT Act);

  8. Prevent fraud and protect our legitimate business interests.


5. Legal Basis for Processing

We process personal information where: it is necessary to perform a contract with you; you have consented; processing is required by law; or processing is necessary to pursue our (or your) legitimate interests.


6. Sharing Your Information

We do not sell your personal information. We share it only with:

  • Courier and logistics partners, to deliver your orders;

  • Payment processors, to process payments securely;

  • IT and hosting service providers who host our website and systems;

  • Professional advisers (accountants, auditors, attorneys) where necessary;

  • Regulators, courts, or law enforcement where required by law.

All third-party operators processing information on our behalf are required to do so securely and only on our instructions.

Where your information is transferred outside South Africa (for example, if our website or email provider hosts data offshore), we will ensure the recipient is subject to laws or contractual terms providing an adequate level of protection as required by section 72 of POPIA.


7. Cookies

Our website uses cookies to keep you logged in, remember your cart, and analyse site usage. You can disable cookies in your browser settings, but some site functionality may be affected. [Expand this section or link to a separate cookie policy if you use analytics/advertising cookies such as Google Analytics or Meta Pixel.]


8. Security

We take reasonable and appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access, and unlawful processing, including secure servers, encryption of payment transactions, and access controls. In the event of a data breach affecting your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.


9. Retention

We retain personal information only for as long as necessary to fulfil the purposes described above, or as required by law (for example, financial records are kept for at least five years). Thereafter, information is securely deleted or de-identified.


10. Your Rights

Under POPIA you have the right to:

  • Request access to the personal information we hold about you;

  • Request correction or deletion of inaccurate, outdated, or unlawfully obtained information;

  • Object to processing, including for direct marketing;

  • Withdraw consent where processing is based on consent;

  • Lodge a complaint with the Information Regulator (South Africa):


Email: POPIAComplaints@inforegulator.org.za | Website: www.inforegulator.org.za

To exercise any of these rights, contact our Information Officer at laurence@tausupplies.co.za We may require proof of identity before acting on a request. 


11. Marketing

We will only send you direct electronic marketing in accordance with section 69 of POPIA — that is, with your consent, or where you are an existing customer and the marketing relates to similar products, and every message includes a working unsubscribe option.


12. Changes to This Policy

We may update this policy from time to time. The latest version will always be published on this page with the "last updated" date above.