Your cart is empty.
Start exploring the collection.
This policy explains how Limitless Leaf collects, uses, stores, and protects your personal information in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA).
Effective: 1 January 2026 | Jurisdiction: Republic of South Africa
Limitless Leaf (referred to as "we", "us", or "our") is a South African cannabis and lifestyle retail business operating from Benoni, Gauteng. We operate the website at limitlessleaf.co.za.
We are the Responsible Party for your personal information as defined under POPIA. Our Information Officer can be contacted at info@limitlessleaf.co.za.
We collect the following categories of personal information:
We do not collect special personal information as defined by POPIA (such as health data, biometric data, or criminal record information) unless explicitly required and consented to.
We process your personal information for the following purposes:
We will never sell your personal information to third parties. We will never use your information for automated decision-making that produces legal or similarly significant effects without your consent.
Under POPIA, we process your personal information on the following lawful grounds:
We share your personal information only in the following limited circumstances:
Cross-border data transfers: Shopify's servers are located internationally. By using our website you acknowledge that your data may be processed in jurisdictions outside South Africa. We ensure that any such transfers are subject to appropriate safeguards in line with POPIA Section 72.
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, and regulatory compliance purposes.
When your data is no longer required, we will securely delete or anonymise it.
As a data subject under POPIA, you have the following rights:
To exercise any of these rights, contact us at info@limitlessleaf.co.za. We will respond within 30 days.
You have the right to lodge a complaint with the Information Regulator at inforeg.org.za or by email at complaints.IR@justice.gov.za if you believe your personal information has been processed unlawfully.
Our website uses cookies and similar tracking technologies to improve your experience and help us understand how the site is used. These include:
You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the website.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or disclosure. Our website is secured with SSL encryption. Payment processing is handled by PCI-compliant providers.
Despite these measures, no method of transmission over the internet is entirely secure. If you become aware of any security vulnerability in our systems, please contact us immediately.
Our Information Officer is responsible for ensuring compliance with POPIA. For any privacy-related queries, requests, or complaints:
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.