Effective date: 2025-08-29

1. Responsible Party
Eat Out The Box (Pty) Ltd
70 Constantia Road
Wynberg
Cape Town
Email: wecare@eatoutthebox.co.za
Tel: 087 354 3618

2. What Information We Collect & Its Purpose

Name, email, telephone, address — to process and deliver orders.

Payment details (card number, billing address) — to complete purchases.

Order history and preferences — to personalise your experience and make recommendations.

Marketing opt-in choices — to send promotions or updates (only with consent).

3. Voluntariness & Consequences
Providing personal information is required to fulfil orders (e.g., delivery address) and optional for marketing communications. If required data is not provided, we may be unable to complete your order.

4. Lawful Basis for Processing

Contractual necessity: to process and deliver your order.

Consent: for marketing communications.

Legitimate interest: to improve services and manage our business operations.

Legal obligation: to maintain records for tax or regulatory purposes.

5. Information Sharing / Recipients
Your data may be shared with:

Delivery partners (to ensure timely delivery)

Payment processors (for payment authorisation)
These partners are bound by confidentiality and data security obligations.

6. Cross-Border Transfers
We do not transfer personal data outside South Africa. If we ever do (e.g., for cloud hosting), we will ensure it’s protected by adequate safeguards or consent.

7. Security Measures
We use SSL encryption on our website, secure servers, and access controls to protect your data from unauthorised access or loss.

8. Data Retention
We retain personal data no longer than necessary to fulfil its purpose, comply with legal obligations, and manage customer service. Typically, order data is kept for [e.g. 5 years for tax purposes] or until you request deletion.

9. Your Rights
Under POPIA, you have the right to:

Access your personal information

Correct or update inaccuracies

Request deletion

Object to processing (e.g. direct marketing)

Withdraw consent

Lodge a complaint with the Information Regulator:

Website: informationregulator.org.za

Complaints email: [Regulator’s contact] (Include actual contact)

10. Changes to This Policy
We may update this Policy occasionally. We will post the updated version on our site and note the effective date. We recommend checking periodically.