Privacy Policy
Last updated 4 September 2026
This policy explains how Vegan Streetfood handles personal information collected through order.veganstreetfood.co.za, in line with the Protection of Personal Information Act (POPIA).
What we collect
- Contact details: your name, mobile or WhatsApp number and email address, so we can identify your order and let you know when it is ready.
- Order details: the items, modifiers, notes, collection branch and collection time you choose.
- Account and loyalty data: your sign-in identifier, points balance and order history if you use an account.
- Payment status: whether a payment succeeded, the amount, and a payment reference from our payment provider. We never receive or store your card number, expiry date or CVV.
- Technical data: basic device and log information needed to keep the site secure and working.
Why we use it
- To accept, prepare and hand over your order.
- To send you order updates by WhatsApp or email (order confirmed, ready to collect, collected).
- To run the loyalty programme and show you your order history.
- To keep records for accounting, tax and dispute resolution.
- To improve our menu and service using aggregated ratings and sales data.
Who we share it with
- Paystack, our payment provider, to process card payments securely.
- Our messaging provider, to deliver WhatsApp and email order notifications and one-time sign-in codes.
- Our hosting and database providers, who store the data on our behalf under contract.
- Authorities, where the law requires it.
We do not sell your personal information, and we do not use it for third-party advertising.
Reviews
Written review feedback is visible only to our team. Publicly we show star ratings and branch averages — never your name or comment.
How long we keep it
Order and payment records are kept for at least five years as required by South African tax law. Account and loyalty data is kept while your account is active. Guest order contact details are kept for the period needed to support the order and its records.
Security
Data is transmitted over HTTPS and stored in an access-controlled database with row-level security so that customers can only see their own records. Staff access is limited by role, and staff kiosk sessions require a personal PIN.
Your rights
You may ask us for a copy of the personal information we hold about you, ask us to correct or delete it, or object to marketing messages. Email hello@veganstreetfood.co.za and we will respond within a reasonable time. You may also complain to the Information Regulator of South Africa.
Cookies and local storage
We use browser storage only to keep your cart, selected branch and sign-in session working. There are no advertising or third-party tracking cookies on this site.