PRIVACY POLICY

1. Introduction

This Privacy Policy explains how Food Sack (“we”, “us”, or “our”) collects, uses, and protects your personal information when you access or use the Food Sack App, our website, or any of our associated mobile Platforms (collectively, the “Platforms”). By using the Food Sack App, you agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and processing your personal information responsibly and transparently, in line with South Africa’s Protection of Personal Information Act, 2013 (POPIA).

2. Who Should Read This Policy

This policy applies to all users of the Food Sack Platforms, whether you are browsing or have created an account. If you’re under 18, please ensure a parent or legal guardian has given permission to use the Food Sack App or Platforms. By using our Platforms, you agree to the processing of your Personal Information as set out in this Privacy Policy.

3. What We Mean By Personal Information

In this policy:

• “Personal Information” means any data that can identify you—such as your name or ID number—as defined under POPIA.
• “Special Personal Information” includes sensitive data like health-related info.
• “You” / “Your” refers to anyone using our Platforms. Also referred to as a user.
• “Stores” are restaurants, retailers, hotels, grocers, butchers or any other service providers listed on the Food Sack App or Platforms.
• “food” refers to food, beverages and other items from any of the restaurants, retail stores, grocers, butchers or any other stores listed on our Platforms.
• “registered user(s)” refers to anyone registered on our Platforms and has provided us with a unique username and password as well as other Personal Information in order to use our services to order food on our Platforms.

4. What Personal Information We Collect From Users

Food Sack processes Personal Information in a manner that is purpose-specific. In order for users to access and use our Platforms we collect and process some Personal Information. When you become a registered user, we have to collect and process your Personal Information to render our services to you.

When You Create an Account on our Platforms, we collect the following information:

• Name and Surname
• Contact details (email address, mobile phone number)
• Location
• Online Identifiers (username & password)

Should your Personal Information change or you wish to amend and/or correct this Personal Information you can do this by updating your registered user information in your account profile. By registering, you warrant that the information you have provided is accurate, current, true and correct and that does not impersonate or misrepresent any person or entity or falsely state or otherwise misrepresent your affiliation with anyone or anything.

When You Use the Food Sack App as a non-registered user or registered user, we may automatically collect the following information:

• Usage data (e.g. pages visited, time spent)
• Device info (e.g. operating system, browser)
• IP address
• Info from cookies and tracking tools
• Public data from third-party Platforms (e.g., Facebook)
• Geo-location: country and your precise or approximate location depending on whether you choose to share your location with us, or if you enter your location manually.

Responses from trusted payment providers: we do not collect any credit card information. However, when you place a reservation in the Food Sack App, we will collect responses from trusted payment service providers. Depending on the payment method, this may include a unique ID that is sent to the payment service provider.

5. Why We Collect Your Information

We collect and process your data to:

• Create and manage your account
• Facilitate payments
• Provide customer support
• Identify you and verify your identity
• Communicate with you about updates, orders, or promotions
• Improve our products and services
• Comply with legal requirements
• Improve our Platforms
• Targeted Advertising
• Enter into a contract with you
• Communicate with you regarding our Platforms and provide you with information, products or services, including billing, customer support, resolving complaints and quality control.
• Notify you about changes to our Platforms, services and products, terms and conditions, privacy policy or notices, and any other changes that impact our Platforms, services and products.
• Send you information about competitions, products or services that may interest you (unless you have opted out of receiving such information).
• Get feedback from you which we need to develop our products and services and grow our business.
• Undertake research and statistical purposes. The research and statistics we get from this process do not include your Personal Information and cannot be linked to you, nor can you be identified from these statistics.

6. What information we collect from vendors, business partners and other partners

6.1 Information needed to use the Platforms

When you register and create a Store account to make Sacks available for reservation on the Platforms or to use our digital solution to manage expiry dates within your Store, we collect some personal information about you as a contact person for your Store or as an individual Store owner.

This information includes:

• Profile information: name, email address, phone number, Store address, Store name, type of business, your role within the Store, Store logo, food product information and images.
• Tax and banking information: your Store’s Tax number and bank details.

If you are an individual Store owner, we process this personal information because it is necessary for performing the agreement with you for your Store’s use of the Platforms.

If you are an employee of a Store, our legal basis for processing this personal information is our legitimate interest in being able to provide the Platforms.

We may also process the above personal information because it is necessary for the purposes of the legitimate interests pursued by us in order to:

• Provide, improve and develop our Platforms.
• Communicate with you.
• Provide, tailor, measure, and improve our advertising and marketing.

Our legal basis for this processing is our legitimate interest, or, where required by applicable legislation, your consent. If we rely on your consent for our processing, we will specifically ask for this.

6.2 Information automatically collected when using the Platforms

When you use the Platforms, we will automatically collect some personal information from your use of the system.

This may include:

• Usage Information: such as the pages or content you view, click on or share. The clickstream patterns and length of time spent on each site as well as searches you conduct, reservations and purchases you process and actions you perform on the Platforms.
• Log Data and Device Information: such as details about how you’ve used the Platforms, your IP address, access dates and times, hardware and software information, device type, device event information, unique identifiers (e.g. IDFA and IDFV), crash data, and the pages you have viewed or engaged with before or after using the Platforms.
• Cookies and Similar Technologies.

We process this personal information based on the legitimate interests pursued by us in order to:

• Provide, improve or develop our Platforms.
• Provide, tailor, measure, and improve our advertising and marketing.

6.3 Information you choose to give us

You may choose to provide us with additional personal information about you. This information could include:

• Email correspondence: information that you provide as part of our email correspondence with you.
• Other information: information that you provide to us on your own initiative in connection with support queries or other interactions that you have with us.

Our legal basis for this processing is our legitimate interest, or, where required by applicable legislation, your consent. If we rely on your consent for our processing, we will specifically ask for this. Where we do not ask for your consent, we process this personal information because it is necessary for the purposes of the legitimate interests pursued by us in order to fulfil the reasons stipulated in section 5 of this Privacy Policy.

We will never ask for or require that you submit any of your special categories of personal data to us. However, if you choose to share health information or other special categories of personal information with us on your own initiative, we process this information based on our legitimate interests and in order for us to be able to establish, exercise or defend legal claims. In special circumstances, where required by applicable legislation, we may rely on your consent for our processing.

6.4 Information we collect from third parties

We collect personal information from other sources such as:

• Third party services: If you login to the Platforms using a third party service (e.g. Facebook), you direct the service to send us profile information such as your name and email as controlled by that service or as authorised by you via your privacy settings at that service.

We process this personal information based on your consent which you provide when directing the service to send us the above information.

We may also collect personal information in the form of your name, contact details and other relevant business related information, e.g. your role and the company you work for, from publicly accessible sources such as websites

if we need to contact you for a specific purpose as part of our daily operations, or, where allowed under applicable legislation, for marketing purposes, where your consent is not required by the applicable legislation. Our legal basis for this processing is our legitimate interest in being able to get in contact with you as part of our daily operations and to promote our services.

7. Keeping Your Personal Information Safe

At Food Sack, protecting your Personal Information is a top priority. We’ve put in place a range of safeguards—both technical and organisational—to help ensure your data remains secure, confidential, and protected from loss, damage, unauthorised access, or misuse.

To maintain these standards, we apply policies and processes that are reviewed and improved regularly. Our security approach includes:

• Robust network, and technical protections.
• Strict access control and real-time monitoring.
• Encrypted storage and secure deletion of Personal Information.
• Clear procedures for reporting and responding to data breaches.
• Binding agreements with all third-party partners (whether inside or outside South Africa) that require them to uphold our standards of data security and confidentiality.

However, if you choose to share your Personal Information with any third party not affiliated with Food Sack, please note that we are not responsible for how they handle your data. We do not govern or oversee the privacy practices of other entities. For your own protection, we recommend reading the privacy policies of any third-party services before sharing your information with them.

8. Age Restrictions

If you’re under 18, you must have your parent or guardian’s permission to use the Food Sack App or our Platforms. We may check that your parent or guardian has given you such permission, for example by asking you to provide us with your parent's or guardian’s contact details so we can contact them. We may also check that the contact details you have given us are correct and are the details of a person who is actually your parent or guardian. If we are not able to verify such permission or if a parent or guardian confirms that you do not have their permission, you may not use our Platforms. Certain products (like alcohol or tobacco) are legally restricted and will require age verification upon collection.

9. Cookies and Tracking Technologies

Cookies are small text files placed on the device that you use to access our Platforms. These files do not contain your Personal Information but allow us to associate you with a particular device. Many websites use cookies and we use cookies and similar tools to enhance your experience.

Cookies help us:

• Remember your preferences.
• Personalise your experience.
• Track how our Platforms are used.
• Send opt-in market communication to you if you are not a registered user.
• Show relevant advertising.

We will not use your Personal Information for any other purpose without your permission. By using the Food Sack App, you consent to our use of cookies.

10. Direct Marketing & Opt-Out Rights

We may send you marketing messages about promotions or new features. You have the right to opt out at any time by:

• Clicking the “unsubscribe” link in any message
• Updating your notification settings in the app
• Contacting us directly

When you choose to opt-out, this may take a few days to implement.

11. Sharing Your Information

We will never sell your personal data to third-parties or any other entity.

We may share your information with:

• Our employees, and/or third party service providers in order to enable them to assist us to interact with you via our Platforms for the marketing, ordering and collection of goods.
• Stores in order for them to assist in the facilitation and collection of the food you ordered and where applicable, to assist in the facilitation of any returns.
• Law enforcement, government officials, fraud detection agencies or other third parties when the disclosure of Personal Information is necessary or appropriate in connection with an investigation of fraud including voucher abuse or misuse, intellectual property infringements, or other activity that is illegal or may expose us to legal liability or financial loss, to report or support the investigation into suspected illegal activity.
• Third parties (such as a potential purchaser and its professional advisors) in the event of any reorganisation, merger, consolation, sale, joint venture, or other disposition of any or all of our assets.
• Our service providers (under contract with us) who help with parts of our business operations (fraud prevention, marketing, public relations, technology services etc). However, our contracts dictate that these service providers may only use your Personal Information in connection with the services they perform for us and not for their own benefit or any other purpose, and must treat such information as confidential information.

All parties we share data with are required to keep your information secure and use it only for the agreed purposes.

12. Data Retention

We retain your information for as long as:

• We need it to provide our Platforms, products or services to you.
• It is necessary to uphold the contract between you and us.
• It is required or allowed by law and is in line with our internal retention policies.
• You have agreed to us keeping your Personal Information subject to your request for us to stop processing your Personal Information.

We will retain your Personal Information for as long as is necessary to achieve the purpose for which this information was collected or subsequently processed. If your Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires but we will stop using it for the purpose with a shorter period once that period expires.

By accessing and using the Platforms, you consent to us retaining records of your Personal Information for no longer than may be necessary to achieve the purpose for which the information was initially collected or subsequently processed. You can request deletion of your data, and we’ll process your request as long as it doesn’t conflict with legal obligations and/or the purpose for which the information was collected.

13. Your Rights

If necessary, after providing adequate proof of identity (under guidance of the law), you have the right to:

• Access your personal data.
• Correct or update your information.
• Object to or restrict certain processing.
• Request a record of your Personal Information. Food Sack may charge a fee in order to provide you with this record.
• Withdraw consent where processing is based on consent
• Request deletion, correction or the destroying of your data
• Be informed if reasonably practicable, should we change your Personal Information and this has an impact on decisions about you.
• Receive notification of unauthorised access to your Personal Information.
• Submit a complaint to the Information Regulator.

We have a requirement to comply with your requests upon receipt unless we have credible reason why we cannot comply.

To exercise these rights, contact us via the app or at: help@foodsack.net

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make major changes, we’ll let you know via the app or email. Continued use of the Food Sack App means you accept the updated policy.

15. Sending and storing your personal information outside South Africa

We may need to transfer some of your Personal Information to service providers located outside of South Africa. This can include reasons such as, but not limited to, data storage or system backups to help us keep your information safe and our services running smoothly.

Whenever we transfer data internationally, we make sure it’s done in line with the legal requirements of South Africa’s Protection of Personal Information Act (POPIA) to ensure your data remains protected.

By using our Platforms, you agree to this transfer of your Personal Information outside of South Africa, as permitted under POPIA.

16. Contact Information

If you have any queries or questions about us processing your personal information, please contact us via the app or at help@foodsack.net