Privacy Policy
This policy explains how OrderKit ("OrderKit", "we", "us") collects and uses personal information, in line with South Africa's Protection of Personal Information Act (POPIA). It covers the OrderKit marketing website and the OrderKit platform we provide to restaurants.
Who we are
OrderKit is operated by [Registered company name] (registration number [CK/registration number]), [physical address]. For any privacy question, or to reach our Information Officer, email info@orderkit.co.za.
Two roles
When a restaurant signs up and uses OrderKit, that restaurant is the responsible party for its diners' personal information. OrderKit acts as an operator that processes diner information on the restaurant's instructions. For our own marketing website and for restaurant account holders, OrderKit is the responsible party.
What we collect
- Restaurant and prospect details: name, restaurant name, phone number, email, and anything you share when you book a demo or sign up.
- Diner order information (on the restaurant's behalf): name, contact number, delivery address, order and booking details, and chat messages sent to the restaurant's assistant.
- Payment information: card and EFT payments are handled by our payment partners (such as Yoco, PayFast, Paystack and Ozow). We do not store full card numbers.
- Technical information: basic device and usage data needed to run and secure the service.
How we use it
- To provide the service: take and manage orders, bookings, payments and deliveries, and answer customer questions.
- To contact prospects who ask for a demo, and to support restaurant accounts.
- To send marketing messages only to people who have opted in, and to honour opt-outs.
- To keep the service secure, meet legal obligations, and improve how it works.
Marketing and consent
Marketing over WhatsApp and email goes only to people who have given consent. Every diner can opt out at any time (for example by replying STOP), and we record opt-in, opt-out and no-answer states so we do not message people who have not agreed.
Who we share it with
We share personal information only as needed to run the service: payment providers, delivery and courier partners, WhatsApp/Meta for messaging, email and hosting providers, and professional advisors. We do not sell personal information. Where required, these parties are bound to process the information only on our instructions.
Storage and retention
Information is stored on reputable cloud infrastructure and kept only as long as needed for the purposes above or as the law requires. A restaurant can ask us to remove its data when it stops using OrderKit.
Security
We use reasonable technical and organisational measures to protect personal information, including access controls and encryption in transit. No system is perfectly secure, but we work to keep your information safe.
Your rights
Under POPIA you may ask to access, correct, or delete your personal information, object to processing, or withdraw consent. To exercise a right, email info@orderkit.co.za. You may also lodge a complaint with the Information Regulator (South Africa).
Cookies
The marketing website uses only the cookies needed to load fonts and run the site. The ordering storefront may use essential cookies to keep your cart and session working.
Changes
We may update this policy from time to time. The date at the top shows when it last changed.
Contact
Questions or requests: info@orderkit.co.za.