1. Responsible party
Good Food Buddy is committed to treating your personal information responsibly under the Protection of Personal Information Act 4 of 2013 (POPIA). The responsible party is GOODFOOD BUDDY (PTY) LTD (registration number 2025/621306/07), trading as Good Food Buddy. Our registered office is 1183 Breyer Avenue, Waverley, Pretoria, Gauteng, 0186, South Africa. Our website is www.goodfoodbuddy.co.za; customer contact: orders@goodfoodbuddy.co.za and 083 427 9710. Privacy requests go to our Information Officer at orders@goodfoodbuddy.co.za.
This notice applies to information we process through our website, optional account area, orders, WhatsApp, email, customer service and delivery operations. It does not control third-party sites reached through external links.
2. What information we collect
Depending on your interaction with us, we may collect your name, telephone number, email address, delivery and billing address, order and meal choices, delivery instructions, order and payment reference, customer-service messages, reviews, account login details in protected form, and technical information such as device identifiers, IP address and basic website-use data.
If you tell us about an allergy, intolerance or dietary need, we may process that information solely so far as necessary to handle your order and food safety. Such information may reveal health details and is treated with appropriate extra care. We do not need unnecessary medical history to prepare an order. Please do not share another person's sensitive information without authority.
We receive payment status and transaction identifiers from our payment provider, PayFast; payment-card details are entered into the provider's secure payment environment rather than stored in full on our website.
3. Why we process information
We use personal information to create or secure accounts, take and fulfil orders, confirm payment, calculate delivery eligibility and fees, prepare approved substitutions, arrange collection and delivery, issue records, answer questions, manage refunds, protect against fraud, keep required financial or operational records and comply with lawful duties. If an active Buddy Bucks account is offered, we may also administer its earned and redeemed points.
Our lawful grounds depend on the processing activity and may include performance of a contract, compliance with legal obligations, legitimate interests permitted by POPIA, or consent where required. Purchasing from us or registering an account does not automatically mean you agree to unrelated marketing.
4. Marketing choices
We send essential messages about orders and deliveries whether or not you choose marketing. We send promotional email, SMS or WhatsApp marketing only where permitted by POPIA, including applicable consent rules and the limited existing-customer exception. Marketing messages will identify Good Food Buddy and provide a reasonable way to opt out without charge beyond ordinary transmission costs. You can withdraw consent or object to direct marketing through orders@goodfoodbuddy.co.za.
5. Sharing with service providers
We share only the information reasonably necessary with authorised staff and service providers performing functions such as secure payments (PayFast), website hosting, account systems, IT support, order records, customer communication and delivery. Delivery staff need contact and address details to complete a route. We may disclose information where lawfully required, to investigate fraud or safety incidents, or in connection with a lawful business reorganisation, subject to applicable safeguards.
We do not sell customers' personal information. We expect service providers handling data on our behalf to protect it appropriately and follow relevant contractual and legal requirements.
6. International service providers
Some cloud service providers may store or access information outside South Africa. Where an international transfer occurs, we will use an appropriate basis and safeguards under section 72 of POPIA (such as adequate recipient protections, binding arrangements, or another permitted ground). We do not rely on website use alone as blanket consent for unrestricted transfers.
7. Cookies and website analytics
We may use essential cookies for the shopping cart, secure login, checkout and site preferences, and optional analytics or advertising technologies only if enabled on the website. Our separate Cookie Policy explains the categories and choices. A cookie consent tool should accurately reflect the trackers actually installed; non-essential technologies should not be presented as "essential" merely for convenience.
8. Keeping information safe and for how long
We use reasonable administrative, access-control and technical safeguards proportionate to the nature of the information. No internet service can guarantee perfect security. We retain information for as long as needed for the purpose collected, applicable recordkeeping laws and the handling of genuine disputes, and then securely delete or de-identify it where appropriate. We do not keep personal information indefinitely simply because an account exists.
If there are reasonable grounds to believe a reportable security compromise has occurred, we will investigate and notify the Information Regulator and affected people as required by POPIA.
9. Your privacy rights
Subject to the law and reasonable identity verification, you may request access to your personal information, correction of inaccurate or incomplete information, deletion when legally appropriate, or object to certain processing. You may withdraw consent where consent is the basis for processing. Some information must be retained despite a deletion request when law requires it. To make a request, contact orders@goodfoodbuddy.co.za and mark it Privacy / POPIA Request.
You may also complain to the Information Regulator (South Africa) at https://inforegulator.org.za or via its official complaints process.
10. Children and updates
Our shop is intended for adults or people acting with appropriate parent/guardian authority. We do not knowingly use children's personal information for targeted marketing. We may update this policy when our practices or the law change; the current date and wording will be published here. If a new processing activity legally requires consent, we will request it rather than assuming agreement.
Privacy contact: orders@goodfoodbuddy.co.za, 083 427 9710.