Privacy Notice

Grub Club South Africa ("Grub Club", "we", "us" or "our") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African privacy legislation. This Privacy Notice explains how we collect, use, retain and protect personal information when you visit our website or use our online contact/enquiry facility.

1. WHO WE ARE

For purposes of POPIA, Grub Club SA is the responsible party in respect of the personal information that we collect and process through our website and related activities.

Our Information Officer is:

Information Officer: Jasmin Vandersteen
Email: grubclubsouthafrica@gmail.com

2. WHAT IS PERSONAL INFORMATION?

"Personal information" is information relating to an identifiable, living natural person and, where applicable, an identifiable existing juristic person. Depending on how you interact with us, this may include your:

name and surname;
email address;
telephone or mobile number;
organisation or business name, if you provide one;
information contained in your enquiry or message;
any other information that you voluntarily provide to us; and
technical information associated with your use of our website, where applicable, such as IP address, browser or device information.

We do not require you to provide information that is not reasonably necessary for us to respond to your enquiry.

3. HOW WE COLLECT YOUR PERSONAL INFORMATION

We may collect personal information when you:

complete and submit our website contact or enquiry form;
email us;
telephone or otherwise contact us;
communicate with us through channels linked to our website; or
otherwise voluntarily provide information to us.

Where you submit an enquiry through our website, we collect the information you choose to provide for the purpose of responding to that enquiry.

4. WHY DO WE PROCESS YOUR PERSONAL INFORMATION?

We process your personal information primarily to:

respond to your enquiry or request for information;
contact you using the contact details that you provide;
provide information about Grub Club SA and its activities where this is relevant to your enquiry;
administer and manage communications with you;
maintain appropriate records of enquiries and communications;
protect the security and integrity of our website and information systems;
comply with legal and regulatory obligations; and
establish, exercise or defend legal rights where necessary.

We will only process your personal information where there is a lawful basis for doing so under POPIA. Where you provide your information specifically so that we can respond to an enquiry, we will use that information for that purpose and for related purposes reasonably necessary to manage the enquiry.

5. DIRECT MARKETING

Submitting an enquiry or requesting that we contact you does not, by itself, constitute unrestricted consent to receive future direct marketing communications.

Where we wish to send you direct marketing by electronic communication, such as email, SMS or similar electronic communications, we will comply with the applicable requirements of POPIA, including section 69.

Where consent is required, we will obtain the appropriate consent before sending such marketing communications.

6. SPECIAL PERSONAL INFORMATION

Our website contact form is not intended to collect special personal information such as information concerning race, religion, health, political beliefs, trade union membership, sex life or biometric information.

Please do not provide such information through our website unless it is genuinely necessary for your enquiry. If special personal information is provided to us, we will only process it where permitted by POPIA and other applicable law.

7. HOW WE USE THE INFORMATION YOU PROVIDE

The personal information submitted through our contact or enquiry form

may be used to:

Information & Purpose

Name and surname: to identify and address you

Email address: to respond to your enquiry

Telephone/mobile number: to contact you regarding your enquiry

where appropriate

Organisation/business name: to understand the context of your enquiry,

where applicable

Enquiry/message: to understand and respond to your request

Website/technical information, where collected: website security,

administration and technical functionality

We will not collect excessive personal information for an enquiry.

8. DISCLOSURE OF PERSONAL INFORMATION

We will not sell, rent or otherwise trade your personal information. We may disclose personal information where reasonably necessary to:

service providers who assist us in operating our website, email systems, hosting or other business systems;
professional advisers where reasonably necessary;
law enforcement, regulatory or governmental authorities where disclosure is required or permitted by law;
courts or other authorised bodies where legally required; or
another party where you have authorised or requested us to make the disclosure.

Where we use third-party service providers to process personal information on our behalf, we will take reasonable steps to ensure that appropriate confidentiality and security obligations apply.

9. INFORMATION SECURITY

We take reasonable and appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access, disclosure, alteration or destruction. Access to personal information will be restricted to persons who reasonably require access for legitimate business purposes and who are subject to appropriate confidentiality obligations.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure. If we become aware of a security compromise involving personal information, we will deal with the compromise in accordance with POPIA and applicable legal requirements.

10. RETENTION OF PERSONAL INFORMATION

We will not retain your personal information for longer than is necessary for the purpose for which it was collected, unless:

the law requires or permits us to retain it for a longer period;
we reasonably require it for legitimate business purposes;
it is necessary for the establishment, exercise or defence of legal rights; or
another lawful basis for retention applies.

Once personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it, where appropriate.

11. YOUR RIGHTS

Subject to applicable law and any lawful limitations, you have rights in relation to your personal information, including the right to:

request confirmation of whether we hold personal information about you;
request access to personal information that we hold about you;
request correction or updating of inaccurate, incomplete, misleading or outdated information;
request deletion of personal information where we are no longer authorised to retain it;
object to certain forms of processing;
object to the processing of your personal information for direct marketing;
withdraw consent where processing is based on your consent; and
lodge a complaint with the Information Regulator where you believe that your personal information has been processed unlawfully.

To exercise your rights or make a privacy-related request, please contact our information officer.

Information Officer: Jasmin Vandersteen
Email: grubclubsouthafrica@gmail.com

We may need to verify your identity before processing certain requests.

12. CHILDREN'S PERSONAL INFORMATION

Our website is not intended to knowingly collect personal information from children without the consent or involvement of a competent person where required by POPIA.

If you believe that a child has provided personal information to us without the appropriate consent, please contact our Information Officer so that we can

assess the matter and take appropriate action.

13. COOKIES AND WEBSITE TECHNOLOGIES

Our website may use cookies or similar technologies to enable website functionality, improve the user experience, understand website usage and, where applicable, support website security.

Where cookies or similar technologies involve the processing of personal information, we will process such information in accordance with POPIA and applicable law. Where required, additional information about our use of cookies will be provided through a separate Cookie Notice.

14. TRANSBORDER TRANSFERS

We will not knowingly transfer your personal information outside South Africa unless such transfer is permitted in terms of POPIA and applicable law. Where a lawful cross-border transfer is necessary, we will take appropriate steps to ensure that the requirements of POPIA are satisfied.

15. CHANGES TO THIS PRIVACY NOTICE

We may amend this Privacy Notice from time to time to reflect changes in our practices, technology, services or applicable legislation. The latest version will be made available on our website. Where appropriate, we will notify affected persons of material changes.

16. COMPLAINTS

If you have a concern about how we process your personal information, we encourage you to contact our Information Officer first so that we can investigate and attempt to resolve the matter. You also have the right to lodge a complaint with the Information Regulator of South Africa.

Information Regulator
Email: enquiries@inforegulator.org.za
Telephone: 010 023 5200
Physical address:
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg

17. CONTACT US

For questions about this Privacy Notice, requests concerning your personal information, or privacy-related concerns, please contact:

Information Officer: Jasmin Vandersteen
Email: grubclubsouthafrica@gmail.com

By submitting personal information through the Grub Club SA website, you acknowledge that you have read this Privacy Notice and understand how your personal information may be processed as described above