Privacy & POPIA Policy

1. Introduction

Cravely Group (PTY) LTD ("Cravely", "we", "us") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains how we collect, use, and protect your data.

2. Information We Collect

• Account information: Name, email address, phone number
• Order information: Delivery address, order history, payment records
• Device information: IP address, browser type, device identifiers
• Location data: Delivery address and approximate location (with your consent)

3. How We Use Your Information

• To process and deliver your orders
• To communicate order status and updates
• To improve our platform and services
• To comply with legal obligations
• To send promotional communications (only with your consent)

4. Sharing of Information

We share your information only where necessary:

• Restaurants: Your name, order details, and delivery address to fulfil your order
• Drivers: Your delivery address and contact number for delivery purposes
• Payment processors: Billing information for secure payment processing

We do not sell your personal information to third parties.

5. Your Rights Under POPIA

• Right to access your personal information
• Right to correct inaccurate information
• Right to delete your account and associated data
• Right to object to processing of your information

To exercise any of these rights, contact us at info@cravely.co.za.

6. Data Security

We implement industry-standard security measures to protect your personal information, including encrypted data storage (Supabase), secure HTTPS connections, and access controls.

7. Cookies

Cravely uses essential cookies to maintain your session and improve your experience. We also use Google Analytics to understand how visitors use our site. You can disable cookies in your browser settings.

8. Information Officer

Our designated Information Officer for POPIA purposes can be contacted at info@cravely.co.za.