Privacy Policy

1. Who we are

Nouriti Café ("we", "us", "our") is a meal-plan and food-delivery service based in Durban, KwaZulu-Natal, South Africa. We operate the website and mobile application available at mynouriti.co.za and related subdomains.

We are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and all applicable South African data-protection law.

2. What information we collect

We collect only the information needed to operate the service:

• Account data: your name, surname, email address, and phone number when you register.
• Delivery data: your delivery address and suburb so we can route your order correctly.
• Order data: meal selections, dietary preferences, and payment confirmation details.
• Payment data: we use PayFast as our payment processor. We do not store your card number or banking details — these are handled entirely by PayFast.
• Usage data: standard web-server logs (IP address, browser type, pages visited) for security and performance monitoring.
• Location data (driver app only): GPS coordinates are recorded during active deliveries solely for route optimisation and customer ETA updates.

3. How we use your information

Your information is used exclusively to:

• Fulfil and deliver your meal orders.
• Send you order confirmations, receipts, and subscription updates by email.
• Contact you if there is a problem with your order or delivery.
• Improve our menu, operations, and service quality.
• Comply with our legal obligations.

We do not use your data for advertising profiling or sell it to any third party.

4. Who we share your information with

We do not sell, rent, or trade your personal information to any third party.

We share limited data only with the following service providers, strictly to operate the platform:

• PayFast — to process payments securely.
• Email service provider — to send transactional emails (order confirmations, receipts).
• Hosting and infrastructure providers — servers that store the application data, subject to strict confidentiality agreements.

All service providers are contractually prohibited from using your data for any purpose other than delivering their service to us.

5. How we protect your data

• All data is transmitted over HTTPS (TLS encryption).
• Passwords are hashed and never stored in plain text.
• Access to production data is restricted to authorised staff only.
• Payment processing is delegated to PCI-DSS compliant providers (PayFast).

6. How long we keep your data

We retain your account and order data for as long as your account is active or as required by South African tax and business record-keeping law (typically 5 years after the last transaction). You may request deletion of your account at any time — see section 8.

7. Cookies

We use a single session cookie to keep you logged in. We do not use advertising cookies, tracking pixels, or analytics that identify you personally. If you disable cookies, some functionality (such as staying logged in) will not work.

8. Your rights under POPIA

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information at any time via your profile page.
• Delete your account and associated personal data (subject to legal retention obligations).
• Object to processing of your data in certain circumstances.
• Complain to the Information Regulator of South Africa if you believe your rights have been violated.

To exercise any of these rights, email us at privacy@mynouriti.co.za. We will respond within 30 days.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and notify active subscribers by email. Continued use of our service after the update constitutes acceptance of the revised policy.

10. Contact us

Nouriti Café · 47 Florida Road, Windermere, Durban, 4001
Email: privacy@mynouriti.co.za
Phone: 031 000 1234