Privacy Policy

We collect the following categories of personal information:

From Google Sign-In:

• Full name
• Email address
• Profile photo

From profile completion:

• Phone number
• Delivery address
• GPS coordinates (for delivery routing)

From your use of the Platform:

• Order history and delivery records
• Payment status and transaction references (no card details are stored)

Technical information:

• Push notification subscriptions
• Session cookies (for authentication)

We use your personal information for the following purposes:

• Order fulfilment — processing and delivering your orders
• Delivery routing — using your address and coordinates to plan efficient delivery routes
• Payment processing — initiating and tracking payments via our payment provider
• Customer support — responding to your queries and resolving complaints
• Service area matching — determining whether your address falls within an active delivery area
• Transactional communications — sending order confirmations, delivery updates, and status changes

We share your personal information only with the following third parties, and only to the extent necessary to provide our service:

• PayGate — for payment processing. PayGate's privacy policy applies to their handling of your payment data.
• Google Maps / Geocoding API — for address verification and delivery route planning

We do not sell, rent, or share your personal information with any other third parties for marketing or any other purpose.

Your data is stored on Google Cloud SQL in the africa-south1 (Johannesburg) region within South Africa.

All connections to our database are encrypted in transit using TLS.

We do not store credit or debit card details. All card payment data is handled entirely by PayGate's secure payment infrastructure.

Access to customer data is restricted to authorised personnel only.

We will only send you marketing messages (email or push notifications) if you have given us your explicit opt-in consent.

You may withdraw your consent and opt out of marketing communications at any time.

Transactional notifications — such as order confirmations, delivery updates, and status changes — are part of the service and will continue regardless of your marketing preferences.

As a data subject under the Protection of Personal Information Act, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete personal information
• Deletion — request that we delete your personal information (subject to legal retention requirements)
• Objection — object to the processing of your personal information
• Complaint — lodge a complaint with the Information Regulator at inforegulator.org.za

To exercise any of these rights, contact us at support@plaasmelk.co.za.

You may request deletion of your account at any time by contacting support@plaasmelk.co.za.

Upon account deletion, your personal data (name, email, phone number, address, and GPS coordinates) will be deleted.

We are required by law to retain certain records for accounting and tax purposes. Anonymised or minimal order and payment records will be retained for 5 years as required by the South African Revenue Service (SARS).

Session cookies: We use session cookies for authentication. These are essential for the Platform to function and cannot be disabled.

No tracking cookies: We do not use analytics or advertising cookies.

No third-party cookies: We do not load any external tracking scripts or third-party cookie providers.

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform.

The latest version of this policy is always available at app.plaasmelk.co.za/privacy.