Privacy and Access To Information Policy

INTRODUCTION

Gastronomic Foods (Pty) Ltd t/a De Chen Nougat is a company committed to protecting your privacy and ensuring that your personal information is processed in accordance with the Protection of Personal Information Act No. 14 of 2013 (“POPIA”), and ensuring that your right of access to information is upheld in accordance with the Promotion of Access to Information Act No. 2 of 2000 (“PAIA”).

This policy applies to all personal information collected through our website and the services relating to the sale and delivery of food items to you.

 

COLLECTION OF PERSONAL INFORMATION

We collect the following types of personal information when you use our ecommerce platform:-

Your full name and date of birth;

Identity number or passport number;

Your contact details, including your e-mail address and telephone number;

Your address and delivery address;

Your payment information which is processed via secure third party providers;

Your order history and preferences;

Your IP address and usage data by way of the use of cookies.

 

PURPOSE OF COLLECTION

We collect and process your personal information for the following purposes:-

To process and fulfil your order;

To manage your interaction with us;

To improve your website and user experience;

To comply with our legal obligations;

Direct marketing, only with your consent.

 

LEGAL BASIS FOR PROCESSNG

We process your personal information on the basis that:-

It is necessary to fulfil our contract with you for the purchase and delivery of the goods purchased by you;

It is required by law;

You have given your consent;

It is in our legitimate interest to improve and operate our business.

 

DISCLOSURE OF PERSONAL INFORMATION

We do not sell your personal information and would only disclose your personal information to third party service providers who assist us in fulfilling the contract with you, being a delivery company and/or payment processors and/or software providers, and also if required by regulatory or legal authorities to comply with the law.

We confirm that all third party service providers are bound by confidentiality and data protection agreements.

 

DATA SECURITYWe take reasonable technical and organisational measures to protect your personal information, including:-

SSL encryption for all website transactions;

Secure payment gateways;

Access controls and authentication protocols;

Regular vulnerability assessments.

 

YOUR RIGHTS IN TERMS OF POPIA

You have the following rights in terms of POPIA:-

Request access to the information we hold in respect of you;

To request correction of your personal information;

To request deletion of personal information, subject to legal retention;

To object to processing for direct marketing purposes;

To withdraw your consent at any time where processing of your information is based on consent.

You may exercise the rights set out above by contacting us. Our contact information is set out in section 10 hereof.

 

ACCESS TO INFORMATION (PAIA)In accordance with PAIA, we have compiled a PAIA Manual, which contains:-A description of the company;Contact details of the Information Officer;Categories of records available without a request;Procedures to request information;Applicable fees.

 

To request access to information in terms of PAIA, please refer to our PAIA Manual, available on request.

 

RETENTION OF INFORMATION

We retain your personal information only for as long as necessary to fulfil the purposes it was collected for, including legal, regulatory, tax or accounting requirements.

 

CONTACT DETAILS

Information Officer: Wesley Chen.
E-mail: info@de-chen.com
Telephone: 061 636 8169
Address: www.de-chen.com

 

You may lodge complaints regarding the processing of your information to the Information Regulator at the following details:-

E-mail:    complaints.ir@justice.gov.za;

Website: https://www.justice.gov.za/inforeg/.

 

NOTIFICATIONS REGARDING PERSONAL INFORMATION BREACH

Where we have grounds to believe that there has been the unlawful or accidental destruction, alteration, damage or loss, unauthorised disclosure of, or access to your personal information, transmitted, stored or otherwise processed by us, we will:-

notify any appropriate supervisory authority;

notify you of the breach and the extent thereof; and

document facts relating to the breach, its effects, and the remedial action taken.

 

We will make reasonable efforts to identify the cause of the breach and take the steps we deem necessary and reasonable to remedy the cause of the breach, to the extent that this is within our control.

 

CHANGES TO THIS POLICY

We may update this policy from time to time. Kindly visit this page regularly to stay informed of any changes.