Privacy Policy

1. Introduction

Welcome to Lekker Eatz ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

Lekker Eatz is operated by The ToolBox Co. ("Developer") and provides a cross-platform food ordering platform for South African Fast Food sellers and customers.

2. Information We Collect

2.1 Personal Information

• Name and Email Address: Collected from your Google account during authentication.
• Phone Number: Optional, used for order communication.
• Profile Images: For seller accounts (optional).
• Location Data: Device location to show nearby sellers, enable delivery, and for seller registration.

2.2 Order Information

• Order Details: Items ordered, quantities, prices, and preferences.
• Payment Information: Payment method (cash or card), transaction details (processed securely by Paystack).
• Delivery Information: Delivery addresses and preferences.
• Order History: Past orders and interactions with sellers.

2.3 Device and Usage Information

• Device Information: Device type, operating system, and unique device identifiers.
• App Usage: Features used, performance data, and analytics.
• Push Notifications: FCM tokens for order updates and notifications.

2.4 Location Information

• GPS Location: To show nearby sellers, calculate delivery distances, and for seller registration.
• Location Permissions: Requested to provide location-based services.

3. How We Use Your Information

3.1 Service Provision

• Process and fulfil your orders.
• Connect you with nearby Sellers.
• Facilitate payments through secure payment gateways.
• Provide order tracking and status updates.
• Send push notifications for order updates.

3.2 Communication

• Send order confirmations and updates.
• Provide customer support.
• Notify you about app updates and new features.
• Respond to your inquiries and feedback.

3.3 App Improvement

• Analyse app usage to improve user experience.
• Develop new features and services.
• Ensure app security and prevent fraud.
• Optimize app performance.

4. Information Sharing and Disclosure

4.1 With Sellers

• Share your order details with the seller you choose.
• Provide your name and phone number for order fulfilment.
• Share the delivery address for delivery orders.

4.2 With Service Providers

• Payment Processors: Paystack for secure payment processing.
• Cloud Services: Firebase for data storage, authentication, and app functionality.
• Analytics: Google Analytics for app usage insights.
• Push Notifications: Firebase Cloud Messaging for notifications.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

5. Data Security and Retention

5.1 Security Measures

• Encryption: All data is encrypted in transit and at rest.
• Secure Authentication: Google OAuth for secure login.
• Payment Security: PCI-compliant payment processing through Paystack.
• Regular Updates: Security patches and updates.

5.2 Data Retention

• Active Accounts: Data retained while your account is active.
• Inactive Accounts: Data may be deleted after 2 years of inactivity.
• Legal Requirements: Some data may be retained longer for legal compliance.

Outstanding Financial Obligations: If you request deletion of your account and have outstanding invoices or unpaid platform fees, we may retain your personal information as necessary to collect the debt or comply with legal and accounting requirements. Your account will not be deleted until all outstanding balances are settled. Once your obligations are fulfilled, your data will be deleted or anonymized as described in this policy.

Account Deletion Requests: You may request deletion of your account and personal data from within the app. If you have no outstanding financial obligations, your data will be deleted as described above. If you have unpaid invoices or fees, your account deletion request will be paused until your balance is settled.

6. Your Rights and Choices

6.1 Access and Control

• View Your Data: Access your personal information through the app.
• Update Information: Modify your profile and preferences.
• Delete Account: Request account deletion (some data may be retained for legal purposes or anonymised for business/regulatory reasons).

6.2 Communication Preferences

• Push Notifications: Control notification settings in your device settings.
• Email Communications: Opt out of marketing emails.
• Location Services: Disable location access in device settings.

6.3 Data Portability

You may request a copy of your personal data in a portable format.

7. Children's Privacy

Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Data Transfers

Your information may be processed and stored in countries other than South Africa. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Third-Party Services

9.1 Google Services

• Google Sign-In: For authentication.
• Google Maps / MapTiler: For location services and seller mapping.
• Google Analytics: For app usage analytics.

9.2 Payment Services

• Paystack: For secure payment processing.

9.3 Firebase Services

• Firebase Authentication: User authentication.
• Cloud Firestore: Data storage.
• Firebase Storage: File storage (e.g., profile images).
• Firebase Cloud Messaging: Push notifications.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app.
• Sending you a notification.
• Updating the "Last Updated" date.

11. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

12. Legal Basis for Processing (GDPR Compliance)

For users in the European Union, we process your data based on:

• Consent: For marketing communications and optional features.
• Contract Performance: To provide our services and fulfil orders.
• Legitimate Interest: For app improvement and security.
• Legal Obligation: To comply with applicable laws.

13. South African Law Compliance

This Privacy Policy complies with:

• Protection of Personal Information Act (POPIA)
• Consumer Protection Act (CPA)
• Electronic Communications and Transactions Act (ECTA)

14. Data Protection Officer

For data protection inquiries, contact our Data Protection Officer at: za.thetoolboxcompany@gmail.com