Privacy Policy

Effective as of 11 July 2025

Our Commitment to Your Privacy

At Serengeti Roasters, we are committed to trading fairly and ethically – including how we collect, use and safeguard your personal information. This Privacy Policy outlines how we process your personal information in accordance with the Protection of Personal Information Act (POPIA) and other applicable South African laws.

Where we refer to “process”, it includes collecting, using, storing, making available, updating, destroying or disclosing your personal information.

We process personal information only where it is required to deliver our services, provide a product, perform under a contract or fulfil a legal obligation. By using our services, you acknowledge and agree that your personal information may be processed in accordance with this policy. This policy may be updated periodically based on legal changes or business needs.

Scope
This policy applies to all Serengeti Roasters employees, contractors, service providers and affiliated third parties. It covers all personal information processed by us, as well as any information systems, platforms, or assets owned, leased or operated by Serengeti Roasters.

 
What is Personal Information?
Personal information refers to any information that identifies you or relates specifically to you. This includes but is not limited to:
- Full name, initials, marital status, age, gender, race, nationality
- Identity or passport numbers, employment history
- Contact details (email, phone, physical address)
- Financial information, biometric data, health or medical history
- Opinions, preferences or personal views

When and Why We Process Your Information
We process personal information under the following circumstances:
- With your explicit consent
- Where required by law or public interest
- To perform under a contract with you
- To protect our legitimate business interests
- When processing is necessary for statistical or research purposes

Special Personal Information
Special personal information includes:
- Race, ethnic origin, biometric data
- Health, union membership, criminal behaviour

We will only process this category of data if:
- You have consented
- It is required by law
- It is in the public interest
- It has been deliberately made public by you

How We Collect Information
We collect personal information from:
- You directly (via forms, orders or contact)
- Public records or databases
- Third-party partners integrated into our platforms
- Your interaction with our website, services and communication channels

Why We Use Your Personal Information
We process your information to:
- Provide products and services
- Manage orders and customer accounts
- Market to you (if consented)
- Comply with legal and regulatory obligations
- Perform analytics and improve our services
- Facilitate payment and delivery
- Conduct customer surveys and service feedback

Sharing Your Personal Information
We may share your data with:
- Our employees and service providers (e.g., couriers, IT vendors)
- Payment processors and financial institutions
- Regulatory and legal bodies
- Joint venture or loyalty partners
- Any third parties with your consent

Cross-Border Transfers
We may transfer your personal data to other countries under conditions that comply with South African privacy legislation and ensure equivalent protection standards.

Your Rights
You have the right to:
- Request access to your personal information
- Correct or delete inaccurate or outdated information
- Object to processing in certain circumstances
- Withdraw consent
- Lodge a complaint with the Information Regulator

Security of Personal Information
We implement appropriate security safeguards including:
- Encrypted servers and secure data storage
- Access controls and physical security
- Monitoring and updating of security systems

Data Retention
We retain personal data:
- As required by law or contracts
- For legitimate business or research needs
- Until consent is withdrawn or data is no longer needed

Children’s Privacy
Our services are not intended for anyone under 13. We do not knowingly collect personal data from children without verified parental consent.

Use of Cookies
We use cookies to:
- Enhance your browsing experience
- Track website usage
- Support marketing and analytics

By using our site, you consent to our cookie use.

Payments and Data Security
We process payments via trusted third-party providers, including Peach Payments. All payment information is encrypted and securely processed in accordance with PCI-DSS (Payment Card Industry Data Security Standard) compliance. Peach Payments uses industry-standard encryption and secure server infrastructure to ensure the safety of your transaction data.

Contact Us
To access, update, or remove your personal data – or for questions – contact us at:
info@serengetiroasters.co.za