Privacy Policy

Who we are

Magies Vol (Pty) Ltd, registration number 2026/619047/07, is the responsible party for the personal information described in this policy.

• Trading name: Magies Vol
• Physical address: 17 Lakewood Lane, Cedar Lakes Estate, Fourways, Johannesburg
• Phone: 066 408 8267
• General email: hello@magiesvol.co.za
• Information Officer: Stephenie Venter, admin@magiesvol.co.za

If you want to exercise any of the rights in this policy, contact our Information Officer using the details above.

What information we collect

Information you give us

• Your name, email address, phone number and delivery or collection address
• Order details, including what you ordered, for what date and for how many people
• The occasion or context you tell us about when we quote for catering
• Allergies, intolerances and dietary requirements you tell us about
• Payment confirmation details, such as a proof of payment or reference number
• Anything else you choose to put in a message, enquiry form or WhatsApp to us

Information we collect automatically

• Basic website analytics such as pages visited, approximate location and device type
• Cookie data, described in the cookies section below

Information we receive from others

• Order and delivery details passed to us by Uber Eats or any other ordering platform you use
• Payment confirmation from our payment provider. We never receive or store your full card number

Health and dietary information

By telling us about an allergy, intolerance or dietary requirement, you consent to us processing that information for the purpose of preparing and labelling your order, and to sharing it with the kitchen staff who need it. We do not use it for marketing and we do not share it with anyone outside that purpose.

You can withdraw that consent at any time, but if you do we may not be able to prepare your order safely, and we may have to decline it.

Children's information

We supply lunch boxes for school children. Where an order involves a child under 18, we may hold the child's first name, their school or classroom, and any allergy or dietary information relevant to their food.

We only process a child's personal information with the consent of a parent, guardian or other competent person, as required by section 35 of POPIA. When you place an order for a child, you confirm that you are that person or that you have their permission.

We keep the information to the minimum needed to feed that child safely, and we do not use children's information for marketing under any circumstances.

Why we process your information

We process your personal information for the following purposes, each with a lawful basis under POPIA:

Who we share it with

We do not sell your personal information. We share it only with the parties below, and only as far as they need it to do their job:

• Stitch Payments, our payment provider, to process card and instant EFT payments
• Delivery partners and drivers, who receive your name, address and contact number
• Uber Eats, where you order through their platform, subject to their own privacy policy
• MailerLite, our email and newsletter provider, where you have subscribed
• Our accountants and auditors, for financial record keeping
• Our website host and IT service providers
• A regulator, court or law enforcement body, where we are legally required to do so

Where we use an operator to process information on our behalf, we require them by written contract to keep it confidential and to apply appropriate security safeguards, as section 21 of POPIA requires.

Information sent outside South Africa

Payments are processed by Stitch Payments, a South African provider. Our email and newsletter platform, MailerLite, is based in the European Union, so subscriber information is processed there under the General Data Protection Regulation.

Some website hosting and analytics services also store information outside South Africa. We only use providers that are subject to laws or binding agreements giving your information a level of protection substantially similar to POPIA, as section 72 of POPIA requires.

How long we keep it

• Order and invoice records: five years from the end of the relevant tax year, as required by tax legislation
• Allergy and dietary information: for as long as you remain an active customer, then deleted with your order history
• Marketing subscriptions: until you unsubscribe, then a suppression record so that we do not contact you again
• Enquiry messages that do not become orders: 12 months from the last contact
• Website analytics: 24 months

We delete or de-identify information once we no longer have a lawful reason to keep it.

How we protect it

• Access to customer information is limited to staff who need it to do their work
• Our systems are password protected, and we use two factor authentication where it is available
• Payment card details are handled by our payment provider and never stored on our systems
• Staff who handle customer information are bound by confidentiality obligations

If a security compromise puts your personal information at risk, we will notify you and the Information Regulator as soon as reasonably possible, as section 22 of POPIA requires.

Direct marketing

We only send marketing messages to people who have asked for them, or who are existing customers being told about similar products, as section 69 of POPIA allows.

Every marketing email has an unsubscribe link. You can also reply to any message, or contact us on the details above, and we will remove you. We will not keep contacting you after you have objected.

Your rights

Under POPIA you have the right to:

• Ask what personal information we hold about you and be given a copy of it
• Ask us to correct or update information that is wrong or incomplete
• Ask us to delete information we no longer have a lawful reason to keep
• Object to us processing your information in certain circumstances
• Withdraw consent you have given, at any time
• Complain to the Information Regulator

To exercise any of these rights, contact our Information Officer. Requests for access must be made on the form prescribed under the Promotion of Access to Information Act, and we will respond within the time the law allows. We may need to verify your identity before we act on a request.

Cookies and our website

Our website uses cookies to keep the site working, to remember what is in your cart and to understand how people use the site. You can block or delete cookies in your browser settings, but parts of the site may stop working properly if you do.

Our site may also contain links to other websites, including Uber Eats and our social media pages. We are not responsible for how those sites handle your information.

Complaints

If you are unhappy with how we have handled your personal information, please tell us first so that we can try to put it right. If you are still not satisfied, you may complain to the Information Regulator of South Africa:

• Website: inforegulator.org.za
• Complaints email: complaints.IR@justice.gov.za
• General enquiries: enquiries.IR@justice.gov.za

Changes to this policy

We may update this policy as our business changes or as the law requires. The current version and its date always appear at the top of this page. If we make a significant change, we will tell customers by email or by a notice on the website.