Privacy policy

Rasta's Peri Q Chesanyama respects your privacy. We only process information needed to provide food ordering, fulfilment, payment reconciliation, customer support, and app security.

1. Who we are

The Rasta's Peri Q Chesanyama Android app is operated by Rasta's Peri Q Chesanyama at 28 King Edward Rd, Bloemfontein, Free State 9301, South Africa.

2. Scope of this policy

This policy applies to the Rasta's Peri Q Android mobile app and the services used to place and manage orders from our single store. The app lets customers view a menu, create an account or use guest checkout, choose pickup or delivery, submit order details, and follow order status. Authorised staff use protected administration features to manage orders.

3. Information we process

Account and contact details

• Name, phone number, and email address.
• Authentication information managed through Supabase Auth.
• Delivery address and any addresses you choose to save.

Order and payment information

• Items ordered, quantities, notes, totals, payment status, and timestamps.
• Pickup or delivery selection and the address needed to fulfil a delivery.
• An optional proof of EFT payment when you choose to upload one.

Guest orders

If you use guest checkout, Supabase creates an anonymous identifier so the app can connect your device session to the order. You do not need to create a permanent account to place a guest order.

Information we do not collect through the app

The app does not include advertising or analytics SDKs and does not request precise location, contacts, SMS, or call-log access. It does not process card details, use Firebase Cloud Messaging, or include a third-party crash-reporting SDK.

4. How we use information

We use information to:

• Create and secure accounts and app sessions.
• Receive, prepare, update, and fulfil food orders.
• Deliver orders to the address a customer provides.
• Review optional EFT proof and reconcile payment status.
• Show order status and order history.
• Prevent misuse, troubleshoot problems, and provide customer support.

5. Sharing and service providers

We do not sell personal information or use it for third-party advertising. Information is available only where needed to operate the service:

• Supabase provides authentication, PostgreSQL database, realtime updates, and protected file storage.
• Authorised store staff and delivery personnel can access the order details required to prepare, manage, or deliver an order.
• WhatsApp or email may process information you send when you choose those channels for support.

The app's Supabase project is hosted in Ireland (eu-west-1).

6. How we protect information

Safeguards used by the app include:

• Encrypted HTTPS and WSS connections while information is transmitted.
• Row Level Security rules that limit database access by role and ownership.
• Server-side calculation of order prices.
• Private storage for uploaded EFT proof, with access restricted to authorised users.

No online system can be guaranteed completely secure, but we use reasonable controls to reduce risk and restrict access.

7. How long we keep information

• Account details, profile data, saved addresses, and uploaded proof are deleted when an account deletion request is completed, except where a legal obligation requires retention.
• Order and financial records may be anonymised and retained for at least five years to meet South African tax and record-keeping obligations.
• Residual information in Supabase backups or operational logs may remain for up to 30 days before automatic expiry.

8. Information stored on your device

The Android app may save your selected preferences and saved delivery addresses locally for convenience. Android cloud backup is disabled for the app. Removing the app clears information stored only on that device, while server-side account and order records follow the retention rules above.

9. Your choices and rights

• Use guest checkout instead of creating a permanent account.
• Provide a delivery address only when you choose delivery.
• Choose whether to upload an EFT payment proof.
• Review or correct your account and saved address details in the app.
• Delete your account from Profile → Delete Account, or follow the steps on our account deletion page.
• Ask us for access to, correction of, or deletion of personal information by using the contact details below.

10. Children's privacy

The app is a general-audience food ordering service and is not designed to knowingly collect information from children without appropriate involvement from a parent or guardian. Please contact us if you believe a child has provided personal information inappropriately.

11. International processing

Because Supabase hosts the app's backend in Ireland, information may be processed outside South Africa. We use the provider's security controls and contractual protections as part of operating the service.

12. Changes to this policy

We may update this policy when the app or our legal obligations change. The effective date at the top of this page will show when the current version began to apply.

13. Contact us

Contact Rasta's Peri Q Chesanyama if you have a privacy question or want to exercise one of the rights described above.