We dream of a planet where everyone has access to affordable, quality food. At Refreshi we are on a mission to bring new life to surplus food and provide more affordable meals. We do this by connecting Users of our App with Stores who have surplus food.

This Privacy Policy ("Policy") aims to give you information on how we collect and process personal information from Users, Partners, and any other individuals with whom we interact. This Privacy Policy complies with the South African Protection of Personal Information Act, No. 4 of 2013 ("POPI"), as amended.

This Policy is designed to help you understand our information collection practices depending on your relationship with us. It should be read in conjunction with any other applicable policies and terms and conditions in place between you and us.

If you access our Platform from South Africa, the entity responsible for collecting your personal information is Refreshi (Pty) Ltd, GR06 Twickenham, Brookside Office Park, 11 Imam Haron Rd, Claremont, Cape Town, 7708, South Africa. Company registration number: 2022/860860/07.

ACCESSIBILITY — IF YOU ARE HAVING ANY TROUBLE ACCESSING THIS POLICY, PLEASE EMAIL US AT hello@refreshi.co.za

"App" — the Refreshi app downloadable to your phone or tablet.

"Platform" — our Website, App, and any online services and products in unison.

"Store" or "Partner" — businesses using the Platform to make surplus food available for purchase.

"Surprise Bag" — the surprise bags available for purchase in the App filled with surplus food items.

"Refreshi" / "we" / "us" / "our" — Refreshi (Pty) Ltd.

"User" — you as a consumer using the Refreshi Platform.

4.1 Information needed to use the App: Geo-location (country and precise/approximate location), responses from trusted payment providers, delivery information including name and address, and email and phone number if provided for notifications.

4.2 Information you choose to give us: Additional profile information (name, phone, email, home/work address, gender, birth date, dietary preferences), and other information provided when completing forms, responding to surveys, or communicating with our customer care team.

4.3 Information automatically collected: Usage information (pages viewed, searches, orders), log data and device information (IP address, device type, identifiers, crash data), and cookies and similar technologies as described in our Cookie Policy.

4.4 Information from third parties: If you link or login using a third-party service (e.g. Facebook), you direct that service to send us profile information such as your name and email.

4.5 Information from email communications: Our email service providers may record who opens emails, when, which links are clicked, device type, and operating system. We use this to improve future communications.

5.1 Store account information: Name, email, phone, store address, store name, business type, role, VAT number, and banking details.

5.2 Automatically collected from Platform use: Usage information, log data, device information, and cookies.

5.3 From vendors and business partners: Business contact information including name, email, phone, company name, address, and role.

6.1 Provide, improve, and develop the Platform: Creating and managing accounts, personalising your experience, processing orders, performing analytics and research.

6.2 Communicate with you: Responding to support inquiries, sending technical or legal notifications, sending notifications about orders and updates.

6.3 Advertising and marketing: Personalising and improving advertising, tailoring promotional messages, sending marketing communications (where permitted by law or where you have opted in), administering surveys and promotional activities.

6.3.1 Targeted advertising: We may use cookies and clickstream data to deliver targeted advertising. You may opt out via your device settings (iOS: Settings → Privacy → Advertising; Android: Google Settings → Ads).

7.1 With your consent or at your direction: As described at the time of consent.

7.2 Data processors: Service providers assisting us to run our business — payment processors, hosting providers, analytics providers, email service providers, customer care tools. All are contractually bound by data processing agreements.

7.3 Third-party geo-location services: We share location data with Google for map functionality. Subject to Google's Terms of Service and Privacy Policy.

7.4 Public authorities: We may disclose personal information to courts or law enforcement only if required or permitted by law.

7.5 Business transfers: In a merger, acquisition, or insolvency event, personal information may be transferred to relevant parties. This Policy continues to apply.

We may process your personal information outside South Africa for cloud storage and third-party engagement. We ensure appropriate safeguards are in place in accordance with POPIA requirements.

We retain personal information for as long as needed for the purpose for which it was obtained, or as required by law. Criteria include: the duration of our relationship with you, legal obligations, and whether retention is advisable given applicable statutes of limitations.

We have implemented appropriate technical and organisational security measures to protect your personal information from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Subject to applicable law:

Right of access: You may request access to personal information we hold about you.

Right to rectification: You may request correction of inaccurate information.

Right to erasure: You may request deletion of your information (subject to legal limitations).

Right to restriction and objection: You may request restriction of processing or object to processing.

Right to data portability: You may request your data in a structured, machine-readable format.

Right to withdraw consent: Where processing is based on consent, you may withdraw at any time.

To exercise these rights, contact us at support@refreshi.co.za. We will respond within one month.

11.1 In-App controls: Our App allows you to delete your account, download a copy of your data, and unsubscribe from marketing directly in settings.

11.2 Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with a data protection authority of competent jurisdiction.

Our Platform is intended for users 18 years of age or older. We do not knowingly collect personal information from individuals under 16. If we become aware of such collection, we will delete it promptly. Contact hello@refreshi.co.za if you have concerns.

We may update this Policy from time to time. Material changes will be communicated via the Platform or by email.

Refreshi (Pty) Ltd | GR06 Twickenham, Brookside Office Park, 11 Imam Haron Rd, Claremont, Cape Town, 7708, South Africa | hello@refreshi.co.za