Privacy Policy

1. Who we are

Nambita Cafe, with branches at:

• Nambita Cafe KwaMashu, 206 Bhenjane Rd, KwaMashu, 4051
• Nambita Cafe Waterloo, 4 20278 St, Waterloo, Blackburn, 4319

For anything about your personal information, email info@nambitacafe.co.za.

2. What we collect

When you place an order:

• your first name and surname,
• your phone number,
• your email address, if you give it,
• the branch you'll collect from and any note you add (for example, allergies),
• what you ordered, the amount and the time of the order.

You pay on Yoco's secure payment page. Your card details go straight to Yoco: we never see or store them.

If you accept analytics cookies, Google Analytics records which pages you visit, roughly where you are (city level) and what kind of device and browser you use. See Cookies below.

On the Find Nambita Cafe page, "Share Location" uses your location only inside your own browser to show the nearest branch. It is never sent to us.

3. Why we use it

• to prepare your order and hand it to the right person,
• to email your receipt and tell you when your order is ready (if you gave an email address),
• to contact you about a problem with your order, or a refund,
• to keep financial records, as the law requires,
• to stop abuse of the website, for example too many payment attempts. For this we briefly keep a scrambled version of your internet address and your phone number, and delete them regularly.
• with your permission only, to understand how people use the website (Google Analytics).

We don't sell your information, and we don't send you marketing.

4. Who we share it with

Only the services that run the website and your order, and only what each one needs:

• Yoco: takes your payment.
• Supabase: stores orders in our database.
• Resend: sends our emails.
• Vercel: hosts the website.
• Google: website statistics, only if you accept analytics cookies.

Some of these services store information on servers outside South Africa. We only use providers that are required to protect it. We will share information with the authorities only if the law requires it.

5. How long we keep it

We keep order records for five years, because South African tax law requires us to keep financial records for that long. After that we delete them. Our staff can only see orders after logging in.

6. Your rights

Under POPIA you can ask us to:

• tell you what personal information we hold about you,
• correct it if it's wrong,
• delete it, unless the law requires us to keep it,
• stop using it for something you object to.

Email info@nambitacafe.co.za with your order reference if you have one. If you're not happy with our answer, you can complain to the Information Regulator at inforegulator.org.za.

7. Cookies and your browser

We store a few small things in your browser:

• Your cart, so it's still there if you refresh the page. Needed for ordering.
• Your cookie choice, so we don't ask again on every page.
• Google Analytics cookies (named _ga…), only if you press Accept. They're used for visitor statistics, never for ads.

To change your choice, clear this website's cookies and site data in your browser settings. We'll ask again on your next visit.

8. Keeping it safe

The website only works over a secure (HTTPS) connection, payments are handled by Yoco, and customer details can only be seen by our staff after they log in.

9. Changes to this policy

If we change this policy, we'll update it on this page and change the date at the top.