Privacy Policy

In short

We only collect the information we need to take your order, deliver your food, run your membership, and keep you informed. We never sell your information. You can ask to see, correct, or delete it at any time, and you can complain to the Information Regulator if you're unhappy with how we handle it.

This policy explains how Floreer Local Goodness (Pty) Ltd ("Floreer", "we", "us") collects, uses, shares, and protects your personal information when you use our website, shop with us, or become a member. We are committed to processing your information lawfully, transparently, and securely.

1. Who we are (Responsible Party)

For the purposes of POPIA, the Responsible Party is:

Floreer Local Goodness (Pty) Ltd, registration number [registration number]
Timberlake Village, Off N2 between Wilderness and Sedgefield, 6583, Western Cape, South Africa
Information Officer: [information officer name] — [[email protected]]

2. The information we collect

Depending on how you interact with us, we may collect:

Identity & contact details — name, email address, phone number, delivery and billing address.
Order & delivery information — items purchased, delivery instructions, order history.
Payment information — processed securely by our payment provider, [PayFast]. We do not store your full card details on our systems.
Account information — login credentials, preferences, and membership status.
Communications — messages, enquiries, and support requests you send us.
Technical & usage data — IP address, device and browser type, and cookie data (see section 10).

3. How we collect it

We collect information directly from you when you place an order, create an account, join as a member, contact us, or subscribe to updates. We also collect some information automatically through cookies and similar technologies, and occasionally from trusted third parties such as our payment and delivery providers.

4. Why we process it, and our lawful basis

We process your personal information to:

fulfil and deliver your orders and manage your account (performance of a contract);
operate the premium membership and its benefits (performance of a contract);
provide customer support and respond to enquiries (legitimate interest);
send you service messages, and — where you have opted in — marketing and newsletters (consent);
comply with legal, tax, and accounting obligations (legal obligation);
improve our website, products, and security (legitimate interest).

Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

We share personal information only where necessary, with:

Operators acting on our behalf — payment processing ([PayFast]), delivery partners, IT and hosting providers, and email/communication services, all bound to protect your information;
Authorities, where required by law or to protect our rights;
A successor entity in the event of a business sale or restructuring.

We never sell your personal information.

6. Cross-border transfers

Some of our service providers may process information outside South Africa. Where this happens, we take reasonable steps to ensure your information receives a comparable level of protection, as required by POPIA. [List cross-border providers / safeguards, if any]

7. How we keep it safe

We apply appropriate technical and organisational safeguards — including access controls, encryption in transit, and secure hosting — to protect your information against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, but we work continuously to protect your data and will notify you and the Regulator of a compromise where the law requires.

8. How long we keep it

We keep personal information only for as long as necessary to fulfil the purposes described above, including to satisfy legal, tax, and accounting requirements. Order and invoice records are generally retained for [5 years] as required by South African law. When information is no longer needed, we securely delete or anonymise it.

9. Your rights under POPIA

Subject to the conditions in POPIA, you have the right to:

be told what personal information we hold about you and request access to it;
request correction or deletion of information that is inaccurate, irrelevant, or excessive;
object to processing on reasonable grounds;
withdraw consent to marketing or other consent-based processing;
complain to the Information Regulator.

To exercise any of these rights, contact our Information Officer at [[email protected]]. We may ask you to verify your identity first.

10. Cookies

Our website uses cookies and similar technologies to keep you logged in, remember your basket, understand how the site is used, and improve your experience. You can control or disable cookies through your browser settings, though some features may not work properly without them. [Link to a fuller cookie notice, if used]

11. Children

Our services are intended for customers aged 18 and over. We do not knowingly collect the personal information of children without the consent of a competent person. If you believe we have, please contact us so we can remove it.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the effective date shown above. Material changes will be communicated where appropriate.

13. Contact us & the Regulator

For any privacy question or request, contact our Information Officer at [[email protected]]. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa) at [Regulator contact / website].

Questions about your privacy?

We're happy to help — reach out and we'll get back to you.