Privacy Policy

Effective date: 25 March 2026

BomBraai ("we", "our", or "us") operates the BomBraai mobile application. This Privacy Policy explains how we collect, use, and protect your personal information when you use our app and services.

1. Information We Collect

We collect the following information when you use BomBraai:

• Account information — name, email address, phone number, and password when you register.
• Delivery addresses — addresses you save or enter for deliveries.
• Order history — products ordered, order amounts, and order status.
• Payment information — payments are processed securely by our payment provider (Yoco). We do not store your card details.
• Location data — your device location when you use delivery tracking features (only while the app is in use).
• Device information — device type, operating system, and push notification tokens for sending order updates.

2. How We Use Your Information

We use your information to:

• Process and deliver your orders.
• Send order status updates and delivery notifications.
• Manage your account and loyalty points.
• Apply promotions and referral rewards.
• Improve our app and services.
• Communicate with you about your orders.

3. Payment Processing

All payments are handled by Yoco, a PCI-DSS compliant payment provider. Your card details are entered directly on Yoco's secure checkout page and are never transmitted to or stored on our servers.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Delivery drivers — your name, phone number, and delivery address to fulfil your order.
• Payment provider (Yoco) — to process your payments.
• Push notification services (Expo/Firebase) — to deliver order update notifications to your device.

5. Data Security

We protect your data using HTTPS encryption for all communications, secure password hashing, and JWT-based authentication. Access to your personal data is restricted to authorised personnel only.

6. Data Retention

We retain your account and order data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

In accordance with the Protection of Personal Information Act (POPIA), you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Object to the processing of your personal information.
• Withdraw consent for push notifications at any time via your device settings.

8. Children's Privacy

BomBraai is not intended for use by children under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or by email.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: admin@bombraai.co.za