Privacy policy
Effective 11 October 2026
This policy explains what personal information Kasi Eats collects, why, who it is shared with, how long it is kept and what your rights are. It is written for South Africa's Protection of Personal Information Act (POPIA).
Who is responsible
Kasi Eats is operated by Petja Wholesale Group (Pty) Ltd, Reg. No. 2023/168761/07, of 1142 Leratong Street, Lebowakgomo, Limpopo, 0737 (“Kasi Eats”, “we”, “us”).
Our information officer is Rorisang Petja, Director. Contact the information officer at support@kasi-eats.com.
What we collect, and from whom
Customers
Your WhatsApp number, your name, the messages you send to the restaurant, your order details, your delivery area, landmarks you give us, your map location when you share it, and delivery confirmations.
Restaurant owners and staff
Your name, email address, phone number and business details. For payouts, bank details go straight to the payment provider. Kasi Eats keeps only the last four digits of the account number.
Drivers
Your first name and WhatsApp number, and the deliveries and cash collections recorded against you.
Why we use it
- To take and deliver orders.
- To send order updates.
- To process payments.
- To handle refunds and disputes.
- To prevent fraud.
- To meet our legal duties.
Who we share it with
- The restaurant you ordered from.
- Meta, through the WhatsApp Business Platform, to send and receive messages.
- Shobbable Pay and Paystack, to process payments.
- Our hosting and infrastructure providers (Supabase and Netlify) and our email provider.
Kasi Eats does not sell personal information.
Where it is stored
Some of the providers above store data outside South Africa.
How long we keep it
| Data | Kept for |
|---|---|
| Order, payment, refund and cash records (amounts, dates, restaurant) | 7 years, for tax and company records |
| The customer's name and number on those old records | Removed 2 years after the order; the financial record stays |
| Customer profile: name, number, saved addresses, map pins | 12 months after the customer's last order |
| WhatsApp message content and delivery confirmations | 180 days, so refunds and chargebacks can be answered |
| Driver details | While active, then 12 months after removal. Their delivery and cash records follow the 7-year rule without the phone number |
| Restaurant staff accounts | While active, then 12 months |
| Audit log | 2 years |
After these periods the data is deleted, or anonymised where a financial record must stay.
Your rights
You have the right to:
- ask what personal information we hold about you;
- ask us to correct it;
- ask us to delete it;
- object to how we use it;
- complain to the Information Regulator (South Africa).
Deletion requests
We answer deletion requests within 30 days. Data the law requires us to keep is kept, and we tell you what we kept and why. See Data deletion for how to ask.
Contact
For anything about your personal information, email support@kasi-eats.com.