Effective Date: September 30, 2026

Contents

1. INTRODUCTION
2. WHAT WE COLLECT & WHY
3. HOW WE USE YOUR INFORMATION
4. WHEN WE SHARE YOUR INFORMATION
5. YOUR PRIVACY RIGHTS
6. DATA SECURITY
7. DATA RETENTION
8. CHILDREN’S PRIVACY
9. INTERNATIONAL TRANSFERS
10. CHANGES TO THIS POLICY
11. CONTACT US
12. AUTOMATED DECISION-MAKING
13. SUB-PROCESSORS

SUMMARY OF KEY POINTS

At a glance, here is how we handle your personal information:
What personal information do we collect? We collect your name, email address, delivery address, payment information, and location data to facilitate your orders.
Do we process any sensitive personal information? Yes, we collect precise location data to ensure accurate and timely meal deliveries. You have the right to limit how we use this data.
Do we collect information from third parties? We primarily collect information directly from you, though we may receive payment confirmation statuses from our secure payment processors.
How do we use your information? We use your data to process your orders, coordinate deliveries with local establishments, manage your account, and send you updates about your food.
Who do we share your personal information with? We share necessary details with participating local restaurants, delivery personnel, and essential service providers like hosting and payment platforms. We never sell your personal data.
What are your privacy rights? You have the right to access, correct, or delete your data, opt out of marketing, and manage your location preferences at any time.
How can you contact us? You can reach our privacy team directly by emailing Thabo@jrtprop.co.za.

1. INTRODUCTION

Welcome to Dijong Street. We provide a delivery service that seamlessly gives you access to multiple participating local establishments selling cooked meals. To get your favorite food from their kitchen to your front door, we need to collect and use some of your personal information.
We believe that ordering a great meal shouldn’t mean giving up your right to privacy. This policy explains in plain language what information we collect, why we need it, and how we protect it. We have designed our privacy practices to comply with South Africa’s Protection of Personal Information Act (POPIA).
If you have any questions about how we handle your data, please reach out to us at Thabo@jrtprop.co.za.

2. WHAT WE COLLECT & WHY

To provide you with a seamless food delivery experience, we collect information in a few different ways. We only collect what we actually need to serve you.
Information You Give Us Directly
When you register for an account, place an order, or leave a product review, you share specific details with us. This includes your name, email address, delivery address, and payment details. We need this information to create your account, process your payments, and ensure your food reaches the right destination. Legal basis: Processing is necessary for the performance of our contract with you.
Information Collected Automatically
When you use the Dijong Street website or app, we automatically collect certain technical data, including your IP address, browser type, and precise Location Data. We collect your location data specifically to track deliveries in real-time and show you the most relevant local establishments in your area. Legal basis: Legitimate interest (for technical data to keep our site running) and Consent (for precise location tracking).
Information from Third Parties
We work with secure payment processors to handle your financial transactions. While we do not store your full credit card number on our servers, we do receive confirmation tokens and payment statuses from these partners to verify that your order can be fulfilled. Legal basis: Performance of a contract.

3. HOW WE USE YOUR INFORMATION

Every piece of data we collect serves a specific purpose in making your Dijong Street experience better. We use your information for the following reasons:
Core Service Delivery: We use your name, address, and payment info to process your shopping cart, finalize your order, and coordinate shipping and delivery. (Contract basis)
Service Improvement: We analyze order trends, product reviews, and website navigation patterns to improve our inventory management and make our platform easier to use. (Legitimate interest)
Communication: We use your email to send order confirmations, delivery tracking updates, and responses to your customer service inquiries. (Contract and Legitimate interest)
Security and Fraud Prevention: We monitor account activity and transactions to protect against fraudulent orders and unauthorized account access. (Legitimate interest)
Legal Compliance: We maintain certain transaction records to comply with tax laws and financial reporting requirements. (Legal obligation)
Marketing: If you choose to hear from us, we will send you promotional offers and updates about new participating local establishments. You can opt out of these at any time. (Consent)

4. WHEN WE SHARE YOUR INFORMATION

To get a cooked meal to your door, teamwork is required. However, we are highly selective about who we invite to the team. We never sell your personal data. We only share your information in the following limited circumstances:
Essential Service Providers: We share necessary data with the local establishments preparing your food and the drivers delivering it. We also use trusted third-party vendors for website hosting and payment processing.
Legal Requirements: If we are required to do so by law, court order, or a legitimate request from law enforcement, we will disclose your information to comply with our legal obligations.
Business Transitions: If Dijong Street is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
With Your Consent: If we need to share your information for any purpose not listed here, we will ask for your explicit permission first.

5. YOUR PRIVACY RIGHTS

Depending on where you live (including under POPIA), you have significant power over your personal data. We respect these rights for all Dijong Street users:
Access Your Data: You can request a copy of the personal information we hold about you. We will provide this within 30 days.
Correct Inaccuracies: If your address changes or your name is misspelled, you can update your information directly in your account settings or by contacting us.
Delete Your Data: You can ask us to delete your account and personal data. We will do so, provided we aren’t legally required to keep certain transaction records.
Port Your Data: You can request your data in a structured, commonly used, and machine-readable format to transfer it to another service.
Opt-Out of Marketing: Every marketing email we send includes a clear “unsubscribe” link. You can also manage these preferences in your account settings.
Withdraw Consent: If you previously gave us permission to use your location data or send you marketing, you can withdraw that consent at any time without affecting the legality of our prior processing.
Lodge Complaints: If you believe we have violated your privacy rights, you have the right to file a complaint with your local data protection authority, such as the Information Regulator in South Africa.
To exercise any of these rights, please email Thabo@jrtprop.co.za.

6. DATA SECURITY

We maintain a standard data risk level and a balanced risk tolerance. This means we implement robust, industry-standard security measures without making our platform overly complicated to use.
We protect your data using encryption during transmission, secure access controls for our staff, and regular monitoring of our systems. However, we want to be honest: no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
You also play a role in keeping your data safe. We encourage you to use a strong, unique password for your Dijong Street account and to keep your login credentials confidential. In the unlikely event of a data breach that compromises your personal information, we will notify you and the relevant authorities within the timeframes required by law.

7. DATA RETENTION

We do not keep your information forever. Our standard data retention period is 2 years from your last interaction with our platform. Here is how we apply this rule:
Active Account Data: We keep your profile information, delivery addresses, and preferences for as long as your account is active, plus a 2-year buffer after your last login to make it easy if you decide to return.
Financial Records: By law, we are required to keep records of financial transactions (like your order history and payment receipts) for up to 7 years for tax and accounting purposes.
Marketing Preferences: We retain your consent records until you withdraw them or opt out.
Technical Logs: Routine system logs and device data are typically deleted or anonymized after 12 months.
Once data reaches the end of its retention period, we securely delete or anonymize it so it can no longer be linked to you.

8. CHILDREN’S PRIVACY

Dijong Street is designed for adults who can legally make online purchases. We do not knowingly collect personal information from children under the age of 18. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us. If we become aware that we have collected data from a child, we will take immediate steps to delete that information from our servers.

9. INTERNATIONAL TRANSFERS

While Dijong Street operates primarily in South Africa, some of our essential service providers (like cloud hosting or payment gateways) may process data in other countries. When we transfer your data internationally, we ensure it is protected by appropriate legal safeguards,
such as Standard Contractual Clauses (SCCs) or adequacy decisions, ensuring your privacy rights remain intact regardless of where the data is processed.

10. CHANGES TO THIS POLICY

As our business grows and privacy laws evolve, we may need to update this policy. When we make significant changes, we will notify you by sending an email to the address associated with your account or by placing a prominent notice on our website. Your continued use of Dijong Street after these changes are posted constitutes your agreement to the updated policy. You can always find the most current version of this policy at Www.Dijongstreet.co.za.

11. CONTACT US

We want to hear from you if you have any questions, concerns, or requests regarding your privacy. You can reach us through the following channels:
Privacy Email: Thabo@jrtprop.co.za
Website: Www.Dijongstreet.co.za
We aim to respond to all privacy-related inquiries within 30 days.

12. AUTOMATED DECISION-MAKING

We do not use your personal data for any automated decision-making or profiling that produces legal effects or similarly significant effects concerning you (as defined under GDPR Article 22). All significant decisions regarding your account, refunds, or service access involve human review.

13. SUB-PROCESSORS

To provide our services, Dijong Street engages third-party sub-processors for essential functions, including cloud hosting infrastructure and secure payment processing.
We maintain a current, detailed list of all active sub-processors. You can request this list at any time by emailing Thabo@jrtprop.co.za. Furthermore, customers can subscribe to be notified via email before any new sub-processor is added to our operations, giving you the opportunity to review changes to how your data is handled.