Privacy Policy

1. Who we are

This website is operated by [registered legal entity name] trading as Maradine ("we", "us"), registration number [number]. We are the responsible party for personal information processed through this website, as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA").

Information Officer: [name, email address]

2. Personal information we collect

• Enquiries: name, email address, phone number, event type, preferred date, guest count, event location, dietary requirements, optional budget and any details you choose to share.
• Orders and order requests: name, contact details, delivery or collection details, products ordered and payment status. Card details are entered on the payment provider's pages and are never received or stored by us.
• Newsletter: email address and the record of your consent.
• Technical information: a one-way hashed version of your IP address used briefly to prevent spam and abuse. We do not store raw IP addresses for this purpose.
• Dietary and allergy information you volunteer, which may relate to health. We use it only to prepare food safely for you, and only with your consent.

3. Why we use it

• To respond to enquiries and prepare proposals.
• To fulfil orders and communicate about them.
• To send the newsletter, only if you have opted in.
• To keep this website secure and prevent fraud and spam.
• To meet legal, tax and accounting obligations.

4. Sharing and operators

We share personal information only with service providers (operators) who process it on our behalf under appropriate agreements, including:

• [Supabase] — database and file hosting
• [Vercel] — website hosting
• [Resend] — transactional email delivery
• [PayFast / Yoco] — payment processing (when online payment is enabled)

Some of these providers store information outside South Africa. Where this happens we rely on the safeguards permitted by section 72 of POPIA. [Confirm hosting regions.]

We do not sell personal information.

5. Direct marketing

We send marketing email only to people who have opted in. Every newsletter includes an unsubscribe link, and you may withdraw consent at any time.

6. Retention

We keep personal information only as long as necessary for the purposes above or as required by law. [Define retention periods — e.g. enquiries that do not proceed: [x] months; order records: as required by tax law.]

7. Security

We use access controls, encryption in transit, row-level database security and restricted administrator accounts to protect personal information.

8. Your rights

You may request access to, correction of, or deletion of your personal information, and you may object to processing, by contacting our Information Officer. You also have the right to lodge a complaint with the Information Regulator (South Africa): https://inforegulator.org.za

9. Changes

We may update this policy. The latest version will always be published on this page.

Last updated: [date]