Privacy Policy
Protecting your personal information is our priority
Effective Date: November 1, 2025 | Last Updated: November 1, 2025
Introduction
Food Truck Finder ("we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Services").
This Privacy Policy is compliant with the Protection of Personal Information Act, 2013 (POPIA), the Electronic Communications and Transactions Act, 2002 (ECT Act), and other applicable South African legislation.
By using our Services, you consent to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
1.1 Personal Information You Provide
We collect information that you voluntarily provide when you:
- Register for an account (name, email address, phone number)
- List a food truck business (business name, trading name, contact details, business registration information)
- Submit a booking inquiry (name, email, phone number, event details)
- Subscribe to our newsletter (email address)
- Contact us for support (name, email, message content)
- Report an issue (name, email, description, screenshots)
1.2 Information Collected Automatically
When you access our Services, we automatically collect certain information, including:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, links clicked, search queries
- Location Data: Approximate location based on IP address (for showing nearby food trucks)
- Cookies and Tracking Technologies: See our Cookie Policy
1.3 Information from Third Parties
We may receive information from:
- Google Maps API: Location data and map display services
- Payment Processors: Transaction confirmations and payment status
- Analytics Providers: Website usage statistics and performance metrics
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide Services: To operate and maintain the Food Truck Finder platform, display food truck listings, and facilitate booking inquiries
- Account Management: To create and manage user accounts, authenticate users, and provide dashboard access
- Communication: To respond to inquiries, send booking confirmations, provide customer support, and send administrative communications
- Marketing: To send newsletters, promotional materials, and updates about new features (with your consent, which you can withdraw at any time)
- Improve Services: To analyze usage patterns, conduct research, and improve our platform's functionality and user experience
- Security: To detect, prevent, and address fraud, security breaches, and technical issues
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests
- Business Operations: To process payments, manage subscriptions, and maintain business records
3. Legal Basis for Processing (POPIA Compliance)
Under POPIA, we process your personal information based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal information for specific purposes (e.g., marketing communications)
- Contract Performance: Processing is necessary to fulfill our contract with you (e.g., providing account access, managing subscriptions)
- Legal Obligations: Processing is necessary to comply with South African law (e.g., tax records, consumer protection)
- Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, improving services) while respecting your rights
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS protocols
- Encryption of sensitive data at rest
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Employee training on data protection and confidentiality
- Secure hosting infrastructure with Supabase (ISO 27001 certified)
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods:
- Active Accounts: Data retained while your account remains active
- Closed Accounts: Data deleted within 90 days of account closure, except where required for legal or tax purposes
- Booking Inquiries: Retained for 24 months for business records
- Financial Records: Retained for 5 years as required by South African tax law
- Marketing Communications: Retained until you unsubscribe
- Support Tickets: Retained for 12 months for customer service purposes
7. Your Rights Under POPIA
Under the Protection of Personal Information Act (POPIA), you have the following rights:
Right to Access
You have the right to request access to the personal information we hold about you.
Right to Correction
You have the right to request correction of inaccurate or incomplete personal information.
Right to Deletion
You have the right to request deletion of your personal information, subject to legal retention requirements.
Right to Object
You have the right to object to the processing of your personal information for direct marketing purposes.
Right to Restriction
You have the right to request restriction of processing in certain circumstances.
Right to Data Portability
You have the right to request a copy of your personal information in a structured, commonly used format.
Right to Withdraw Consent
Where we rely on consent, you have the right to withdraw it at any time.
Right to Complain
You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your privacy rights have been violated.
To exercise any of these rights, please contact our Information Officer:
We will respond to your request within 30 days as required by POPIA.
9. Third-Party Services
Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.
Key Third-Party Services:
- Supabase: Database and authentication (Privacy Policy)
- Google Maps: Location services (Privacy Policy)
- Google Analytics: Website analytics (Privacy Policy)
10. International Data Transfers
Your personal information may be transferred to and processed in countries outside of South Africa, including the United States and Europe, where our service providers are located.
When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data, including:
- Using service providers that comply with international data protection standards
- Implementing contractual clauses that require equivalent data protection
- Ensuring compliance with POPIA's requirements for cross-border data transfers
By using our Services, you consent to the transfer of your information to countries outside South Africa that may have different data protection laws.
11. Children's Privacy
Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we discover that we have collected personal information from a child under 18, we will delete that information promptly.
12. Contact Us & Information Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your rights under POPIA, please contact our Information Officer:
Information Officer
Information Regulator South Africa
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with:
Information Regulator (South Africa)
33 Hoofd Street, Forum III, 3rd Floor Braampark
P.O Box 31533, Braamfontein, Johannesburg, 2017
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg/
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated Privacy Policy on this page with a new "Last Updated" date
- Sending an email notification to registered users (for significant changes)
- Displaying a prominent notice on our website
Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.