Privacy Policy
Last updated: 10 July 2026
Fresoh (Pty) Ltd ("Fresoh", "we", "us", "our") operates the Fresoh website and the Fresoh mobile application (together, the "Platform"), which connects Customers with Restaurants selling surplus food at a reduced price for collection. This Privacy Policy explains how we collect, use, share and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African law.
By using the Platform, you consent to the collection and use of your personal information as described in this Policy. If you do not agree with this Policy, please do not use the Platform.
1. Who is responsible for your information
Fresoh (Pty) Ltd is the "responsible party" for personal information processed through the Platform, as defined in POPIA.
Registered address: [Fresoh (Pty) Ltd registered address to be inserted]
Information Officer: [Information Officer name and contact details to be inserted]
General privacy enquiries: privacy@fresoh.co.za
2. Information we collect
We collect the following categories of personal information when you register for and use the Platform:
| Category | Examples |
|---|---|
| Account & profile information | Full name, email address, phone number, password (stored in hashed form), profile photo, account role (Customer, Restaurant, or Admin). |
| Restaurant / vendor information | Business name, description, physical address, GPS coordinates, logo, cover image, business phone number, verification status and supporting documentation. |
| Order & transaction information | Listings ordered, quantities, prices, order number, total amount paid, PayFast payment reference, order status, pickup window, QR collection code and scan timestamp, any notes you add to an order. |
| Location information | Restaurant addresses and coordinates, and the location your device shares with the Platform so we can show you nearby listings. |
| Ratings, reviews & favourites | Star ratings and comments you leave for an order, and restaurants you save as favourites. |
| Device & notification information | Push notification device token, device platform (iOS, Android or web), and app version, so we can send you order and account updates. |
| Technical & log information | IP address, browser or device user agent, and session data generated when you use the website or app. |
| Communications | Messages you send us through the contact form, email, or in-app support. |
We do not collect or store your card or bank account details. Payments are processed directly by PayFast (Pty) Ltd, an independent responsible party subject to its own privacy policy.
3. How we use your information
- To create and manage your account, and verify Restaurant registrations.
- To operate the marketplace: show you relevant nearby listings, process and confirm orders, and generate QR collection codes.
- To process payments through PayFast and reconcile orders.
- To send you transactional communications and push notifications about your orders, account, or listings.
- To enable ratings and reviews, and to maintain trust and safety on the Platform.
- To detect, investigate and prevent fraud, abuse, and security incidents.
- To comply with our legal, tax and regulatory obligations.
- To improve and develop the Platform.
- With your consent, to send you marketing communications, which you may opt out of at any time.
4. Who we share your information with
- Restaurants and Customers: when you place an order, we share the information the Restaurant reasonably needs to prepare and hand over your order (such as your name, order details, and QR code), and we share order status information with the relevant Customer.
- Service providers: PayFast (payment processing), Amazon Web Services (secure file and image storage), and our transactional email providers, who process personal information on our behalf and are contractually required to protect it.
- Legal and regulatory bodies: where required by law, court order, or to protect the rights, safety, or property of Fresoh, our users, or the public.
- Business transfers: if Fresoh is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
We do not sell your personal information to third parties.
5. Cross-border transfers
Some of our service providers, including our cloud storage provider, may process or store information on servers located outside South Africa. Where this occurs, we take reasonable steps to ensure the recipient is subject to a law, binding corporate rules, or an agreement that provides an adequate level of protection consistent with POPIA section 72.
6. How long we keep your information
We keep your account information for as long as your account is active. Order and payment records are retained for at least five years to meet our obligations under South African tax and financial recordkeeping legislation. When you delete your account, we delete or de-identify personal information that we are not legally required to retain. See our Account Deletion page for details.
7. Security
We use reasonable technical and organisational measures to protect your personal information, including encrypted transmission (HTTPS/TLS), hashed passwords, token-based authentication for the mobile app, and access controls that limit who within Fresoh can view your information. No system is completely secure, and we encourage you to keep your account credentials confidential. See our Data Protection page for more detail.
8. Cookies and similar technology
The website uses essential cookies required for login sessions and security (such as CSRF protection). We do not use third-party advertising or tracking cookies.
9. Your rights
Subject to POPIA, you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or outdated information.
- Request deletion or destruction of your personal information.
- Object to the processing of your personal information, including for direct marketing.
- Withdraw consent, where processing is based on consent.
- Lodge a complaint with the Information Regulator.
See our Data Request page for how to exercise these rights.
10. Children's information
The Platform is intended for use by individuals who are at least 18 years old, or who otherwise have the legal capacity to contract under South African law. We do not knowingly collect personal information from children without the consent of a competent person, as required by POPIA.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above. Material changes will be communicated to you through the Platform or by email.
12. Contact us
If you have questions about this Policy or how we handle your personal information, contact our Information Officer at privacy@fresoh.co.za.