Privacy Policy

1. Responsible party

Apex Tech Solutions (PTY) LTD is the responsible party for personal information processed through LekkerLokalz. Privacy requests may be sent to sibusiso.n@apexsolution.tech or made by phone at +27 81 237 2425.

2. Personal information collected and why

These categories are linked to the relevant account or order where needed to provide the service.

You may pay in cash or by EFT on delivery, or by card. Card payments are handled entirely on our payment provider's own secure page — your card number, expiry date and security code are entered there and are never seen, transmitted or stored by LekkerLokalz. Government-issued identity numbers are never collected.

3. How personal information is obtained

Information is obtained when you create or update an account, provide or select a delivery location, place or fulfil an order, contact support, and use the app on a device.

4. Who receives personal information

Other users, in order to fulfil an order:

• Merchants: receive the information necessary to accept, prepare and help fulfil an order.
• Drivers: receive the information necessary to collect and deliver an order, including the delivery address or selected location and contact details needed for the delivery.
• Support and administrative staff at Apex Tech Solutions (PTY) LTD may access account and order information in order to resolve a support request or a dispute. This access is recorded in an audit log.

Service providers, acting on our instructions:

• SMSPortal: receives the user's phone number for the sole purpose of sending one-time passcodes used for account verification.
• Paystack: processes card payments. When you choose to pay by card, Paystack receives the order reference, the amount and your email address so that it can take the payment and send you a receipt.
• Google Maps Platform: receives a typed address, or the coordinates of a location you select, in order to convert it into a delivery address and to calculate delivery routes. These requests are made by our servers rather than by your device.
• Cloudinary: hosts photographs uploaded by merchants and administrators.
• Supabase: hosts the database in which the information described above is stored.
• Expo's push notification service and the relevant mobile platform provider: receive a notification token for your device in order to deliver order notifications to it.

Merchants and drivers may use this information only to fulfil the relevant order. LekkerLokalz does not sell personal information, share it for third-party advertising, or use it for targeted advertising. Information may also be disclosed when required by South African law or a lawful order.

5. Retention and deletion

You can delete your account from within the app, on the Profile screen. You may also request deletion at apexsolution.tech/products/lekkerlokalz/delete-account, or by emailing sibusiso.n@apexsolution.tech.

Account profile information, saved addresses and contact details are kept while the account is active and are deleted within 30 days after a verified deletion request. Order and transaction records are retained for five years to meet South African tax and accounting obligations. Those retained records are dissociated from the user profile where possible — your name, phone number, email address and delivery address are replaced with a generic marker, while the order itself remains on record for the merchant and driver who fulfilled it. Records may be kept longer only when required for an unresolved legal, tax, audit or accounting matter.

Photographs uploaded by a merchant or an administrator relate to a business listing rather than to a personal account, and remain published for as long as that product or store is listed.

6. Security

Apex Tech Solutions (PTY) LTD uses reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, alteration, disclosure or destruction. Accounts are protected by a one-time code sent to your phone rather than by a password, information is encrypted while in transit, and one-time codes and staff credentials are stored only in hashed form. No electronic system can be guaranteed to be completely secure.

7. Your rights under POPIA

Subject to the Protection of Personal Information Act 4 of 2013, you may ask whether LekkerLokalz holds personal information about you, request access to it, ask for inaccurate or incomplete information to be corrected, and request deletion of information that may lawfully be deleted. You may also object to processing where POPIA gives you that right.

To exercise these rights, email sibusiso.n@apexsolution.tech with your request and the phone number linked to your account. Identity verification may be required before a request is completed. You may also lodge a complaint with South Africa's Information Regulator through its official website at inforegulator.org.za.

8. Children

LekkerLokalz is not directed at children. Users must be at least 18 years old to create or use an account.

9. Changes to this policy

If this policy changes, the updated policy will be published at this URL with a revised last-updated date. Material changes will be communicated through the app or available contact details where appropriate.