Privacy Policy

Wild Coast Roast (Pty) Ltd (“Wild Coast Roast”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information we process.

This Privacy Policy explains what personal information we collect through the Wild Coast Roast website, why we collect it, how we use and protect it, when we may share it, and the rights available to you under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

This Policy applies to personal information collected through our website and related online enquiries. It should be read together with any other notices or terms that may apply to specific services or interactions with us.

1. Who we are

Wild Coast Roast (Pty) Ltd is a private company registered in South Africa and a speciality coffee business based in East London, Eastern Cape.

For purposes of POPIA, Wild Coast Roast is the responsible party in respect of the personal information described in this Privacy Policy.

If you have any questions about how we process personal information, or wish to exercise any of your rights, please contact our Information Officer:

Information Officer: Janice Roberts
Email: info@wildcoastroast.co.za

2. What personal information we collect

The personal information we collect depends on how you interact with our website.

When you contact us

If you submit an enquiry or contact us form, we may collect information such as:

your name and surname;
email address;
telephone or mobile number;
business or organisation name;
business type;
business location;
information about your coffee, hospitality or wholesale requirements; and
any other personal information you voluntarily include in your enquiry or correspondence.

Please do not provide sensitive personal information through the website unless we specifically request it and there is a lawful reason for us to process it.

When you use our website

Our website and its hosting, security and technical service providers may process certain technical information, which may include:

IP address;
browser and device information;
operating system;
pages visited;
date and time of visits;
referring website or source; and
information relating to website security and technical performance.

Where analytics tools are enabled, we may also collect information about how visitors use the website, including approximate location, device type and interactions with pages.

We aim to collect only information that is reasonably necessary for the purposes described in this Policy.

3. Why we collect and use personal information

We may process personal information for the following purposes:

to respond to enquiries and requests;
to communicate with you about our products and services;
to assess and manage potential wholesale, hospitality or business relationships;
to arrange or manage the supply of products or services where applicable;
to operate, maintain and improve our website;
to understand how visitors use our website;
to maintain website security and prevent fraud, abuse, spam or other unlawful activity;
to comply with legal and regulatory obligations; and
for other purposes that are compatible with the purpose for which the information was originally collected.

We will not use personal information for purposes that are materially different from those described above unless permitted or required by law, or where appropriate, we have obtained your consent.

4. Lawful basis for processing

POPIA requires personal information to be processed on a lawful basis.

Depending on the circumstances, Wild Coast Roast may process personal information where:

you have consented to the processing;
processing is necessary to take steps at your request before entering into a contract;
processing is necessary for the performance of a contract;
processing is necessary to comply with a legal obligation;
processing protects a legitimate interest of the data subject; or
processing is necessary for the legitimate interests pursued by Wild Coast Roast or a third party, where permitted by POPIA.

Where we rely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and it does not prevent us from continuing to process information where another lawful basis applies.

5. Providing personal information

Where you submit personal information to us through the website, providing the information is generally voluntary.

However, certain information may be necessary for us to respond to an enquiry, provide a requested service or enter into a business relationship with you. If you do not provide information that is reasonably necessary for these purposes, we may not be able to respond fully to your inquiry or provide the requested service.

We will not require personal information that is unnecessary for the relevant purpose.

6. Who we may share personal information with

We do not sell, rent or trade your personal information.

We may share personal information with carefully selected third-party service providers where this is reasonably necessary to operate our website, communicate with you, maintain security or provide related services.

Depending on the website configuration and services in use, these providers may include:

Cloudflare

Cloudflare may provide website security, performance and related technical services.

Postmark

Postmark may process information contained in website enquiries for the purpose of delivering transactional emails to Wild Coast Roast.

Google

If Google Analytics or other Google services are enabled on the website, Google may process technical and usage information for website analytics and related purposes.

The specific services and providers used by the website may change from time to time. We will take reasonable steps to ensure that service providers processing personal information on our behalf are subject to appropriate contractual and security obligations.

7. Information processed outside South Africa

Some of our service providers may process or store personal information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with the requirements of POPIA, including section 72.

This may include ensuring that the recipient is subject to a law, binding corporate rules or binding agreement that provides an adequate level of protection, obtaining consent where appropriate, or relying on another lawful basis permitted by POPIA.

Where reasonably required, we will provide additional information about relevant international transfers.

8. Direct marketing

We do not use personal information for unsolicited electronic direct marketing unless we have a lawful basis to do so under POPIA.

Where consent is required for electronic direct marketing, we will obtain the required consent before sending such communications.

Where POPIA permits electronic direct marketing to an existing customer without separate consent, we will only use personal information within the limits permitted by POPIA and will provide a reasonable opportunity to object to further communications.

Every electronic direct marketing communication from us will identify Wild Coast Roast and provide an appropriate means of requesting that further communications cease.

You may contact us at any time to request that we stop using your personal information for direct marketing.

9. Cookies and similar technologies

Our website may use cookies and similar technologies.

These may include:

Essential or technical cookies, which may be required for website functionality, security and protection against spam or abuse; and
Analytics cookies, where analytics services such as Google Analytics are enabled, to help us understand how visitors use our website and improve its performance.

We do not use advertising cookies for the purpose of selling or renting your personal information to advertisers.

You can block or delete cookies through your browser settings. Blocking certain cookies may affect some website functionality.

10. How long we keep personal information

We will not retain personal information for longer than is necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law, contract or another lawful purpose.

For example, enquiry information may be retained for as long as reasonably necessary to respond to the enquiry and manage any resulting business relationship.

Where we are no longer authorised or required to retain personal information, we will securely delete, destroy or de-identify it as reasonably practicable.

11. Information security

We take reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, disclosure, alteration or destruction.

These measures may include:

encrypted HTTPS connections;
access controls;
limiting access to personal information to people who require it for legitimate business purposes;
appropriate security measures relating to our website and service providers; and
appropriate procedures for identifying and responding to suspected security compromises.

No electronic transmission or storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information transmitted to or through our website.

12. Security compromises

If we become aware of a security compromise involving personal information in our possession or under our control, we will deal with the compromise in accordance with POPIA.

Where required by law, we will notify the Information Regulator and affected data subjects as soon as reasonably possible after establishing that notification is required.

13. Your rights

Subject to the provisions of POPIA and applicable law, you may have the right to:

request confirmation of whether we hold personal information about you;
request access to personal information we hold about you;
request correction or updating of inaccurate, incomplete or outdated personal information;
request deletion of personal information where permitted by law;
object to certain processing of your personal information;
withdraw consent where processing is based on consent;
object to the use of your personal information for direct marketing; and
lodge a complaint with the Information Regulator if you believe your personal information has been processed unlawfully.

Requests should be made in writing to:

Information Officer
Wild Coast Roast (Pty) Ltd
Email: info@wildcoastroast.co.za

We may need to take reasonable steps to verify your identity before responding to a request involving personal information.

14. Complaints

If you have concerns about how we have processed your personal information, we encourage you to contact us first so that we can investigate and address the matter.

You also have the right to lodge a complaint with the Information Regulator of South Africa.

Information Regulator contact details:

Website: https://inforegulator.org.za/
Email: enquiries@inforegulator.org.za
Telephone: 010 023 5200

The Information Regulator is the independent regulatory authority responsible for monitoring and enforcing compliance with POPIA in South Africa.

15. Third-party websites

Our website may contain links to third-party websites or services.

This Privacy Policy does not apply to those third-party websites. We are not responsible for the privacy practices, content or security of third-party websites, and we recommend reviewing their privacy policies before providing personal information to them.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers, applicable law or privacy practices.

The “Last updated” date at the beginning of this Policy indicates when it was most recently revised.

17. Contact us

If you have any questions about this Privacy Policy or how Wild Coast Roast processes personal information, please contact:

Wild Coast Roast (Pty) Ltd
Information Officer: Janice Roberts
Email: info@wildcoastroast.co.za