Who is responsible for your information
StreetPlate (KulaConnect, registration number K2025921054, registered address G1031 Bhejane Road, KwaMashu) is the responsible party for personal information processed through this website and the customer, vendor and driver apps.
Information we collect
We process account and contact details, delivery addresses, order and payment history (not full card numbers), vendor business information, driver vehicle and licence details, device and usage data, and support communications you send us.
How we collect it
Most information is provided directly by you when you register, place an order, or contact support. Some is collected automatically, such as device information and, with your permission, precise location.
Why we process your information
We process personal information to perform our contract with you (creating an account, fulfilling orders, processing payments), to meet legal obligations (such as tax and consumer-protection record-keeping), and for legitimate interests such as fraud prevention and service security, as permitted under section 11 of POPIA.
Location information
Precise location is only collected with your permission and is used for delivery address confirmation, showing nearby vendors, and live order tracking. You can withdraw location permission at any time in your device settings, which may limit some features.
Sharing your information
We share the minimum necessary information with the vendor and driver assigned to your order, our payment processor (PayFast) to process payment, and infrastructure and communication providers who process data on our behalf (hosting, database, image storage and email delivery). These providers act as operators under POPIA and are contractually required to protect your information and use it only as instructed.
Cross-border transfers
Some of our service providers process information on servers located outside South Africa. Where this occurs, we take reasonable steps, as required by section 72 of POPIA, to ensure the recipient is subject to a comparable level of data protection before any transfer.
How long we keep your information
We retain personal information only for as long as necessary to provide the service, meet legal and tax record-keeping obligations, and resolve disputes, after which it is deleted or anonymised.
Security safeguards
We apply reasonable technical and organisational measures, including encryption in transit, access controls and monitoring, to protect personal information against loss, unauthorised access, and unlawful processing, as required by section 19 of POPIA.
Your rights
Under sections 23 to 25 of POPIA, you may request access to the personal information we hold about you, request correction or deletion of inaccurate or unlawfully held information, and object to processing carried out on the basis of legitimate interest. You may also object to and opt out of direct marketing at any time.
Children
StreetPlate is not intended for use by anyone under 18. We do not knowingly collect personal information from children without the consent required by section 35 of POPIA.
Direct marketing
We will only send direct marketing communications with your prior opt-in consent, as required by section 69 of POPIA, and you can withdraw that consent at any time.
Changes to this policy
We may update this policy from time to time. Material changes will be indicated by an updated effective date, and significant changes affecting your rights will be actively communicated.
Contact us and the Information Regulator
For any question about this policy or to exercise your rights, contact our Information Officer, Bongumusa Mthembu, at bongumusamthembu@streetplate.co.za. If you believe your information has been mishandled, you may also lodge a complaint with the Information Regulator (South Africa) at enquiries@inforegulator.org.za.