Privacy Policy

Naughty Bean Coffee Privacy Policy

Effective Date: 2026-02-26

1. Introduction

Welcome to Naughty Bean Coffee. This Privacy Policy outlines how we collect, use, process, and protect your personal information in compliance with the Protection of Personal Information Act (POPIA) of South Africa. By using our services, including our Click & Collect web application, you agree to the practices described in this policy.

2. Information Collected

We collect personal information necessary to provide our services and process your orders. This includes:

• Contact Details: Name, email address, WhatsApp number, and telephone number.
• Account Information: Google OAuth profile details (email, profile picture, name) used for secure authentication.
• Transaction Details: Order history and preferences. Note: Payment details are securely processed by our third-party provider (Yoco) and are not stored on our servers.

3. Purpose of Collection

We process your personal information for lawful and specific purposes, including:

• Service Delivery: Processing orders, facilitating Click & Collect, and managing your account.
• Communication: Sending order updates (e.g., via WhatsApp or email) and responding to inquiries.
• Security & Improvement: Ensuring the security of our platform and analyzing usage to improve customer experience.

4. Data Subject Rights

Under POPIA, you have the right to:

• Access: Request access to the personal information we hold about you.
• Correction: Request updates or corrections to inaccurate information.
• Deletion: Request the deletion of your personal information, subject to legal and operational requirements.
• Withdraw Consent: Withdraw your consent for data processing at any time (which may impact your ability to use certain services).

To exercise these rights, please contact our Information Officer using the details provided below.

5. Third-Party Sharing

We do not sell or unlawfully share your personal information. We may share necessary data with trusted third parties solely for the purpose of service delivery:

• Payment Gateways: We use Yoco for secure payment processing. Data shared is strictly limited to transaction requirements.
• Legal Compliance: We may disclose information if required by law or to protect our legal rights.

6. Security Measures

We take appropriate, reasonable technical and organizational measures to secure your personal information. This includes secure authentication via Google OAuth, encrypted data transmission, and restricted access to our databases to prevent unauthorized use, loss, or alteration.

7. Retention Policy

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by South African law. Once the data is no longer needed, it is securely deleted or anonymized.

8. Information Officer Details

If you have any questions, concerns, or complaints regarding this Privacy Policy or how your data is handled, please contact our Information Officer:

• Email: hello@naughtybean.coffee
• Phone: +27 64 087 3973

9. Cookies

Our website uses cookies (e.g., session cookies for authentication via Django and HTMX) to ensure a smooth user experience. By using our site, you consent to our use of essential cookies.

This policy may be updated periodically to reflect changes in our practices or legal requirements. Please review it regularly.