The Daily Roast

This notice explains what personal information The Daily Roast collects when you use this website or contact the shop, why we collect it, and what your rights are under the Protection of Personal Information Act, 4 of 2013 (POPIA).

Who is responsible for your information

The responsible party is The Daily Roast, 65 Great North Road, Benoni, 1622, Gauteng, South Africa. Requests and questions about personal information go to our Information Officer at dailyroast@committedbodies.co.za.

What we collect

• When you contact us by phone, WhatsApp or email: your name, your number or address, and your message, used only to answer you.
• When you give feedback through the survey behind the QR code on your till slip: the receipt number on the slip (so each slip can answer once), your star rating and anything you choose to type (what you had, your comments). If you add them, also your name and email address. Nothing else is stored with your answers, not your IP address or your device. The rest of this website has no forms and stores nothing you type.
• When you browse: nothing that identifies you. This site sets no cookies. Our hosting provider, Cloudflare, keeps a short visit log so we can check the site is working, fix broken links and spot attacks. Each entry records the page you opened, the date and time, whether it loaded, your browser and device type, the website you came from, and your approximate city and country, which Cloudflare estimates from your connection. Like any web host, Cloudflare sees your IP address in order to deliver the page and block attacks, but the visit log does not store it and uses no cookies. Each entry is deleted automatically within 7 days. Page views are also counted by Cloudflare Web Analytics, which uses no cookies and no personal identifiers. The fonts on this site are served from the site itself, so no font provider sees your visit.

Why we use it

• To answer your message or order question.
• To read your feedback and improve the shop. If you gave your email address and ticked the box, to email you to thank you and tell you what we are doing about it.
• To keep the website and our systems secure.
• To meet legal obligations, such as keeping financial records.

We do not sell personal information and we do not send marketing you did not ask for.

Who handles it for us

• Cloudflare hosts this website on servers around the world, keeps the 7-day visit log, counts page views and stores feedback answers in its D1 database.
• Uncloaked (uncloaked.co.za) builds and maintains the website as our operator under section 21 of POPIA, on our instructions only.

Where a provider stores information outside South Africa, it is bound by contract and its own privacy commitments to protect it, as POPIA section 72 requires.

How long we keep it

Visit-log entries are deleted within 7 days. Messages are deleted within 12 months unless we need them for an order or a legal reason. Feedback answers, including any name and email address, are deleted after 12 months. To have yours deleted sooner, email the Information Officer at the address above with the receipt number from your slip and we will remove it.

Your rights

• Ask what personal information we hold about you and get a copy.
• Ask us to correct or delete it.
• Withdraw consent at any time.
• Object to processing, including any direct marketing.
• Complain to the Information Regulator if you are not satisfied with our response.

Contact the Information Officer at the address above. We respond within 30 days.

Complaints

Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. Email complaints.IR@inforegulator.org.za or visit inforegulator.org.za.

Changes to this notice

Any change is posted here with a new date at the top.