Privacy Policy

1. Who We Are

Prepd Foods (Pty) Ltd ("Prepd", "we", "us") operates this website and our chef-prepared meal delivery service from Cape Town, South Africa. This policy explains what personal information we collect, why, and what rights you have over it, in line with South Africa's Protection of Personal Information Act (POPIA).

2. Information We Collect

We only collect what we need to run your order, your account, and — if you opt in — to keep you posted about Prepd. Depending on how you use the site, that can include:

• Account details: name, email address, password (stored as a secure hash, never in plain text).
• Order details: delivery address, suburb/area, delivery or pickup preference, meal selections, allergens and dietary preferences, and your goals/servings from the order quiz.
• Optional profile details: gender and what brought you to Prepd — both explicitly optional and only used to understand our customers better.
• Gift card details: sender and recipient name, recipient email, and any personal message you write.
• Contact and support messages: your name, email, topic, and message when you contact us.
• Waitlist and newsletter signups: name, email, and suburb, if you join a waitlist or sign up for offers.
• Marketing consent: whether you've agreed to hear from us, and when you gave that consent.

3. Cookies & Analytics

We use Google Analytics to understand how visitors use the site (pages viewed, general location, device type) and Microsoft Clarity to see anonymised session recordings and heatmaps that help us fix confusing pages. Both are configured only when the site owner has connected a real account — until then, no analytics scripts load at all. Neither tool is used to identify you personally, and you can block them at any time using your browser's cookie or tracking-protection settings.

4. How We Use Your Information

• To take, prepare, and deliver your orders — including working out your delivery date, delivery fee, and any first-order discount you qualify for.
• To create and manage your account, and to let you check out as a guest without one.
• To respond to contact messages and provide customer support.
• To send you marketing messages, but only if you've ticked the consent checkbox — and you can withdraw that consent at any time.
• To understand and improve the site, using the analytics described above.
• To meet our legal and accounting obligations.

5. Who We Share It With

We don't sell your personal information. We share it only with the service providers that keep Prepd running:

• Our database and hosting providers (Supabase and Vercel), who store and serve the site's data securely.
• Google Analytics and Microsoft Clarity, for the analytics described above, if enabled.
• In future, a delivery partner (currently Picup) to fulfil deliveries — this integration is off by default and only shares what's needed to complete a delivery once enabled.
• When online payment processing is introduced, a reputable third-party payment processor — card details will go directly to them and will never be stored on Prepd's own servers.

6. How Long We Keep It

We keep account and order information for as long as your account is active or as needed to meet legal, tax, and accounting requirements. Contact messages, waitlist entries, and newsletter signups are kept until you ask us to delete them or unsubscribe.

7. Your Rights Under POPIA

You have the right to:

• Ask what personal information we hold about you, and get a copy of it.
• Ask us to correct information that's out of date or wrong.
• Ask us to delete your information, subject to legal or accounting retention requirements.
• Object to or restrict how we use your information, including withdrawing marketing consent at any time.
• Lodge a complaint with South Africa's Information Regulator if you believe we've mishandled your information.

8. Children's Privacy

Prepd is not directed at children, and we don't knowingly collect personal information from anyone under 18 without the consent of a parent or guardian as required by POPIA.

9. Security

We use industry-standard measures — including encrypted connections and hashed passwords — to protect your information. No online service can guarantee perfect security, but we take reasonable, appropriate steps to keep your data safe.

10. Changes to This Policy

We may update this policy as Prepd grows — for example, as we add online payments or new delivery partners. We'll update the date below when we do, and material changes will be reflected here.

11. Contact Us

Questions about this policy or your information? Reach us via the Contact page or email hello@prepd.co.za.