This notice explains what personal information Herti Deli collects through this website, why we collect it, who we share it with and the rights you have. It is written to meet section 18 of POPIA. We keep it short on purpose: if anything is unclear, contact our Information Officer below.
1. Who we are
Q-MEATS (registration number 1992/027532/23), trading as Herti Deli, of 3 Top Rd, Anderbolt, Boksburg, 1459, is the “responsible party” for your personal information.
Information Officer: Eleni Constantopoulos · eleni@essmor.co.za · Tel 011 918 0918
2. What we collect and why
- Product enquiries (Enquire button): your name, email address, message and the products you asked about. We use these only to answer your enquiry and keep a record of it. Lawful basis: it is necessary to respond to your request.
- Weekly specials newsletter: your email address, plus the date, time and IP address when you subscribed. Used only to send you our specials. Lawful basis: your consent, which you can withdraw at any time.
- Herti Rewards pre-registration: your first and last name, mobile number, email address and date of birth, plus the date, time, IP address and browser details when you consented and confirmed your email. Used to tell you when the programme launches, set up your membership, send you programme news and specials by email, SMS and WhatsApp, give you a birthday treat and confirm you are 18 or older. Lawful basis: your consent.
- WhatsApp and phone:if you contact us on WhatsApp or by phone, we see the details you share and your number. Handled under WhatsApp’s own privacy policy and used only to help you.
- Technical data: our hosting provider keeps standard server logs (IP address, browser, pages requested) for security and to keep the site running. We do not run analytics or advertising trackers.
We collect the minimum we need. We never sell your information, and we do not use it for any purpose other than those listed above without asking you first.
3. Direct marketing
We only send marketing (specials, programme news) to people who have opted in, as required by section 69 of POPIA and section 45 of the Electronic Communications and Transactions Act. Every message identifies us and includes a free, one-click way to unsubscribe. Withdrawing consent is immediate and does not affect anything we have already done based on your earlier consent.
4. Children
Herti Rewards is open to people aged 18 and over only. We ask for your date of birth to enforce this and will delete registrations from anyone under 18.
5. Who we share it with
We use a small number of service providers (“operators” under POPIA) who process your information on our behalf and under written terms that require them to keep it secure and confidential:
- Supabase — database and file storage (servers outside South Africa).
- Vercel — website hosting (servers outside South Africa).
- SMTP2GO — sending transactional and marketing email (servers outside South Africa).
- Google — only if you choose to load the interactive map on our Contact page.
Because these providers store data outside South Africa, this is a cross-border transfer under section 72 of POPIA. Each provider is bound by contractual data-protection terms that offer protection substantially similar to POPIA. We do not share your information with anyone else unless the law requires it.
6. How long we keep it
- Enquiries: up to 12 months after we last dealt with you, then deleted.
- Newsletter subscribers: until you unsubscribe.
- Herti Rewards pre-registrations: unconfirmed registrations are deleted after 30 days. Confirmed registrations are kept until the programme launches and become your membership record, or are deleted if the programme does not launch. If you withdraw, we keep only a minimal suppression record so we do not contact you again by mistake.
7. How we protect it
Your information is stored in an access-controlled database with encryption in transit and at rest. Public visitors to this website cannot read it; only our staff and systems with the appropriate keys can. Confirmation and unsubscribe links are single-purpose tokens that are stored only in hashed form. If we ever suffer a breach that affects your information, we will notify you and the Information Regulator as required by section 22 of POPIA.
8. Your rights
Under POPIA you may, free of charge:
- ask whether we hold personal information about you, and request a copy of it;
- ask us to correct or delete information that is inaccurate, out of date or no longer needed;
- object to processing, and withdraw any consent you have given, at any time;
- complain to the Information Regulator (South Africa) at complaints.IR@justice.gov.za or inforegulator.org.za.
To exercise any of these rights, email our Information Officer at eleni@essmor.co.za. We may ask you to confirm your identity first, and we will respond within a reasonable time and in any event within 30 days. Marketing emails also carry unsubscribe and delete-my-details links you can use directly.
9. Cookies and local storage
This website does not set tracking or advertising cookies, and we do not use analytics. Two things are worth knowing:
- The Enquirebasket is saved in your browser’s local storage so your list survives a page refresh. It never leaves your device unless you send an enquiry, and you can clear it by emptying the basket or clearing your browser data. If you close an announcement bar, that choice is remembered the same way.
- The interactive map on the Contact page is provided by Google and only loads when you click “Load map”. Once loaded, Google may set its own cookies under Google’s privacy policy.
10. Changes to this notice
If we change how we use your information we will update this page and its version number. Where the change affects something you consented to, we will ask for your consent again.
See also our PAIA Manual.