Last updated: 1 October 2026
1. Who we are
AlfaCaters is owned and operated by HENSIMFRA (Pty) Ltd (registration number 2024/105355/07). HENSIMFRA (Pty) Ltd is the “responsible party” for your personal information under the Protection of Personal Information Act 4 of 2013 (“POPIA”). Its registered office is at C2 101 Mamone Maroteng, Ga Sekwati, Limpopo, 1063.
Our Information Officer is Kutullo Tumishi Simon Nkopodi. For any privacy question or request, email privacy@alfacaters.com or write to PO Box 1260, Jane Furse, 1085.
We collect only what we need to run the Platform, we never sell your personal information, and we keep it secure.
2. Information we collect
Everyone
- Account details: name, email address, phone number and the role you choose (customer or caterer).
- Usage and device information: app version, device type, pages viewed, and error logs, used to keep the Platform working and secure.
- Communications: messages sent through booking chat and emails to our support team.
- Launch list: if you ask to be notified when bookings open, the email address you give us. We use it only to tell you about our launch, and you can ask us to remove it at any time.
Customers
- Event details: event type, date, guest count, dietary requirements and the event address.
- Bookings and payments: what you booked, amounts paid and refunded. Card payments are handled by our payment provider, and we do not see or store your full card number.
- Reviews you write, including any photos.
Caterers
- Business details: business name, type, description, service area, base address, menus, prices and photos.
- Verification documents: a copy of your ID or passport, a bank confirmation letter and, if you choose to upload them, business registration documents and a certificate of acceptability.
- Payout details: bank name, account holder, account type and account number.
Your ID document contains an identity number, which we treat with extra care. We collect it only to verify who you are and to meet our legal obligations and the requirements of our payment provider.
3. Why we use your information
| Purpose | Lawful basis under POPIA |
|---|---|
| Creating and running your account | Performance of our agreement with you |
| Showing caterers, taking bookings and processing payments and refunds | Performance of our agreement with you |
| Verifying caterers and preventing fraud | Legitimate interest and legal obligations |
| Sharing booking details between a customer and their caterer | Performance of our agreement with you |
| Handling support requests, disputes and reviews | Legitimate interest |
| Meeting tax, financial and money laundering prevention obligations | Legal obligation |
| Improving the Platform using usage data | Legitimate interest |
| Telling you when bookings open, if you joined our launch list | Your consent, which you can withdraw at any time |
| Sending marketing emails or messages | Your consent, which you can withdraw at any time |
4. Who we share it with
- Your caterer or customer. When you make or accept a booking, we share what is needed to deliver it. Phone numbers and email addresses are only shared once a booking is confirmed.
- Payment providers, to process payments, refunds and payouts and to meet their verification requirements.
- Service providers who help us run the Platform, such as cloud hosting, database, email delivery and customer support tools. They may only use your information on our instructions.
- Authorities, where the law requires it, or to protect the safety of our users.
- A buyer or successor, if our business is sold or restructured, under the same protections.
We never sell or rent your personal information.
5. Information stored in other countries
Some of our service providers store data on servers in other countries. When this happens, we make sure the information is protected by laws or binding agreements that provide a level of protection substantially similar to POPIA, as section 72 of POPIA requires.
6. How long we keep it
We keep personal information only as long as we need it for the purposes above or as the law requires:
- Account information: while your account is open, and for a reasonable period afterwards to resolve queries.
- Booking and payment records: at least 5 years, to comply with tax and financial record keeping laws.
- Verification documents: while you are an active caterer, and for up to 5 years after your account closes, to meet our legal and fraud prevention obligations.
- Marketing preferences: until you withdraw consent.
When information is no longer needed, we delete or anonymise it.
7. How we protect it
- Encryption in transit (HTTPS) and at rest.
- Strict access controls, so users can only see their own data and the data needed for their bookings.
- Verification documents are kept in private storage that only the caterer and authorised AlfaCaters staff can access.
- Staff access is limited to people who need it to do their job.
If a security compromise affects your personal information, we will notify you and the Information Regulator as POPIA requires.
8. Your rights
Under POPIA, you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Delete your information, where we are not required to keep it.
- Object to us processing your information on the basis of legitimate interest.
- Withdraw consent for marketing at any time, using the unsubscribe link or by contacting us.
- Complain to the Information Regulator.
To make a request, email privacy@alfacaters.com. We may need to confirm your identity first, and we will respond within a reasonable time, normally 30 days.
You can contact the Information Regulator (South Africa) through inforegulator.org.za or at complaints.IR@inforegulator.org.za.
9. Location information
We use the event address you enter to show caterers who serve that area and to work out travel fees. If you allow location access on your device, we use it only to suggest your area. You can turn it off at any time in your device settings.
10. Children
The Platform is not intended for anyone under 18, and we do not knowingly collect personal information from children.
11. Cookies
See our Cookie Notice for how we use cookies and similar technologies.
12. Changes to this policy
We will update this policy as the Platform changes. If we make significant changes, we will tell you by email or in the app before they take effect.