Privacy Policy.

This Privacy Policy explains how Insted (Pty) Ltd ("Insted") collects, uses, and protects personal information obtained through the Insted app and website (www.insted.co.za).

By using Insted, you consent to the collection and processing of your personal information in accordance with this Privacy Policy and the Protection of Personal Information Act, 2013 ("POPIA") of South Africa.

We collect the following personal information:

• Phone Number: Collected when you place an order so we can notify you when it is ready for collection.
• Payment Information: Card and payment details are processed directly by our PCI DSS-compliant third-party payment gateway. Insted does not store or access your card details.
• User Activity: Orders placed and basic usage data to ensure the platform functions correctly.
• Technical Data: Device type, browser, and IP address for security and fraud prevention purposes.

Your information is used to process and fulfil your orders, send SMS order notifications, prevent fraud and ensure platform security, comply with applicable South African laws and regulations, and improve the performance of the Insted platform.

We will not sell, rent, or share your personal information with any unaffiliated third parties, except where required by law or necessary for service provision. Order details are shared with the relevant venue operator solely to fulfil your order. Payment data is handled by our third-party payment gateway provider under their own privacy and security standards.

All personal information is stored on secure cloud infrastructure with appropriate technical and organisational measures to prevent unauthorised access, loss, or disclosure.

You have the right to request access to your personal information, correct any inaccuracies, or request deletion of your data. You may also lodge a complaint with the Information Regulator of South Africa at www.inforegulator.org.za.

To exercise your rights, contact us at support@insted.co.za.

We retain your personal data only for as long as necessary to fulfil our contractual or legal obligations. Transaction records are retained for a minimum of 5 years in accordance with South African financial regulations. We may anonymise or aggregate certain data for analytical purposes.

We may update this Privacy Policy from time to time. Any changes will be published on our website at www.insted.co.za. Continued use of the platform constitutes acceptance of the updated policy.