Privacy Policy

Last updated: 25 June 2026

Duane Breedt Consultant (Pty) Ltd, trading as Luss N Chow ("Luss N Chow", "we", "us"), operates the Luss N Chow customer, driver, and merchant apps and the website at lussnchow.co.za (together, the "Platform"). This policy explains what personal information we collect, why, how we use it, who we share it with, and the rights you have over it — in line with South Africa's Protection of Personal Information Act, 2013 (POPIA).

We are the "responsible party" under POPIA for the personal information described in this policy. If you have questions, contact us at info@lussnchow.co.za or WhatsApp +27 63 899 6165.

1. Information we collect

From everyone (customers, drivers, merchants)

• Name, email address, phone number, and password (or Google/Apple sign-in identifier) when you create an account.
• Device push-notification token, so we can send you order and dispatch updates.

From customers specifically

• Delivery addresses and, where you grant permission, your device's location to help us find the address accurately.
• Order history: what you ordered, from which restaurant, and order value.
• Payment is processed by PayFast (a licensed South African payment gateway) — we never see or store your card or bank details ourselves. We only receive confirmation that payment succeeded and a PayFast transaction reference.

From drivers specifically

• Live location while you're online and available for deliveries, so we can offer you nearby orders and let customers track their delivery.
• Identity and vehicle documents (ID, driver's licence, proof of vehicle) for verification before you can accept deliveries.
• Banking details, for weekly payouts.

From merchants specifically

• Business details: restaurant name, address, trading hours, menu items and photos.
• Order and revenue data, used to calculate commission and weekly payouts.
• Banking details, for weekly payouts.

2. Why we process your information

We process personal information to: create and manage your account; take, prepare, dispatch, and deliver orders; process payments and weekly payouts; verify driver identity and vehicle documents; send order, dispatch, and payout notifications; respond to support requests; detect fraud and abuse; and meet our legal and tax obligations.

3. Who we share it with

We share personal information only where necessary to run the Platform:

• The other parties to your order — a customer's name, delivery address, and order details are shared with the merchant and driver fulfilling that specific order; a driver's name and live location are shared with the customer and merchant for that order.
• PayFast — to process payments. PayFast has its own privacy policy governing the card/banking details it collects directly from you.
• Google Firebase / Google Cloud (our hosting, database, authentication, and push-notification provider) and Cloudflare (our payment-processing backend) — both act as our data processors under contract, and may store or process data outside South Africa (see Section 4).
• Our email provider, for transactional emails (order confirmations, payout notices).
• Law enforcement or regulators, where legally required.

We do not sell personal information to third parties, and we do not use your data for third-party advertising.

4. Cross-border storage

Our backend infrastructure runs on Google Cloud's europe-west1 region, with our primary database hosted in Google Cloud's africa-south1 (Johannesburg) region. Some processing (e.g. authentication, push notifications) may involve servers outside South Africa. Where this happens, we rely on our processors' compliance with internationally recognised data protection standards as the basis for the transfer, as required by POPIA section 72.

5. How long we keep it

We retain account and order data for as long as your account is active, and for a reasonable period after closure to meet tax, accounting, and dispute-resolution obligations (typically up to 5 years for financial records, per South African tax law). You can request earlier deletion — see Section 7.

6. Security

We use industry-standard safeguards including encrypted connections (HTTPS/TLS), Firebase Authentication for login, and role-based Firestore security rules that restrict each account type to only the data it needs. No system is 100% secure, but we work to keep your information protected and will notify affected users and report any security breach involving personal information to the Information Regulator within 72 hours of becoming aware of it, as required by POPIA section 22.

7. Your rights

Under POPIA, you have the right to:

• Know what personal information we hold about you and request a copy of it — email info@lussnchow.co.za with the subject line "Data Access Request". We will respond within 30 days.
• Ask us to correct inaccurate or outdated information.
• Ask us to delete your account and associated personal information, subject to the retention obligations described in Section 5. You can request account deletion directly from the Settings screen in any of our apps, or by emailing info@lussnchow.co.za with the subject line "Data Deletion Request". We will respond within 30 days.
• Object to processing of your information in certain circumstances.
• Lodge a complaint with South Africa's Information Regulator (inforegulator.org.za) if you believe we've handled your information unlawfully.

8. Information Officer

As required by POPIA, we have designated an Information Officer responsible for overseeing our compliance with POPIA and handling data subject requests:

Dino Breedt
Duane Breedt Consultant (Pty) Ltd t/a Luss N Chow
Email: info@lussnchow.co.za
WhatsApp: +27 63 899 6165

Our Information Officer is in the process of being registered with the Information Regulator as required by POPIA regulations.

9. Children

The Platform is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will remove it.

10. Cookies (website)

Our website uses only essential cookies needed for the site to function. We do not use third-party advertising or tracking cookies.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the app or email before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.