Legal

Privacy Policy

Effective date: 1 June 2025 · Last updated: June 2026
Sarmic Financial Services (Pty) Ltd · Reg. 2001/003324/23 · trading as Curbside Coffee

        This policy explains what personal information we collect, why we collect it, how we use it, and what your rights are. We are committed to protecting your privacy in line with the Protection of Personal Information Act, 4 of 2013 (POPIA).
      

1. Who We Are

Responsible Party: Sarmic Financial Services (Pty) Ltd, trading as Curbside Coffee

Registration number: 2001/003324/23

Physical address: 41 Riesling Street, Somerset West, Western Cape, 7130, South Africa

Email: info@curbsidecoffee.co.za

Phone: 071 603 4781

We are the responsible party for the personal information you provide to us, as defined in POPIA. Where we engage third-party processors (e.g. courier companies, payment processors), we ensure appropriate agreements are in place.

2. What Personal Information We Collect

We may collect the following categories of personal information:

Contact details: name, email address, telephone number, delivery address
Order and transaction data: product selections, order history, payment confirmation references (we do not store card details — payments are processed by third-party providers)
Communications: enquiries and messages sent to us via email, contact forms, or WhatsApp
Website usage data: IP address, browser type, pages visited, time on site, referring URLs — collected via cookies and analytics tools (see Section 6)
Wholesale enquiry details: business name, estimated order quantities provided voluntarily in enquiry emails

We do not knowingly collect personal information from children under the age of 18 without parental consent.

3. Why We Collect Your Information (Purpose)

We collect and process personal information only for the following lawful purposes:

Processing and fulfilling online orders (beans, merchandise)
Communicating about your order status, delivery, or customer service queries
Responding to wholesale, general, or press enquiries
Improving our website and understanding how visitors use it
Sending marketing communications where you have opted in (you may opt out at any time)
Complying with legal obligations (e.g. tax records, consumer protection)

We will not use your personal information for any purpose incompatible with the above without notifying you and, where required, obtaining your consent.

4. Legal Basis for Processing

Under POPIA, we process your personal information on the following grounds:

Contractual necessity: to fulfil orders you have placed with us
Legitimate interest: to run and improve our website and business operations
Consent: for marketing emails and optional cookies (where consent is required)
Legal obligation: to comply with applicable South African law

5. How We Share Your Information

We do not sell your personal information. We may share it only with:

Courier and logistics partners — to fulfil delivery of your order (name and address shared)
Payment processors — who handle card transactions under their own security and privacy standards (we do not store card numbers)
Analytics providers — such as Google Analytics, which collects anonymised usage data (see Section 6)
Marketing platforms — such as Meta (Facebook/Instagram), where you have consented to personalised advertising (see Section 6)
Legal or regulatory authorities — where required by law or court order

All third-party processors are required to handle your data in accordance with applicable privacy laws.

6. Cookies and Analytics

Our website uses cookies and similar tracking technologies to understand how visitors use the site and to improve your experience.

Google Analytics 4 (GA4): We use Google Analytics to collect anonymised data about website traffic, including page views, session duration, and device type. This data is processed by Google and governed by Google's Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on.

Facebook Pixel: We may use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. This involves placing a small piece of code on our website that allows Meta to match visits to our site with actions taken on Facebook/Instagram. You can manage your ad preferences via your Facebook Ad Settings.

Essential cookies (e.g. cart session) are strictly necessary for the website to function and cannot be opted out of while using the site.

7. How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes outlined above, or as required by law:

Order and transaction records: 5 years (South African tax and accounting requirements)
Customer service communications: 2 years
Marketing consent records: until you withdraw consent, plus 1 year
Website analytics data: as governed by Google Analytics / Meta retention settings (typically 14 months for GA4)

8. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include encrypted connections (HTTPS), restricted staff access, and use of reputable third-party processors.

No transmission over the internet is 100% secure. If you believe your personal information has been compromised, please contact us immediately.

9. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

Access the personal information we hold about you
Correct or update inaccurate information
Request deletion of your personal information (subject to legal retention requirements)
Object to the processing of your personal information for marketing purposes
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at info@curbsidecoffee.co.za. We will respond within a reasonable time and no later than 30 days.

Information Regulator (South Africa)
Website: www.justice.gov.za/inforeg
Email: inforeg@justice.gov.za

10. Third-Party Links

Our website may contain links to third-party websites (e.g. Google Maps, Instagram). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will always reflect the most recent version. Continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, to exercise your rights, or to report a concern:

Curbside Coffee (Sarmic Financial Services (Pty) Ltd)
41 Riesling Street, Somerset West, 7130
info@curbsidecoffee.co.za
071 603 4781