Privacy Policy

Meat Drop Privacy Policy

Last Updated: 24 April 2026

This Privacy Policy describes how Meat Drop (Pty) Ltd collects, uses, stores, and protects your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") of the Republic of South Africa.

1. Who We Are

Meat Drop is a digital platform owned and operated by Meat Drop (Pty) Ltd ("Meat Drop", "we", "us", "our"), registered in the Republic of South Africa. We connect customers with local butchers and independent drivers for on-demand fresh meat delivery services. Responsible Party (as defined in POPIA): Meat Drop (Pty) Ltd Email: official@meatdrop.co.za

2. Why We Collect Your Personal Information

We collect and process your personal information only for specific, lawful purposes: � To create and manage your account on the Meat Drop platform. � To process and fulfil your orders, including coordinating delivery logistics. � To calculate and display delivery fees based on your geographic location. � To send transactional notifications (order status, PIN delivery, receipts). � To process payout requests for butcher and driver partners. � To comply with applicable South African law, including the Prevention and Combating of Corrupt Activities Act and applicable tax legislation. � To improve our platform's functionality, safety, and user experience.

3. What Personal Information We Collect

Depending on how you use Meat Drop, we may collect: � Identity information: full name, profile photo. � Contact information: mobile phone number, email address. � Location data: GPS coordinates and delivery addresses you provide during checkout. This data is used solely to calculate delivery fees and complete deliveries. � Financial information: bank account details (account holder name, bank name, account number, branch code) for partner payout processing only. We do not store full card details. � Device & usage data: FCM device tokens for push notifications, IP address, browser type, and pages visited (collected via Firebase Analytics). � Order history: items ordered, amounts, timestamps, and delivery status. � Photos: pickup photos captured by drivers as required by our Photo-Lock verification process.

4. Legal Basis for Processing (POPIA �11)

We process your personal information only when: (a) You have given us your specific, informed consent (e.g., enabling push notifications); (b) It is necessary to fulfil a contract to which you are a party (e.g., processing your order); (c) It is required by law; or (d) It is necessary to protect a legitimate interest of yours or ours, provided your rights are not overridden.

5. How We Share Your Information

We do not sell your personal information. We share it only as follows: � With drivers: your delivery address is shared with the assigned driver ONLY after they have uploaded a verified pickup photo (our "Photo-Lock" gate). At no point prior to this is your address visible to any driver. � With butcher partners: your order contents are shared with the relevant butcher to prepare your cut. � With Firebase (Google): our infrastructure provider for authentication, database storage, cloud functions, and analytics. Google Firebase processes data on our behalf under a Data Processing Agreement. � With law enforcement: if required to do so by a court order, law enforcement authority, or other governmental or legal body in South Africa. We do not transfer your personal data outside the Republic of South Africa except to the extent that Firebase infrastructure operates internationally, subject to Google's standard contractual clauses.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Upon deletion of your account (whether self-initiated or admin-initiated), we purge your personal data from our active systems within 24 hours. Certain anonymised or aggregated statistical records may be retained indefinitely. Audit logs referencing deleted accounts are retained for 5 years as required for legal compliance, but contain no information that can identify you beyond your former user ID.

7. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act 4 of 2013 ("POPIA"), you have the right to: � Access: Request a copy of the personal information we hold about you. � Correction: Request that we correct inaccurate or incomplete information. � Deletion: Request erasure of your personal information (the "right to be forgotten"). You may exercise this right directly in the app via Settings ? Delete My Account. � Objection: Object to the processing of your personal information for direct marketing purposes. � Complaints: Lodge a complaint with the Information Regulator of South Africa at inforeg.org.za. To exercise any of the above rights (other than account deletion), please contact us at official@meatdrop.co.za with the subject line "POPIA Data Request". We will respond within 30 days.

8. Security

We implement industry-standard technical and organisational security measures including: � Firebase Security Rules that restrict data access to authorised users only. � Server-side validation of all sensitive operations (PIN verification, account deletion) via Cloud Functions. � Transport Layer Security (TLS/HTTPS) for all data in transit. � The Photo-Lock mechanism that prevents driver access to your delivery address until a verified pickup photo is on record. No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Cookies & Tracking

Meat Drop is a Progressive Web App (PWA). We use: � localStorage: to persist your cart, theme preference, and halal filter setting. This data never leaves your device. � Firebase Analytics (Google): anonymised usage statistics to improve the platform. � Firebase Cloud Messaging: to deliver push notifications to your device. We do not use third-party advertising cookies or tracking pixels.

10. Children

Meat Drop is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, where material, notify you via a push notification or in-app banner. Your continued use of Meat Drop after such changes constitutes acceptance of the revised policy.

12. Contact Us

For any privacy-related questions, complaints, or data requests, contact: Meat Drop (Pty) Ltd � Information Officer Email: official@meatdrop.co.za Platform: meatdrop.co.za

Copyright © 2026 Meat Drop (Pty) Ltd

All rights reserved.