Privacy policy

Effective 21 October 2026

Who we are

Kerdo is operated by Kerdo (Pty) Ltd (registration number 2026/831796/07), 114 Barry Hertzog Ave, Greenside, Johannesburg, 2193. We run online ordering pages for food businesses. When you order from one of those businesses, we process your information on its behalf and on our own, as this policy describes, in line with the Protection of Personal Information Act, 2013 (POPIA).

What we collect

• When you place an order: your name, mobile number, email address if you give one, what you ordered, any note for the kitchen, and the time of the order.
• If you ask for WhatsApp updates: that choice, and a record of each message we sent you about the order.
• If you work at a business that uses Kerdo: your name, email address, role and sign-in details.
• Technical information: your IP address, used briefly to limit abuse of the service, and for staff, the kind of device each sign-in came from.

We do not take card or other payment details. You pay the business at the counter.

How we use it

• To pass your order to the business you chose, so it can prepare it and contact you about it.
• To send you WhatsApp messages about that order, only if you ticked the box at checkout.
• To keep the service secure and to meet our legal obligations.

We do not sell your information, and we do not use it for advertising.

WhatsApp messages

Order updates are sent through the WhatsApp Business Platform, provided by Meta. To do that, your mobile number and the content of the message are shared with WhatsApp. The messages are only about the order you placed, such as when it has been accepted and when it is ready to collect. We do not send marketing messages. If you do not want them, leave the box unticked at checkout, or contact us and we will stop.

Who we share it with

• The food business you ordered from.
• WhatsApp (Meta), only for the messages described above.
• The companies that host our servers and database, under agreements that require them to protect it.
• Authorities, where the law requires it.

Cookies

We use one cookie, to keep staff signed in to the business dashboard. Customers ordering do not need an account and we use no tracking or advertising cookies.

How long we keep it

We keep your details for 12 months after your order, then delete them. Staff details are deleted 12 months after the person stops using the dashboard. If you ask us to delete your details sooner, we will, unless the law requires us to keep them.

Your rights

You may ask us what personal information we hold about you, and ask us to correct or delete it, or object to how we use it. Contact our information officer, Reno Davids, at [email protected]. If you are not satisfied with our answer, you may complain to the Information Regulator at inforegulator.org.za.

Changes

If we change this policy we will publish the new version here, with its effective date.