Privacy

Last updated: October 2026.

What we collect, and why

• When you order: your name, WhatsApp number, and for delivery your suburb, address and any note for the rider. We need these to get the food to you and to message you about the order.
• When you join the waitlist: your email, suburb and whether you’re a customer, restaurant or rider, so we can tell you when we open near you.
• When you report a listing: which listing, what changed and any note you write.
• To stop abuse: a scrambled version of your internet address, which can’t be turned back into the address, used only to limit repeated requests.

What we don’t collect

Card details: you pay on PayFast’s page and we never see your card. Your location: if you tap “Near me”, distances are worked out on your phone and your location isn’t sent to us. We don’t use advertising trackers and we don’t sell data.

Who sees it

The restaurant you order from sees what it needs to prepare and hand over your order. The rider sees your name, number and delivery address. PayFast processes your payment under its own privacy policy. We use Cloudflare to host Sufra and store this data.

How long we keep it

Names, numbers, addresses and notes on orders are deleted after 90 days; we keep what was ordered, the amount and the date for our records. Waitlist details are kept until we’ve opened in your area or you ask us to remove them.

Your rights

Under POPIA you can ask what we hold about you, ask us to correct it, or ask us to delete it. Email salaam@sufra.co.za and we’ll reply within 30 days. If you’re not happy with our answer, you can complain to the Information Regulator of South Africa.

Halaal listings

Sufra reports halaal certification published by the bodies named on each listing, and the date we checked. We don’t certify any business.