Privacy Policy

1. Who we are

Munch Measured Meals (“Munch”, “we”, “us”) supplies prepared meals and meal plans in South Africa. This policy explains how we handle personal information when you browse our website, use our meal-plan calculator, place an order, or contact us on WhatsApp.

For privacy questions or to exercise your rights, message 072 703 1630 and ask for the person responsible for privacy. You can also write to Munch Measured Meals, Allandale Exchange, 917 Morkels Close, Halfway House, Midrand, 1685. The responsible party is [registered legal entity name and legal status], trading as Munch Measured Meals.

2. Information we collect

Depending on how you interact with us, we collect your name, WhatsApp or telephone number, delivery and billing address, order details, payment status, and messages you send us. Account and checkout services may also collect login details and payment information. Please do not send card numbers, banking passwords or one-time PINs to us on WhatsApp.

If you use a calculator or request a tailored meal plan, you may provide goals, measurements, dietary preferences or allergy information. Only provide information relevant to your request. Allergy and other health information may be special personal information; we process it only with your explicit consent or another permission recognised by law. Declining to provide this information may limit our ability to assess a requested meal preference.

Our website and its service providers may collect technical information such as your IP address, device and browser type, pages visited, cookie identifiers and interactions. We also receive order and payment confirmations from our checkout and payment providers. If you give us another person’s delivery details, make sure you are authorised to do so and let them know about this policy.

3. Why we use your information

We use information to process and fulfil orders, organise delivery, communicate order updates, answer questions, manage complaints and replacements, maintain accounts, and provide requested meal-plan recommendations.

We also use relevant information to keep the website secure, prevent fraud, improve our service and comply with accounting, tax and other legal duties. Our grounds for processing include carrying out a contract or steps you request before a contract, complying with law, consent where required, and legitimate interests where lawful and balanced against your rights. Information needed to fulfil an order must be provided for us to accept and deliver it.

4. WhatsApp and marketing

WhatsApp is our primary contact channel. We use your number to answer your messages and send necessary order, delivery and support updates. Contacting us or placing an order does not automatically sign you up for promotional messages.

We send electronic direct marketing only with the permission required by POPIA, including consent or the applicable existing-customer exception for our own similar products. You can reply STOP to a promotional message or ask us on WhatsApp to remove you from marketing. Opting out does not prevent essential updates about an active order.

WhatsApp is provided by Meta and processes information under its own terms and privacy policy. Our staff and authorised service providers may access the messages needed to assist you. Avoid sending identity documents or detailed medical records unless specifically needed and an appropriate method has been agreed.

5. Cookies and similar technology

Cookies and similar tools can support checkout, account access, shopping baskets, security and saved preferences. Some tools may also measure website use or support advertising. The tools and purposes actually enabled should be reflected in the website’s cookie controls.

Where consent is required, optional tracking should operate only after you make that choice. You can change any available cookie preferences or manage cookies in your browser. Blocking essential cookies may prevent parts of checkout or account access from working.

6. Who receives information

We share information only where needed for a stated purpose, including with authorised staff, delivery partners, website and checkout providers, payment providers, communications providers and professional advisers. Delivery partners receive the contact and address details needed for delivery; they do not need your full meal-plan history or health information.

Our website uses Webflow, and the shop uses Ecwid by Lightspeed. Payments are handled through the payment options shown at checkout. These providers may process information on our behalf or as separate responsible parties for their own services. We require appropriate confidentiality and security arrangements from operators processing information for us.

We may disclose information where legally required, to resolve disputes or protect legal rights, or in a business transfer subject to lawful safeguards. We do not sell personal information.

7. Processing outside South Africa

Hosting, checkout, payment and messaging providers may process information outside South Africa. When we transfer personal information internationally, we must meet POPIA’s transfer requirements, for example through adequate protection under applicable law or a binding agreement, or another lawful basis. You can ask us about the relevant safeguards.

8. Retention and security

We keep information only for as long as needed for its purpose, legal recordkeeping, or an unresolved dispute. Order and financial records may need to be retained after an order is completed. Optional preference and health information should not be retained longer than needed. We then securely delete, de-identify or otherwise dispose of information, subject to lawful retention.

We use reasonable technical and organisational measures appropriate to the information and risks, including limiting access to people who need it. No online service can guarantee absolute security. If a security compromise requires notification under POPIA, we will notify the Information Regulator and affected people as required.

9. Your choices and rights

Subject to legal requirements and exceptions, you may ask whether we hold your personal information, request access, correct inaccurate information, request deletion of information we are not entitled to retain, object to applicable processing, and withdraw consent for future consent-based processing. Withdrawing consent does not invalidate earlier lawful processing.

Message 072 703 1630 with “Privacy request” and describe what you need. We may ask for proportionate proof of identity to protect your information. Do not send unnecessary identity documents. We will explain any lawful limits, fees or prescribed procedures that apply to a records request.

You can complain directly to the Information Regulator without first contacting us. Visit Information Regulator complaints page for current complaint procedures.

10. Children and policy updates

Our ordering and account services are intended for adults. A parent or guardian should place orders for children and only share a child’s information where necessary and with the authorisation required by law.

We may update this policy to reflect changes to our services, processing or legal duties. The latest version will show its update date. Where a change requires fresh consent or another notice, we will take the required steps.