PRIVACY POLICY

CAFE ZEST | GORDON'S BAY, SOUTH AFRICA

Effective Date: 5 November 2026

1. Introduction

Welcome to Cafe Zest.

At Cafe Zest, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, contact us, make a reservation or interact with our restaurant.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African legislation.

For the purposes of this Privacy Policy, "Cafe Zest", "we", "us" and "our" refer to Cafe Zest, operated by NARDOS Hospitality Group (Pty) Ltd, the responsible party under POPIA.

By using our services, you acknowledge that your personal information may be processed as described in this Privacy Policy, subject to your rights under applicable law.

2. Information We Collect

Depending on how you interact with us, we may collect the following information:

  • Personal details: Your name, surname, email address and telephone number.

  • Reservation information: Booking dates, times, number of guests, special requests and relevant preferences.

  • Communication information: Details submitted through our website, email, telephone, WhatsApp or social media platforms.

  • Technical information: IP addresses, browser type, device information, website usage data and cookies.

  • Transaction information: Payment confirmations, transaction references and relevant billing details, where applicable.

  • Voluntary information: Dietary preferences, allergy information or other details you choose to provide to assist us in delivering our services.

We collect only information that is reasonably necessary for legitimate business purposes.

Where information concerning allergies or health is provided, we will handle it with appropriate confidentiality and process it only where permitted by law.

3. How We Use Your Information

Cafe Zest may use personal information for the following purposes:

  • Managing restaurant reservations and responding to enquiries.

  • Communicating with guests regarding bookings, requests or restaurant services.

  • Providing an efficient and personalised dining experience.

  • Processing payments and maintaining necessary business records.

  • Improving our website, services and customer experience.

  • Sending promotional communications or restaurant updates where legally permitted.

  • Complying with legal, regulatory, accounting and tax obligations.

  • Protecting our website, customers, employees and business against fraud or security threats.

We will not use your personal information for purposes that are incompatible with the purpose for which it was originally collected, unless permitted by applicable law.

4. Legal Grounds for Processing Information

We process personal information only where we have a lawful justification under POPIA, including where:

  • You have provided valid consent.

  • Processing is necessary to fulfil a contract or take steps relating to a requested service.

  • Processing is necessary to comply with a legal obligation.

  • Processing protects a legitimate interest of the individual concerned.

  • Processing is necessary for our legitimate business interests, where permitted by law.

Providing personal information is generally voluntary. However, certain information may be necessary to complete a reservation, respond to an enquiry or provide a requested service.

If the required information is not supplied, we may be unable to fulfil that particular request.

5. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve functionality, understand visitor activity and enhance the browsing experience.

Cookies may include:

  • Essential cookies: Necessary for the website to function correctly.

  • Analytical cookies: Used to understand website traffic and visitor interactions.

  • Functional cookies: Used to remember preferences and improve functionality.

  • Marketing cookies: Where applicable, used to measure advertising effectiveness and deliver relevant content.

Where required by law, we will obtain appropriate consent before using non-essential cookies or similar tracking technologies.

You may manage cookies through your browser settings and, where available, our website's cookie preferences.

Disabling certain cookies may affect website functionality.

6. Marketing Communications

Cafe Zest may occasionally share news, special events, menu updates or promotional offers with guests who have lawfully agreed to receive these communications.

We will only send electronic direct marketing where:

  • You have provided valid consent; or

  • You are an existing customer and the communication qualifies for an applicable exception under POPIA.

Where relying on consent, we will not treat silence, inactivity or a failure to opt out as consent.

You may withdraw your consent or opt out of receiving direct marketing communications at any time by using the unsubscribe facility provided or contacting us directly.

We do not sell or rent personal information to third parties for their independent marketing purposes.

7. Sharing of Personal Information

We respect the confidentiality of your personal information and do not disclose it unnecessarily.

Where reasonably required, we may share relevant information with:

  • Website hosting and technical support providers.

  • Reservation and booking service providers.

  • Payment processors and financial service providers.

  • Professional advisers, including accountants and legal representatives.

  • Regulatory bodies or law enforcement authorities where disclosure is required or authorised by law.

Third-party service providers processing personal information on our behalf must be subject to appropriate confidentiality and security obligations, as required by POPIA.

Where our website links to external websites, booking platforms or social media services, those services may have their own privacy policies and information-handling practices.

8. Protection and Security of Information

Cafe Zest takes reasonable technical and organisational measures to safeguard personal information against:

  • Unauthorised access or disclosure.

  • Accidental loss or destruction.

  • Unlawful processing or misuse.

  • Unauthorised alteration or damage.

Access to personal information is limited to authorised persons who reasonably require it to perform their duties.

Although we take reasonable precautions, no electronic transmission or storage system can be guaranteed to be completely secure.

Should a security compromise occur, we will investigate and take appropriate action, including notifying the Information Regulator and affected individuals where required under POPIA.

9. Retention of Personal Information

We retain personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected, unless a longer period is required or permitted by law.

Retention periods depend on the nature of the information, our legitimate business needs and applicable legal obligations.

Certain financial and tax-related records may need to be retained for at least five years, or longer where required by South African law.

Once information is no longer required, it will be securely deleted, destroyed or de-identified, as appropriate and in accordance with applicable legislation.

10. Your Rights Under POPIA

Under South African law, you have certain rights regarding your personal information, including the right to:

  • Request confirmation of whether we hold personal information about you.

  • Request access to personal information held by us, subject to applicable legal requirements.

  • Request correction of inaccurate, outdated or incomplete information.

  • Request deletion or destruction of information where legally permitted.

  • Object to certain processing of your personal information.

  • Withdraw consent where processing is based on consent.

  • Object to direct marketing.

  • Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact us using the details provided below.

We may request reasonable proof of identity before processing a request to protect your information from unauthorised disclosure.

Requests will be handled in accordance with applicable legislation, including POPIA and the Promotion of Access to Information Act 2 of 2000 ("PAIA").

11. International Data Transfers

Certain third-party technology providers, website hosting services or reservation platforms may process or store information outside South Africa.

Where personal information is transferred internationally, we will ensure that the transfer complies with section 72 of POPIA, including by relying on appropriate data protection safeguards or another lawful basis for the transfer.

12. Children's Personal Information

Our website is not specifically directed at children under the age of 18.

We do not intentionally collect or process children's personal information without the necessary legal authorisation, including consent from a competent person where required.

If we become aware that children's information has been collected unlawfully, we will take appropriate steps to address the situation.

13. Changes to This Privacy Policy

Cafe Zest reserves the right to update this Privacy Policy from time to time to reflect changes in legislation, business operations or website functionality.

Any amendments will be published on our website, together with the updated effective date.

We encourage visitors to review this policy periodically.

14. Contact Information

If you have any questions regarding this Privacy Policy, the processing of your personal information, or wish to exercise your rights under POPIA, please contact:

Cafe Zest

Gordon's Bay, Western Cape, South Africa

Registered Business Name: NARDOS Hospitality Group (Pty) Ltd

Physical Address: 71 Beach Road, Gordons Bay, Cape Town, South Africa

Email: info@nardos.co.za

Telephone: +27 (0)21 200 2605

Information Officer: Marzanne Schreiber - General Manager

Information Officer Email: info@nardos.co.za

15. Information Regulator of South Africa

If you believe your personal information has been processed unlawfully or that your rights under POPIA have been infringed, you may lodge a complaint with the Information Regulator of South Africa.

Information Regulator (South Africa)

Website: www.inforegulator.org.za

Email: POPIAComplaints@inforegulator.org.za

Telephone: 010 023 5200

Toll-Free: 0800 017 160

Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.

© 2026 Cafe Zest. All Rights Reserved.