Privacy Policy
Last updated 19 August 2026 · Applies to liegewaffles.co.za
This policy explains what personal information Liège Waffles (operated by Quiver Social Impact Café, a project of the Quiver Foundation NPC) collects when you order through this website, why we collect it, and what rights you have over it under South Africa's Protection of Personal Information Act (POPIA).
Who we are
The "responsible party" for the personal information described here is Quiver Foundation NPC, trading as Quiver Café, 96 Victoria Rd, Woodstock, Cape Town. For any privacy question or request, contact us at info@quiverfoundation.org.
What we collect
When you place an order, we collect:
- Your name — so we know whose order it is when you collect it.
- Your phone number — so we can reach you if there's a problem with your order.
- What you ordered — the items, quantities, and total, so we can prepare it.
- WhatsApp community opt-in — only if you tick the box asking to join, we note that you'd like to be added.
We do not collect or see your card details at any point. Payment is handled entirely by Yoco, our payment processor — your card information goes directly to them over an encrypted connection and never touches our servers.
Why we collect it
We use this information only to prepare, identify, and hand over your order, and to contact you if something needs your attention (for example, an issue with payment or an item that's sold out). Providing your name and phone number is necessary to complete an order — without them, we can't fulfil it. Everything else (like the WhatsApp opt-in) is optional.
Who we share it with
We share the minimum necessary information with:
- Yoco, to process your payment. Yoco has its own privacy policy governing how it handles payment data.
- The Quiver Café team, who see order details (items, name, phone) so they can prepare and hand over your order.
We do not sell, rent, or use your information for advertising, and we do not share it with anyone else beyond what's described here.
How long we keep it
We keep order information only for as long as reasonably needed to fulfil and reconcile your order, and for basic accounting records where required by law. We don't maintain a marketing database or long-term customer profile from this information.
Cookies and tracking
This site does not use advertising or tracking cookies. We don't run analytics that profile individual visitors.
Your rights
Under POPIA, you have the right to:
- Ask what personal information we hold about you, and request a copy of it.
- Ask us to correct or delete information that's inaccurate or no longer needed.
- Object to how we're using your information.
- Lodge a complaint with South Africa's Information Regulator if you believe we've mishandled your information — see inforegulator.org.za for how to do this.
To exercise any of these rights, email info@quiverfoundation.org and we'll respond promptly.
Security
This site is served entirely over HTTPS, and order data is transmitted and stored using industry-standard encryption. We keep the systems handling your information limited to what's strictly needed to run the café.
Changes to this policy
If this policy changes, we'll update the date at the top of this page. Significant changes will be reflected here before they take effect.