Skip to content
From 3 Nov: delivery on Tuesdays and Fridays
From Here Food

Privacy notice

This notice was last updated on 28 October 2026.

Who we are

From Here Food (Pty) Ltd (registration number 2026/151169/07), Thornhill, Eastern Cape, is responsible for your personal information; our full address is in our Terms. Our information officer is Jordan Clark, director, registered with the Information Regulator. Write to admin@fromhere.co.za or WhatsApp 068 455 7419 about anything in this notice.

What we collect, and why

  • Your name, email and mobile number, at checkout or when you sign in: to take your order, confirm it on WhatsApp and let the driver reach you.
  • Your delivery address, its position on the map, and your directions for the driver, at checkout: to deliver your order and work out your delivery area and fee.
  • What you ordered, what it cost, and your delivery day, when you order or change an order: to prepare and deliver the order, make refunds, and keep the records the law requires.
  • A payment reference and the amounts paid or refunded, when you pay: to match your payment to your order. Your card details go to Yoco and never reach us.
  • A sign-in code, when you ask to sign in: to prove the number or inbox is yours. We keep only a scrambled value of it, and it is valid for 10 minutes.
  • Your internet address and the pages requested, on every visit: for security and fault-finding.
  • We note which link or campaign brought you to the shop, to see which of our posts and ads work.
  • Your customer record from our previous online shop, with your marketing choice, when we moved to this site: so your account carries over. We got it from our previous shop on Shopify, which Jordan Clark ran before this company took the shop over. We have never used the marketing choice and send no marketing based on it.

You need to give your name, mobile number and delivery address to order: without them we can't take or deliver your order. We also need your email: if our WhatsApp can't reach you, we email your order confirmation instead, and you can sign in with a code sent to it. Directions for the driver and "Use my current location" are up to you. If you tell us about an allergy, we use it only to answer you; please don't send us other health details.

Apart from the record moved from our previous shop, we collect nothing about you from anyone else, and we don't sell or share your information for advertising. The site uses no advertising or tracking cookies. It keeps one cookie while you are signed in, and your browser remembers which cart is yours. The cart itself, with any details you have typed, is held by us. If you tick "Remember my details on this device", your contact details and address are also kept in your browser, on your device only.

Why we may use it

  • To carry out your order (POPIA section 11(1)(b)).
  • To keep the order and payment records the law requires (section 11(1)(c); the Tax Administration Act and the Companies Act).
  • To keep the site secure, using internet addresses (our legitimate interest, section 11(1)(f)).
  • With your consent, for anything you choose to save or receive (section 11(1)(a)). You can withdraw your consent at any time.

Who receives your information

  • Yoco (South Africa) receives the amount to pay, and the card details you type on Yoco's own page, to take payment.
  • Meta, for WhatsApp (United States), receives your mobile number; your first name, order number, total, delivery day and any refund amount; sign-in codes; what you write to our WhatsApp number, and what our assistant is given to answer you (below). This is for order messages, sign-in, and answering your questions.
  • Shipday (United States) receives your name, mobile number, delivery address and map position, directions, the items, the order number and total, and a photo taken at delivery where the driver takes one. This is for sending the driver, and for the tracking page your "on its way" message links to.
  • Google Maps (United States) receives the address you type at checkout or send us on WhatsApp, or your position if you choose "Use my current location", to find the address on the map. We keep none of what Google is sent.
  • Sentry (Germany) receives error reports, with personal details removed before they are sent, to find faults.
  • Resend (United States) receives your email address, with a sign-in code or your order confirmation when we email you one; and, in the email we get for each new order, your name, what you ordered, the total and your delivery day.
  • Vercel, our website host, runs the site in Cape Town; it is a United States company and its main systems are in the United States. It receives your internet address and the pages you request, and what you type on the site passes through it on its way to us. It also measures how quickly each page loads on your device: the kind of page (never its full address), the loading times, your browser, device type and connection speed, and your country. It sets no cookie and keeps nothing that identifies you, and we use these measurements only to keep the site fast.
  • Our server provider, domains.co.za (South Africa), holds everything in our database and its backups, on a server we rent, to run the shop.

Each service works for us under a written agreement and may use your details only for that work. Meta also keeps what you write to our WhatsApp number under its own terms.

Sending your information abroad

Six of these services hold or may hold your details outside South Africa: Meta, Shipday, Google, Resend and Vercel in the United States, and Sentry in Germany. Germany is covered by the European Union's data protection law; the United States has no general privacy law like ours. We send your details abroad because it is needed to take, deliver and tell you about your order (POPIA section 72(1)(c)), and each service is bound by a written agreement to protect them (section 72(1)(a)).

Our WhatsApp assistant

Questions sent to our WhatsApp number are answered by an automated assistant run by Meta. If you ask it about an order, our system gives it that order's number, status, delivery day, items and total, when it was placed, until when it can be changed, and a link to it, and only for orders placed with the WhatsApp number you are writing from. It is never given the address on your order, your email or your payment details. If you ask whether we deliver to an address, that address is sent to Google to be found on the map and is not kept by us. We don't store what you write to that number; Meta does, under its own terms. If you message a person on our team, your messages and any photos stay in that WhatsApp chat. Please don't send health or payment details to the assistant.

Who can see your order

The link in your order confirmation opens a page showing your first name, the street and suburb, your directions, the items and the total, to anyone who has the link, for 14 days. After that, and for changing an order, you sign in. Signing in with a mobile number shows the orders delivered to that number.

How long we keep it

  • Orders and payment records: 7 years after the end of our financial year in which you ordered, or longer while a tax audit or dispute needs them. Then your details on them are removed.
  • Your customer record, saved addresses, and a record moved from our previous shop: until you ask us to delete them, apart from what the law makes us keep with your orders.
  • Sign-in codes: valid for 10 minutes.
  • The web server's record of internet addresses and pages: 14 days.
  • Backups: 30 days. Something we delete stays in the backups until they roll over.
  • The page your order confirmation links to: 14 days from the order.

How we protect it

The site is encrypted. Only people who work for us can sign in to our shop system. Sign-in codes are stored scrambled, and our services must keep your details safe. If we believe someone has got your details without permission, we tell you and the Information Regulator as soon as reasonably possible.

Your rights

  • You can ask us, free of charge, whether we hold information about you, and for a copy.
  • You can ask us to correct or delete it, or object to how we use it.
  • Write to admin@fromhere.co.za or WhatsApp us. You don't need a special form. To check it's you, we send a code to the number or email we hold for you.
  • We answer within 30 days. If the law requires us to keep something, we tell you.
  • Our PAIA manual explains how to ask for other records. Ask us for a copy.

If you are unhappy with our answer, you can complain to the Information Regulator: POPIAComplaints@inforegulator.org.za, using its Form 5; enquiries@inforegulator.org.za or 010 023 5200; Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; inforegulator.org.za.

Marketing

Messages about your orders are not marketing. Our "Delivered" message invites you to leave a review: to stop review requests, tap "Stop review requests" in that message, or reply STOP, or write to admin@fromhere.co.za, free of charge. We send no other marketing. If we start email marketing, every email will say who it is from and include a free way to stop it. Saying no never affects your orders.

Changes

If this notice changes, the new one is published here with its date.