Privacy Policy

Last updated: 6 October 2026

Who we are and how to contact us

WEBCHEF (Pty) Ltd, registration number 2023/965120/07, operates as WebChef Hospitality Consultants. This notice explains how we handle personal information through our website, business enquiries, business development and consulting services, including health checks and WebChef HOPS.

Privacy contact: Donald Kiley
Email: donald@webchef.co.za
Phone: +27 71 974 3732
Business address: House 2, Swinburne, Harrismith, 9880, South Africa
Website: https://webchef.co.za/

Information we collect and where it comes from

When you contact us, complete a form or request a service, we may receive your name, business and role, email address, telephone number, correspondence, and information you choose to provide about your operation. Assessments may include business performance figures, operational records and information about relevant business contacts. Please supply only information needed for the enquiry or agreed work.

We may obtain professional contact details and business information from public business websites, directories, professional profiles, referrals or an existing business relationship. Public availability does not by itself mean that you have consented to marketing. You can ask us where we obtained your details.

Our website and its service providers may process technical information such as IP addresses, browser and device details, pages visited, interactions and security logs. If you leave a public comment, the name and comment you submit may be visible to other visitors; contact details and technical information may also be held for administration, moderation and spam prevention.

Why we use information

We use relevant information to respond to enquiries, arrange discussions, prepare proposals, carry out requested assessments and consulting work, communicate with clients and business contacts, maintain business records, improve the website and services, prevent abuse, and meet legal obligations.

Depending on the purpose, processing may be based on your consent, steps you request before a contract, performance of a contract, a legal obligation, or a legitimate interest permitted by the Protection of Personal Information Act, 2013 (POPIA). A legitimate interest does not replace the specific rules for electronic direct marketing.

Providing enquiry and assessment information is generally voluntary. If essential contact details or information needed for the requested work are missing, we may be unable to respond or provide that service. Where particular information is legally required, we will explain the requirement when requesting it.

Marketing and your choice

Electronic direct marketing is subject to POPIA. We seek consent where required and rely on the existing-customer exception only where its conditions are met. Where the law permits, we may approach a person once to request marketing consent if they have not previously withheld it. Receiving that request does not subscribe you to future marketing.

You may decline marketing or withdraw consent at any time, without charge, by replying to the message, using an unsubscribe option where provided, or emailing donald@webchef.co.za. We will stop the marketing concerned and may retain a minimal do-not-contact record to respect your choice. Withdrawing consent does not affect processing that was lawful before withdrawal or information we must retain for another lawful purpose.

Service providers, cloud tools and overseas processing

Information may be processed by service providers supporting website hosting, forms, email, communications, storage, security, analytics and business administration. We also use cloud and AI-assisted tools to support business research, correspondence, assessments and reports. Information included in those workflows may be processed and retained by the relevant providers under their service terms and settings. It should not be assumed to be anonymous or automatically deleted.

Relevant information may also be disclosed to professional advisers or authorities where needed for a lawful purpose, or to another recipient you authorise. For client projects involving guest, employee or other third-party records, the permitted data, purposes and handling arrangements should be agreed before those records are supplied. Do not send passwords, payment-card details or unnecessary sensitive personal information through an ordinary enquiry form or email.

Some technology providers process information outside South Africa. An overseas transfer must have a basis permitted by section 72 of POPIA, such as adequate protection under applicable law or a binding agreement, your consent, or a qualifying contractual necessity. Contact us if you need details about the providers or processing arrangements relevant to your information.

Cookies and website analytics

The website uses WordPress and includes Google Analytics and Google Tag Manager. These tools support understanding website use and managing website tags. Cookies and similar technologies may be used for website operation, preferences, security and analytics, depending on the feature and configuration. Information may include device/browser details, interactions and identifiers.

You can manage or delete cookies through your browser settings. Blocking cookies may affect some website functions. Google explains its handling of information in its Privacy Policy and its information about partner sites and apps. Links to WhatsApp or other external services take you to services with their own privacy notices.

Security and retention

We take reasonable technical and organisational precautions to protect personal information against loss, unauthorised access and misuse. No website, email service or storage system can guarantee absolute security.

We retain information for as long as reasonably needed for the enquiry, client relationship or agreed service, and for applicable legal, accounting, dispute-resolution and record-keeping requirements. Retention depends on the type of record and its purpose. Information should be securely deleted or de-identified when there is no longer a lawful reason to retain it.

Your rights and complaints

Subject to applicable law, you may ask whether we hold personal information about you, request access, ask for correction of inaccurate or incomplete information, and request deletion where information is no longer lawfully needed or is otherwise eligible for deletion. You may also object to processing where POPIA permits and withdraw consent where we rely on it.

Send requests to Donald Kiley using the contact details above. We may need proportionate proof of identity before releasing or changing information. If a legal requirement prevents the requested action, we will explain the reason.

You may lodge a complaint with South Africa’s Information Regulator. See the official complaints process, email POPIAComplaints@inforegulator.org.za, or call +27 10 023 5200. General enquiries: enquiries@inforegulator.org.za.

Changes to this notice

We may update this notice as our services, processing arrangements or legal requirements change. The current version and update date will be published on this page.