Privacy Policy
SPINFIRE PIZZA — Privacy Policy
Effective date: 01 June 2026 · Version: 2
1. Introduction
SPINFIRE PIZZA (trading as "SPINFIRE PIZZA", referred to in this policy as "SPINFIRE", "we", "us" or "our") takes the protection of your personal information seriously. This Privacy Policy explains, in plain language, what information we collect about you, why we collect it, how we use and safeguard it, who we share it with, and the choices and rights you have.
We have prepared this policy with reference to our day-to-day operations and the data-protection laws that apply to us, including the Protection of Personal Information Act 4 of 2013 (POPIA), or updated version when applicable. It applies consistently across the SPINFIRE brand and every store that trades under the SPINFIRE name, whether corporate-owned or independently franchised.
2. Who this policy applies to
This policy governs how we handle information relating to anyone we deal with, including:
- Guests who order, buy or enquire about our food, whether in-store, by phone, through our website or app, or via a third-party ordering or delivery platform;
- People who receive a SPINFIRE delivery, even if someone else placed the order;
- Visitors to our website, social media pages and online ordering channels;
- Prospective and existing franchise partners, investors and their representatives;
- Suppliers, contractors and outsourced service providers; and
- Job applicants and candidates for roles within the SPINFIRE network.
Throughout this policy we refer to these people collectively as "you" or, where the law uses the term, "data subjects".
3. The information we collect
"Personal information" means any information that identifies you or could reasonably be linked to you, whether you are an individual or a business. Depending on how you interact with us, the information we collect may include:
- Identity and contact details — your name, delivery and billing address, email address and telephone number;
- Order and transaction details — the items you order, order history, special instructions, allergen or dietary preferences, and the store or channel you ordered from;
- Payment details — the payment method used and confirmation of payment. Card and banking details are handled by our payment and platform partners; we do not store full card numbers;
- Delivery information — the delivery address, access notes and, where used, approximate location data to route and confirm your order;
- Online and device information — information collected automatically when you use our website or app, such as your device type, browser, IP address, and cookie and usage data (see the Cookies section);
- Marketing preferences — your consent choices and the channels through which you have agreed to hear from us;
- Franchise and supplier information — where you engage with us as a prospective franchisee, investor or supplier, the business, financial and background details relevant to that relationship; and
- Recruitment information — where you apply for a role, the details contained in your application, CV and supporting documents.
4. How we collect your information
Wherever practical we collect information directly from you — for example when you place an order, create an account, complete our franchise enquiry form, contact us, or enter a competition or promotion. We may also collect information from other sources where the law permits, including:
- Our website, app and online ordering channels.
- Third-party ordering and delivery platforms that pass your order and delivery details to us, such as SPINFIRE, Uber Eats, Mr D, but not limited to;
- Payment providers who confirm that a transaction has been completed;
- Publicly available sources, social media and online platforms;
- Credit or verification bureaus, where relevant to a franchise or credit application; and
- Business partners and other third parties with whom we have a trusted relationship, where the law allows the information to be shared.
5. Why we use your information
We only process your information for clear, legitimate purposes and in line with applicable law. Those purposes include:
- Taking, preparing, fulfilling and delivering your order, and keeping you updated on its progress;
- Processing payments and refunds and preventing, detecting and investigating fraud;
- Providing customer service, and handling your questions, feedback and complaints;
- Operating, maintaining and improving our website, app, menu and service, including analytics and quality assurance;
- Sending you marketing and promotional communications where you have agreed to receive them or where the law otherwise allows (see the Marketing section);
- Assessing and managing franchise and investment enquiries and relationships;
- Managing our supplier and service-provider relationships;
- Meeting our legal, regulatory, tax, accounting and reporting obligations; and
- Any other purpose disclosed to you at the time of collection, or which the law permits or requires.
6. Marketing and communications
We would love to keep you up to date with new products, offers and SPINFIRE news, but only on your terms. Where consent is required, we will obtain it before sending you marketing, and you can change your mind at any time.
You can opt out of marketing whenever you like by clicking the unsubscribe link in any message, emailing us at our info mail address.
If you opt out of marketing, we may still contact you where it is necessary for our relationship with you — for example to confirm an order, arrange a delivery, respond to a query, or where we are required or permitted by law to do so.
We will never sell your personal information to third parties for their own marketing.
7. When and with whom we share your information
We do not share your personal information for any purpose other than those set out in this policy, unless you have explicitly consented or the law requires or permits it. Where sharing is necessary, we disclose only the minimum required information and ensure appropriate safeguards are maintained.
Your privacy is paramount. While we take all reasonable technical and organizational steps to secure your personal data — including carefully selecting reputable third-party hosting partners — SPINFIRE cannot be held liable for security breaches occurring on external platforms beyond our direct control. In the event of a confirmed data breach affecting your information, we will notify you in accordance with applicable laws so you can take any necessary steps to protect your account.
We may share information with:
- The SPINFIRE store or franchise operator responsible for fulfilling your order;
- Delivery, ordering and payment partners who help us take orders, process payments and get your food to you.
- Trusted IT, cloud-hosting, marketing and other service providers who process information on our behalf under written contracts that require them to protect it;
- Professional advisors such as auditors, accountants and lawyers, where reasonably required;
- Regulators, law-enforcement and government bodies where we are legally obliged to disclose information; and
- A purchaser or successor, if we sell, restructure or transfer all or part of our business, subject to appropriate confidentiality protections.
Any service provider or subcontractor who receives your information must accept, in writing, the confidentiality and data-security obligations required by law before the information is transferred, and may only keep it for as long as needed to perform its role or as the law requires.
8. Cross-border transfers and cloud storage
We use reputable cloud and software services, which may store or process information in another country. Where information is transferred across borders, we will only do so to recipients in countries with adequate data-protection laws, or under a written agreement that requires the recipient to protect your information to the standard required.
9. Cookies, our website and app
Our website and app use cookies and similar technologies to keep the site working, remember your preferences, understand how our channels are used, and support relevant marketing. You can manage cookies through your browser or device settings, though some features may not work properly if you disable them.
10. Social media
If you interact with us on a social media platform or messaging service, we may respond to you through the same channel — including sharing order or service information over messaging apps where you have engaged with us that way. Please remember that communications over public social media and messaging platforms carry their own security risks, which you accept when you choose to use them.
11. Suppliers and business partners
When we appoint suppliers, contractors and outsourced providers — for ingredients, packaging, equipment, delivery, technology and other services — we assess them against our quality, safety, legal and brand standards. Suppliers who handle personal information as part of their work for SPINFIRE are required to enter into an agreement that governs how they may use that information and to apply the security measures required by law.
12. How we protect your information
We take reasonable and appropriate technical and organisational measures to keep your information secure and to guard against loss, misuse, unauthorised access, alteration or disclosure. No system is completely secure, however, and information sent over the internet is transmitted at your own risk; while we work hard to protect it, we cannot guarantee the security of information in transit.
13. Data breaches
If a security breach affects your personal information, we will notify you and the relevant regulator as required by law and take steps to contain and remedy it. If you become aware of, or suspect, a breach involving your information, please tell us straight away via our info mail address — only request to be contacted. The SUBJECT line should state: "Personal Information SAFETY Query" and request us to contact you as soon as possible. DO NOT PUT DETAILS of your affairs in the email.
14. How long we keep your information
We keep your personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires us to. When information is no longer needed, we securely delete or de-identify it.
15. Your rights
Subject to applicable law, you have the right to:
- Ask whether we hold personal information about you, and request a copy of it;
- Ask us to correct or update information that is inaccurate or out of date;
- Ask us to delete information we no longer have a lawful basis to keep;
- Object, on reasonable grounds, to us using your information for particular purposes; and
- Withdraw your consent, where our use of your information relies on consent.
To exercise any of these rights, please contact our Information Officer at our info email address and request that our Information Officer respond to you. We may need to verify your identity first, and some requests may be subject to a reasonable administrative fee or a legal exemption. We will respond within the timeframe required by law and, in any event, as soon as we reasonably can. Please help us keep your information accurate by letting us know whenever your details change.
16. Complaints and the regulator
If you have a concern about how we handle your information, please raise it with our Information Officer. Reach out to our info mail address — SUBJECT email heading: "Complaint WRT Information handling", so we can try to put things right. Service complaints are dealt with via our App platform and not email correspondence.
You also have the right to lodge a complaint with the data-protection regulator in your market.
17. Children
Our products and services are intended for a general audience and are not directed at children. We do not knowingly collect personal information from children without appropriate consent from a parent or guardian. If you believe a child has provided us with information without such consent, please contact us so we can address it.
18. Changes to this policy
We may update this policy from time to time. The current version will always be available on our website, and your continued use of our services after an update means you accept the revised policy. We encourage you to review it periodically.
19. How to contact us
Visit our website to obtain the most current relevant contact details.
Annexure A — Laws that may apply
Depending on where SPINFIRE operates, several laws may apply to how we handle your information. Please confirm the correct list for your market. In South Africa, for example, these commonly include:
- The Protection of Personal Information Act 4 of 2013 (POPIA) — how personal information must be processed and protected;
- The Promotion of Access to Information Act 2 of 2000 (PAIA) — access to records;
- The Consumer Protection Act 68 of 2008 (CPA) — consumer rights, including around direct marketing;
- The Electronic Communications and Transactions Act 25 of 2002 (ECTA) — electronic communications and transactions; and
- Any other laws that apply in your market.
← Back to home