Privacy Policy

We respect your privacy. Please read the full privacy policy because it applies to you.
Introduction
Welcome to our privacy policy. We are N1 Restaurant Suppliers Pty Ltd (Registration number: 2010/019283/07) and this policy outlines our personal information management practices. Specifically:
1. the kind of personal information we collect and hold;
2. how we collect, use, store and protect information that can be associated with you or another specific natural or juristic person and can be used to identify you or that person (personal information);
3. the purposes for which we collect, use, store and disclose it; and
4. how you may complain about our privacy matters.
Audience
This policy applies to you if you are:
1. a visitor to our website or application; or
2. register as a user on the website or on our mobile apps (N1 2 Home and commercial); or
3. a customer who has ordered or requested the goods or services that we provide.
What is personal information?
Personal information includes, but is not limited to:
1. certain information we collect automatically when you visit our website or application;
2. certain information collected on registration (see below);
3. certain information collected on submission; and
4. optional information that you provide to us voluntarily (see below);
but excludes:
1. information that has been made anonymous so that it does not identify a specific person;
2. permanently de-identified information that does not relate or cannot be traced back to you specifically; and
3. non-personal statistical information collected and compiled by us.
Common examples
Common examples of the types of personal information which we may collect and process include your:
1. identifying information – such as your name and surname, date of birth;
2. contact information – such as your mobile number, email address;
3. address information – such as your physical or postal address; or
4. demographic information – such as your gender.
Sensitive information.
Depending on the goods or services that you require, we may also collect sensitive personal information including your:
1. financial information – such as your bank account details;
2. sensitive demographic information – such as your race or ethnicity;
3. criminal information – such as information about your commission or alleged commission of any offence or about any related legal proceedings; and
4. employment information – including your membership of a trade union.
Acceptance

Acceptance required
You must accept all the terms of this policy when you order our goods or request our services. If you do not agree with anything in this policy, then you may not order our goods or request our services.

Legal capacity
You may not access our website or application or order our goods or request our services if you are younger than 18 years old or do not have legal capacity to conclude legally binding contracts.

Deemed acceptance
By accepting this policy, you are deemed to have read, understood, accepted, and agreed to be bound by all of its terms.

Your obligations
You may only send us your own personal information or the information of another data subject where you have their permission to do so.
How do we collect personal information?
Personal information about you is “collected” when a record is made of it or it is stored on computer systems, including:

On registration
When you submit an enquiry, or register on our website, you will no longer be anonymous to us.

This personal information will include:
1. your name and surname;
2. your email address;
3. your telephone number;
4. your company name, company registration number, and VAT number;
5. your postal address or street address; and
6. your username and password.
We will use this personal information to fulfil your account, provide additional services and information to you as we reasonably think appropriate, and for any other purposes set out in this policy.

On order or request
When you order our goods or request our services from us, you will be asked to provide us with additional information on a voluntary basis (goods or services information).

From browser
We automatically receive and record Internet usage information on our server logs from your browser, such as your Internet Protocol address (IP address), browsing habits, click patterns, version of software installed, system type, screen resolutions, colour capabilities, plug-ins, language settings, cookie preferences, search engine keywords, JavaScript enablement, the content and pages that you access on the website or application, and the dates and times that you visit the website or application, paths taken, and time spent on sites and pages within the website or application (usage information). Please note that other website or applications visited before entering our website or application might place personal information within your URL during a visit to it, and we have no control over such website or applications. Accordingly, a subsequent website or application that collects URL information may log some personal information.

Web beacons
Our website or application may contain electronic image requests (called a single-pixel gif or web beacon request) that allow us to count page views and to access cookies. Any electronic image viewed as part of a web page (including an ad banner) can act as a web beacon. Our web beacons do not collect, gather, monitor or share any of your personal information. We merely use them to compile anonymous information about our website or application.

Optional details
You may also provide additional information to us on a voluntary basis (optional information) in which event you agree to provide accurate and current information, and not to impersonate or misrepresent any person or entity or falsely state or otherwise misrepresent your affiliation with anyone or anything. This includes content or products that you decide to upload or download from our website or application or when you enter competitions, take advantage of promotions, respond to surveys, order certain additional goods or services, or otherwise use the optional features and functionality of our website or application.

Recording calls
We may monitor and record any telephone calls that you make to us, unless you specifically request us not to.
Who are our data subjects?
We process the personal information of the following categories of people:
1. customers or organisations,
2. prospects or leads,
3. employees,
4. recruiters and medical practitioners providing services related to employees,
5. contractors, vendors, or suppliers,
6. debtors and creditors,
7. distributors, and
8. directors and shareholders.
Purpose for processing
We may use or process any goods or services information, or optional information that you provide to us for the purposes that you indicated when you agreed to provide it to us. Processing includes gathering your personal information, disclosing it, and combining it with other personal information. We generally collect and process your personal information for various purposes, including:
1. goods or services purposes – such as collecting orders or requests for and providing our goods or services;
2. marketing purposes – such as pursuing lawful related marketing activities, for example – to contact you regarding current or new goods or services or any other goods offered by us or any of our divisions, affiliates and/or partners (unless you have opted out from receiving marketing material from us); to inform you of new features, special offers and promotional competitions offered by us or any of our divisions, affiliates and/or partners (unless you have opted out from receiving marketing material from us);
3. business purposes – such as internal audit, accounting, business planning, and joint ventures, disposals of business, or other proposed and actual transactions; and
4. legal purposes – such as handling claims, complying with regulations, or pursuing good governance.
We may use your usage information for the purposes described above and to:
1. remember your information so that you will not have to re-enter it during your visit or the next time you access the website or application;
2. keep our data subject records up to date;
3. better understand our data subjects’ needs, for example to improve our product selection and your experience on our website or application - monitoring your browsing habits, or tracking your sales on the website or application;
4. manage supplier contracts in general;
5. manage customers in general;
6. manage customer credit in general;
7. manage dealer relationships in general;
8. process personal information of employees for forensic purposes;
9. monitor website or application usage metrics such as total number of visitors and pages accessed; and
10. track your entries, submissions, and status in any promotions or other activities in connection with your usage of the website or application.
Consent to collection
We will obtain your consent to collect personal information:
1. in accordance with applicable law;
2. when you provide us with any registration information or optional information.
Use

Our obligations
We may use your personal information to fulfil our obligations to you.

Messages and updates
We may send administrative messages and email updates to you about the website or application. In some cases, we may also send you primarily promotional messages. You can choose to opt-out of promotional messages.
Targeted content
While you are logged into the website, we may display targeted adverts and other relevant information based on your personal information. In a completely automated process, computers process the personal information and match it to adverts or related information. We never share personal information with any advertiser unless you specifically provide us with your consent to do so. Advertisers receive a record of the total number of impressions and clicks for each advert. They do not receive any personal information. If you click on an advert, we may send a referring URL to the advertiser’s website or application identifying that a customer is visiting from the website or application. We do not send personal information to advertisers with the referring URL. Once you are on the advertiser’s website or application however, the advertiser is able to collect your personal information.
Reasons we share personal information
Sharing
We may share your personal information with:
1. other divisions or companies, affiliates in which case we will seek to require the affiliate to honour this privacy policy and/or partners (including their employees and/or third party service providers) in order for them to interact directly with you via email or any other method for purposes of registration, for transactions and customer support and sending you marketing material regarding any current or new goods or services, new features, special offers or promotional items offered by them (unless you have opted out from receiving marketing material from us), and to help detect and prevent potentially illegal acts and violations of our policies, and to guide decisions about our products, services, and communications (they will only use this information to send you marketing communications if you have requested their goods or services);
2. our goods or services providers under contract who help provide certain goods or services or help with parts of our business operations, and who assist us to interact with you via our Website, email or any other method including fraud prevention, bill collection, marketing, technology services (our contracts dictate that these goods or services providers only use your information in connection with the goods or services they supply or services they perform for us and not for their own benefit) and thus need to know your personal information in order to assist us to communicate with you properly and efficiently;
3. credit bureaus to report account information, as permitted by law;
4. banking partners as required by credit card association rules for inclusion on their list of terminated merchants (in the event that you utilise the services to receive payments and you meet their criteria); and
5. other third parties, including third party seller, who provide us with relevant services where appropriate.
Regulators
We may disclose your personal information as required by law or governmental audit.
Law enforcement
We may disclose personal information if required:
1. by a subpoena or court order;
2. to comply with any law;
3. prevent physical harm or financial loss; and
4. to prevent violation of our customer relationship terms.
No selling
N1 undertakes never to sell or make your personal information available to any third party other than as provided for in this policy.

Marketing purposes
We may disclose aggregate statistics (information about the customer population in general terms) about the personal information to advertisers or business partners.

Ratings and reviews
When you provide a rating or review of a product, you consent to us using that rating or review as we deem fit, including without limitation on the website, in newsletters or other marketing material. The name that will appear next to that rating or review is your first name or pseudonym, as you would have provided upon registration. If you do not agree to this, please do not put any ratings or reviews on the website. We will not display your last name, nor any of your contact details, with a rating or review.

Employees
We may need to disclose personal information to our employees that require the personal information to do their jobs, such as assist us to interact with you via our website, email or any other method, for the ordering of goods or when delivering goods to you. These include our responsible management, human resources, accounting, audit, compliance, information technology, or other personnel.

Change of ownership
If we undergo a change in ownership, or a merger with, acquisition by, or sale of assets to, another entity, we may assign our rights to the personal information we process to a successor, purchaser, or separate entity. We will disclose the transfer on the website or the application. If you are concerned about your personal information migrating to a new owner, you may request us to delete your personal information. We will ensure that all of our employees, third party service providers, divisions, affiliates and partners (including their employees and third party service providers) having access to your personal information are bound by appropriate and legally binding confidentiality obligations in relation to your personal information, and also to this privacy policy.
Changes

We may change any of these terms and conditions or policies at any time. We will notify you of any changes by placing a notice in a prominent place on the website or application or by sending you an email detailing the changes that we have made and indicating the date that they were last updated.
Any such change will only apply to your use of this website or application after the change is displayed on a prominent place on the website or application. If you use the website or application after such amended terms and conditions have been displayed on the website or application, you will be deemed to have accepted such changes.
Responsible Disclosure Policy
1. At N1, we’ve built our business on the simple principle that our customers come first. We aim to keep our website, mobile site, and relevant applications, as well as the service offered on our website (“service”) safe for everyone to use. Data security is of the utmost importance to us. If you have discovered a security breach or vulnerability in/on our website or service, we encourage you to contact us to disclose it in a responsible manner.
2. When security vulnerabilities are reported to us in compliance with this policy, we will validate and fix such vulnerabilities as soon as reasonably possible, in line with our commitment to the privacy, safety and security of our customers.
3. We will not take legal action against you or terminate your access to the service if you discover and report security vulnerabilities responsibly and in compliance with this policy.
4. N1 reserves all of its legal rights in the event of any non-compliance with this policy.
5. If you are looking to report another type of issue, which falls outside the scope of this policy, for example, if you are a current customer and you suspect fraudulent activity or suspect that your account could have been compromised, please contact us at home@n1.co.za, admin2.cpt@n1.co.za or by using your personal profile on the app. Your issue will be investigated immediately and thoroughly.
Security

There is no such thing as 'perfect security'. We have to compromise between increased levels of security and the convenience to you in transacting with us.

Our security responsibilities
We take the security of personal information very seriously and always do our best to comply with applicable data protection laws. We treat your personal information as strictly confidential, save where we are entitled to share it as set out in this policy or obliged in terms of laws. We take appropriate technical and organisational measures to ensure that your personal information is kept secure and is protected against unauthorised or unlawful processing, accidental loss, destruction or damage, alteration, disclosure or access. Our hosting company will host our website or application in a secure server environment that uses a firewall and other advanced security measures to prevent interference or access from outside intruders. We authorize access to personal information only for those employees who require it to fulfil their job responsibilities. We implement disaster recover procedures where appropriate.

Our security disclaimers
The third parties whose systems we link to are responsible for the security of information while it is collected by, stored on, or passing through the systems under their control. We will use all reasonable endeavours to ensure that our website or application and your information is not compromised. However, we cannot guarantee that no harmful code will enter our website or application (for example viruses, bugs, trojan horses, spyware or adware). You should be aware of the risks associated with using website or applications (addressed below). If you experience a problem or loss that is caused by information you provided to us, your computer being compromised in some way or by something beyond our control, we cannot take responsibility for causing the problem. We will, however, do our best to help you if we can.

Phishing
You must only log in to your account from a page that begins with https://www.{n1.co.za}
Reporting a Security Vulnerability
If you think you have found a security vulnerability in our Website or Service, please contact us immediately via home@n1.co.za, admin2.cpt@n1.co.za or by using your personal profile on the app.

When reporting a security vulnerability, you must do the following:
Include as much information as possible in your report, as we require a way to reproduce the security vulnerability in order to validate and fix it. “Proof of Concept” programs, tools, or test accounts that you’ve created are welcome, and the following information is required:
1. the URL where the vulnerability had occurred;
2. if applicable, the parameter where the vulnerability occurs;
3. the type of vulnerability;
4. a step-by-step instruction on how to reproduce the vulnerability;
5. a demonstration of the vulnerability, by screenshots, or video; and
6. if applicable, an attached scenario.
Do not share your findings with anyone until N1 has had adequate time to investigate and deploy a fix. We will notify you when the vulnerability has been patched.
Our commitment to you
If you identify a security vulnerability in compliance with this policy, N1 commits to:
1. acknowledging receipt of the vulnerability timeously;
2. confirming the validity of your report; and
3. notifying you when it is patched or fixed.
Accurate and up to date

We will try to keep the personal information we collect as accurate, complete and up to date as is necessary for the purposes defined in this policy. From time to time we may request you to update your personal information on the website or application. You are able to review or update any personal information that we hold on you by accessing your account online, emailing us, or phoning us. Please note that in order to better protect you and safeguard your personal information, we take steps to verify your identity before granting you access to your account or making any corrections to your personal information.

Should your personal information change, please inform us and provide us with updates to your personal information as soon as reasonably possible to enable us to update your personal accurately information.
Retention

We will not retain your personal information longer than the period for which it was originally needed, unless we are required by law to do so, or you consent to us retaining such information for a longer period. During the period of retention, we will continue to abide by our non-disclosure obligations and will not share or sell your personal information. We may retain your personal information in physical or electronic records at our discretion.
Transfer to another country

We send personal information outside of South Africa to various countries. We will only transfer data to other countries who have similar privacy laws to South Africa’s that provide an adequate level of protection, or recipients who can guarantee the protection of personal information to the same standard we must protect it.
Your rights
Request what information we hold on you
You may request access to your personal information to receive a copy of the personal information that we hold on you.

Updating or removing
You may choose to correct or update the personal information you have submitted to us, by clicking the relevant menu in any of the pages on our website or application or contacting us by phone or email.

Withdrawal of consent or objection to processing
You may withdraw your consent where we are relying on consent as a lawful justification to process. You may also object to our processing where we are relying on another lawful justification for processing. Please note that if you do so, we might not be able to provide services to you. We may need to request additional information from you to verify your identity for you to access these rights. This is to ensure that your personal information is not disclosed to an unauthorized person.

Notify
We will:
1. promptly notify you if we become aware of any unauthorised use, disclosure or processing of your personal information; and
2. provide you with reasonable evidence of our compliance with our obligations under this policy on reasonable notice and request.
Limitation

Whilst we will do all things reasonably necessary to protect your rights of privacy, we are not responsible for, give no warranties, nor make any representations in respect of the privacy policies or practices of linked or any third party websites or applications.
Enquiries

If you have any questions or concerns arising from this privacy policy or the way in which we handle personal information, please contact us by sending an email to informationofficer@n1.co.za.