Privacy Policy

01 Who we are

Sit'n'GetServed is an in-seat ordering platform that lets fans at a stadium or arena order food and drinks from their seat, for delivery by a runner. This policy explains what personal information we collect across the Sit'n'GetServed app — used by fans, vendors, runners, venue staff, and admins — and this website, why we collect it, and what rights you have over it under South Africa's Protection of Personal Information Act (POPIA).

For the purposes of POPIA, the responsible party is:

02 Information we collect

What we collect depends on how you use Sit'n'GetServed. We only ask for what the feature you're using actually needs.

If you're a fan

You can browse and — where a venue allows it — order without creating an account at all. Confirming your seat starts an anonymous seat session tied to your device; nothing identifies you personally at that point beyond the seat you told us you're sitting in.

• Seat location — the stadium, section, row, and seat number you enter, so your order can be delivered to the right place. This is not GPS or device location data — we don't request or access your device's location.
• Account details (optional) — if you choose to create an account, your name, email address, and phone number.
• Order history — what you've ordered, from which vendor, when, and its status, so you can track a live order and see past ones.
• Loyalty activity — points earned from completed orders, if you use the rewards feature.
• Ratings and feedback — anything you submit about an order or a delivery.
• Communication preferences — whether you've opted in to order, delivery, or payment notifications.
• Support requests — anything you send us via the in-app help form or by email.

If you're a vendor, runner, venue staff member, or admin

Working on Sit'n'GetServed requires a real account, so we collect more:

• Your name, email address, and phone number.
• A securely hashed password — we never store or can see your actual password (see Keeping it secure).
• If you turn on two-factor authentication: a hashed authenticator secret and single-use, hashed recovery codes.
• Operational data your role needs — a runner's on-duty status and current venue, a vendor's menu and stock levels, an admin's assigned venue scope.

Technical and diagnostic data

Like almost every app, we automatically collect a limited amount of technical data when something goes wrong, so we can fix it: device type, operating system version, app version, and an error stack trace, via our crash-reporting provider (see Who we share it with). This is not used to track you across other apps or websites.

03 How we use it

We process your personal information only for real, specific purposes:

We do not sell your personal information, and we do not use it for third-party advertising. We have no marketing-newsletter feature today — if that ever changes, we'll ask for your consent first and give you a clear way to opt out.

04 Payments

Sit'n'GetServed never sees or stores your card number, expiry date, or CVV. Card payments are processed entirely by Paystack, a PCI-DSS compliant payment processor, on their own secure, hosted checkout page. We receive confirmation that a payment succeeded or failed, and a reference number — never the card details themselves.

If you pay with cash on delivery, we record the amount and, if you request change, the amount you're paying with — nothing more.

05 Who we share it with

We share the minimum necessary information with:

We disclose personal information to a third party beyond this list only if the law requires it, or with your consent.

06 Where it's processed

Some of the infrastructure providers we rely on operate servers outside South Africa. Where that's the case, we only work with providers who maintain security and privacy standards at least equivalent to POPIA's requirements, and data is always encrypted in transit.

07 How long we keep it

We keep your information for as long as your account is active, and for as long as needed afterward to meet our legal, tax, and accounting obligations (typically a matter of years for financial records, not indefinitely).

If you delete your account from within the app, we remove or anonymize your personal details straight away. We keep the underlying order and payment records themselves — with your personal details stripped out — because a vendor's sales history and a venue's financial records have to survive your account's deletion; the same way a shop keeps a till receipt after a customer leaves.

08 Your rights under POPIA

As a data subject under POPIA, you have the right to:

To exercise any of these rights, contact our Information Officer — see Contact us. You can also reach the Information Regulator directly at inforegulator.org.za.

09 Keeping it secure

We take real, concrete steps to protect your information, including:

• Encrypting all data in transit between the app, our servers, and our infrastructure providers.
• Hashing every password with bcrypt — we cannot see or recover your actual password, even internally.
• Optional two-factor authentication for vendor, runner, and admin accounts, with hashed recovery codes.
• Scoping every staff account's access to only the venue or vendor they manage.
• Rate-limiting and monitoring against automated abuse.

No system is perfectly secure, and we can't guarantee absolute security — but we treat it as a real engineering priority, not an afterthought.

10 Cookies on this website

This marketing website does not use tracking or advertising cookies, and does not run third-party analytics. If that changes in future, we'll update this section and, where required, ask for your consent first.

11 Children

Sit'n'GetServed is not directed at children, and you must be at least 18 years old — or have the consent of a parent or guardian present with you — to place an order, since ordering involves a real financial transaction. We do not knowingly collect personal information from children without appropriate consent.

12 Changes to this policy

We may update this policy as the product changes. If we make a material change, we'll update the "Last updated" date above and, where the change is significant, let you know in the app.

13 Contact us

Questions, requests, or complaints about this policy or your personal information: