Privacy Policy

This Privacy Policy describes how OMAR KHANS BUTCHERY (PTY) LTD (registration 2018/608355/07, trading as Khan's Butchery & MexiKhano's and operating the StoreStack Loyalty mobile application — hereafter "we", "us") collects, uses, stores and protects your personal information.

We comply with the South African Protection of Personal Information Act, 4 of 2013 (POPIA).

1. Information we collect

When you sign up for the loyalty programme through the app or in-store, we collect:

• Your full name and mobile phone number.
• An optional date of birth (used only to send you a birthday reward).
• An account PIN, hashed and never stored in plain text.
• Your transaction history at participating shops (date, store, amount spent, points earned, rewards claimed).
• Optional photos you submit when claiming a reward (for fraud prevention only).

2. How we use your information

• To run the loyalty programme — track points, visits, and entries to grand-prize draws.
• To send you transactional notifications (e.g. "You earned 50 points") via WhatsApp or SMS.
• To send your birthday reward, if you provided a date of birth.
• To prevent fraud (e.g. multiple sign-ups from the same person).
• To improve the app — anonymised, aggregated usage statistics only.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Storage and security

Your information is stored on Supabase (Postgres database hosted in the EU and South Africa regions), with row-level security enforced so that each shop only sees its own customers. PINs are hashed using bcrypt before storage. All data in transit uses HTTPS / TLS 1.2+.

4. Your rights under POPIA

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — request that we delete your account and personal data.
• Withdrawal of consent — opt out of the loyalty programme at any time.
• Complaint — lodge a complaint with the Information Regulator at inforegulator.org.za.

To exercise any of these rights, contact us using the details below.

5. Permissions the app uses

• Camera — to scan a barcode when you check in at the shop, and to take a photo when claiming a reward.
• Photo library — to select an existing photo when claiming a reward (optional).
• Internet — to sync your points balance with our database.
• Notifications — to send you point-earned and reward-claimed alerts (optional).

The app does not access your contacts, calendar, location, microphone, or files outside the photo library.

6. Data retention

We retain your information for as long as you have an active loyalty account. When you delete your account, your personal data is permanently removed within 30 days. Anonymised, aggregated transaction data may be kept for accounting and tax purposes for the period required by South African law (currently 5 years).

7. Children's privacy

The loyalty programme is intended for customers aged 18 or older. We do not knowingly collect data from children under 18. If a parent becomes aware that a child has signed up, please contact us and we will delete the account.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Material changes will be communicated via in-app notification.

9. Contact us

Information Officer: Omar Khan
Company: Omar Khans Butchery (Pty) Ltd — 2018/608355/07
Address: Shop 10, NTN Centre, Cnr Hampton & Starling Street, Lenasia South, 1827, Gauteng, South Africa
Phone: 011 855 2758
WhatsApp: 082 099 9011
Email: khansbutcheryols@gmail.com