Privacy & data protection
How personal information is handled on The Kitchen Mafia ordering portal (South Africa — POPIA), and who is responsible for what.
Who is responsible?
The Kitchen Mafia — Responsible Party
The Kitchen Mafia decides why personal information is collected and how the catering and ordering service is used. They are responsible for privacy requests from individuals, their contracts with client companies, meal fulfilment, and allergy / food-safety processes.
Privacy contact: info@thekitchenmafia.co.za
Tian Vortsman — Developer & hosting (Operator)
Tian Vortsman builds and hosts the portal on The Kitchen Mafia’s instructions. Personal information is processed only as needed to develop, host, maintain, back up, and support the system — not as ownership of The Kitchen Mafia’s business or customer relationships.
Portfolio: tian.vortsman.com
Your employer / client company
Your company (or its administrators) decide who is invited onto the portal. Workplace and catering arrangements remain between your organisation and The Kitchen Mafia.
Access by role
Employees
- See and manage their own profile, orders, and allergy / dietary details
- Cannot see other companies’ employee lists
Company administrators
- Manage employees, guests, and orders for their own company only
- Cannot access another organisation’s data through normal portal use
The Kitchen Mafia administrators
- Access client and order data as needed to operate, support, and fulfil the catering service
Developer / host (Tian Vortsman)
- May access systems and data only as reasonably required for hosting, maintenance, deployments, backups, and incident support
- Does not sell personal information or use it for unrelated marketing
What we collect
Only what is needed to run meal ordering and fulfilment, including names, email or username, company details, order history, delivery notes (building/floor), and allergy or dietary information you or your company provide.
Why it is used
- To create accounts, send invites, and reset passwords
- To take, prepare, label, and deliver meal orders safely
- To send service notices (for example when ordering is open)
- To support invoicing, reporting, and dispute resolution for your organisation
How data is kept safe
- Login is required; passwords are stored with one-way hashing (they cannot be read back as plain text)
- Access is role-based and companies are separated as described above
- The live portal is intended to be used over HTTPS
- Personal information is not sold or shared for unrelated marketing
Emails
Email may be used for invitations, password resets, and service-related messages. You can unsubscribe from non-essential notices (such as ordering reminders). Essential account or security emails may still be sent when required to provide the service.
Your POPIA rights
Where the Protection of Personal Information Act 4 of 2013 applies, you may request access to, or correction of, personal information held about you, and enquire about objection, deletion, or restriction, subject to legal and operational requirements (for example retaining order records for accounting).
Please send privacy requests to The Kitchen Mafia (info@kitchenmafia.co.za), not to the developer, unless The Kitchen Mafia asks him to assist technically.
Contact
Privacy / catering service (Responsible Party):
The Kitchen Mafia · info@kitchenmafia.co.za
Terms: kitchenmafia.co.za/terms-conditions
Technical development & hosting (Operator):
Tian Vortsman · tian.vortsman.com
This page is a plain-language summary for portal users. It does not replace The Kitchen Mafia’s terms, create a direct contract with the developer, or change who the Responsible Party is under POPIA.