Privacy policy.

1. Who is responsible for your information

The responsible party for personal information collected through this website is The Franchise Co., which manages the Zebro's Chicken brand.

• Address: Shop 102 & 112, 1st Floor, Finforum Centre Montana, Dr Van Der Merwe Rd, Montana, Pretoria, 0182, South Africa
• Email: info@thefranchiseco.co.za
• Telephone: +27 10 492 3793

Our Information Officer, appointed as required by POPIA, is [INFORMATION OFFICER NAME AND EMAIL — TO BE COMPLETED BEFORE PUBLICATION]. You can contact the Information Officer using the details above about anything in this policy or to exercise any of your rights.

2. What we collect

Information you give us

The only place this website asks for your personal information is the franchise enquiry form. When you complete it, we collect your name, contact number, email address, and whatever you write in the message.

The store-search box on the "Find us" section does not send anything to us — it is a placeholder while branch listings are being built.

This website does not create accounts, does not take payments, and does not ask for identity numbers, banking details or any special personal information (such as health, race or religion).

Information collected automatically

• Server logs. Like any website, our hosting server records technical details of requests, including your IP address, browser type and the pages requested. This happens for every visitor and is used for security and troubleshooting.
• Spam protection. When you submit the enquiry form we keep a short-lived counter tied to a shortened, hashed version of your IP address, purely to stop the form being abused. It is not used to identify you and expires within an hour.
• Analytics — only if you agree. If you accept cookies, Google Analytics records how you use the site: pages viewed, approximate (city-level) location, device and browser type, and how you arrived. If you decline, Google Analytics is never loaded and none of this is collected.

3. Why we use it, and our lawful basis

We only use your information for the purpose you gave it to us for. If we ever want to use it for something else, we will ask you first.

4. Who we share it with

• Our own team at The Franchise Co., limited to the people who handle franchise enquiries.
• Our hosting provider, which stores the website and transmits the enquiry email on our behalf.
• Google, if you accepted analytics cookies.

We do not sell your personal information, and we do not share it for anyone else's marketing.

5. Information sent outside South Africa

If you accept analytics cookies, the information Google Analytics collects is processed on Google's servers outside South Africa. This transfer happens on the basis of your consent and Google's own contractual data-protection commitments, as allowed by section 72 of POPIA. If you decline cookies, no information about your visit leaves our website for this purpose.

6. How long we keep it

• Franchise enquiries: kept while we deal with your enquiry and for up to 24 months after our last contact with you, so we can pick the conversation up again. After that they are deleted, unless a law requires us to keep them longer.
• Server logs and spam-protection records: kept only briefly — the spam counter expires within an hour, and logs are rotated by our hosting provider.
• Analytics data: retained by Google according to the retention period set on our Google Analytics property.

7. How we protect it

We take the security measures POPIA requires us to take, including:

• the whole site is served over an encrypted HTTPS connection;
• browser security controls, including a Content-Security-Policy, that limit what can run on the page;
• validation, spam traps and rate limiting on the enquiry form;
• access to enquiries limited to the staff who need to act on them.

No website can promise perfect security, but if a breach affecting your personal information ever occurs, we will report it to the Information Regulator and tell you, as POPIA requires.

8. Cookies

We also store your cookie choice in your own browser so we do not have to ask on every page.

Changing your mind is easy. Use the "Cookie preferences" link at the bottom of any page to reopen the banner. If you decline there, we delete the Google Analytics cookies already on your device and stop collecting analytics immediately. You can also block or delete cookies in your browser settings.

9. Marketing

We do not send marketing messages from this website. If we ever start, we will ask for your consent first, and every message will include a way to opt out, as section 69 of POPIA requires.

10. Your rights

Under POPIA you have the right to:

• be told what personal information we hold about you, and get a copy of it;
• have information corrected if it is wrong, or deleted if it is inaccurate, irrelevant, excessive, out of date or held without a lawful basis;
• object to us processing your information;
• withdraw consent you have given, including for cookies, at any time;
• complain to the Information Regulator.

To exercise any of these, contact our Information Officer using the details in section 1. We may need to confirm your identity first. Formal requests for access to records are handled under the Promotion of Access to Information Act (PAIA), which sets the forms and timelines that apply.

11. Complaints

Please raise any concern with us first — we would rather fix it directly. If you are not satisfied, you can complain to the Information Regulator (South Africa), whose current contact details and complaint forms are published at inforegulator.org.za.

12. Children

This website is intended for adults. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the website or the law changes. The effective date at the top of the page shows when it was last revised, and any material change will be reflected here.