Who is responsible for your information
A Cup Of is operated by Astros Marketing (Pty) Ltd and is based in Woodstock, Cape Town. We collect and process personal information for our coffee supply, subscription and related service work across Cape Town, Johannesburg, Pretoria, Durban and Gqeberha.
Where we process information, we do so in line with the Protection of Personal Information Act, 4 of 2013 (POPIA). We take reasonable steps to keep personal information secure and to use it only for clear business purposes.
What information we collect
We collect only the information needed to provide our services, manage orders and respond to enquiries. This may include details you provide through our contact form, subscription requests, wholesale enquiries or service bookings.
- Name and surname
- Contact details and delivery or service addresses
- Business details for trade or hospitality accounts
- Order history, subscription preferences and grind settings
- Payment related information needed to process transactions
- Messages, feedback and support requests
We may also collect technical information such as browser type, device data and site usage patterns to help us keep our services working properly.
How we use personal information
We use personal information to provide coffee products and services, manage delivery and subscription schedules, support wholesale accounts and answer customer queries. In some cases, we also use information to improve stock forecasting, plan seasonal coffee rotation and coordinate office or event coffee services.
- To process and fulfil orders
- To manage subscriptions, changes and pauses
- To provide brew training, grind calibration and menu planning support
- To communicate about your account or service requests
- To keep internal records and handle billing
- To comply with legal and tax obligations
We do not use personal information for unrelated purposes without a lawful basis to do so.
Sharing information with trusted third parties
We may share personal information with service providers who help us operate our business, such as payment processors, delivery partners, IT support providers and professional advisers. These parties are only given access to information they need to perform their work.
We may also disclose information where required by law, court order or other lawful request. If we send information outside South Africa, we will take reasonable steps to ensure that it is protected to a standard that is compatible with POPIA.
- Payments and reconciliations
- Courier and logistics fulfilment
- Accounting and compliance support
- Technical maintenance and data storage
Storage, retention and security
We keep personal information only for as long as it is needed for the purpose it was collected for, or as long as required by law. After that, we take steps to delete or de-identify it.
We use reasonable administrative and technical safeguards to help protect information against loss, unauthorised access, misuse or alteration. No system is completely risk free, but we work to reduce risk and to keep records current and controlled. This includes access limits, secure storage practices and routine checks on data handling.
Your rights under POPIA
You have rights in relation to your personal information. You may ask us to confirm what information we hold, request correction of inaccurate details, or object to certain processing where permitted by law.
You may also ask us to delete information where we are no longer required to keep it, subject to legal and contractual limits. If you prefer not to receive direct marketing, you can request that we stop sending it.
- Access to your personal information
- Correction of incomplete or inaccurate information
- Deletion where lawful and appropriate
- Withdrawal of consent where processing depends on it
- Objection to direct marketing
To make a request, use the enquiry form on our contact page so we can verify and assist you properly.
Cookies, children and policy updates
Our site may use cookies or similar tools to support basic functionality and understand how visitors use the site. You can adjust browser settings to limit cookies, but some features may not work as intended if you do so.
Our services are intended for adults and business clients. We do not knowingly collect personal information from children without appropriate consent where required. We may update this policy from time to time to reflect changes in our services, legal duties or internal processes. Any updated version will apply from the date it is published.
If you have a privacy concern or believe information we hold is incorrect, please contact us through the enquiry form on our contact page and we will respond as soon as reasonably possible.