Privacy Policy

1. Introduction

Joanna's Steakhouse (Pty) Ltd ("Joanna's", "we", "us", or "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and all applicable South African data protection legislation. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our restaurant, use our website, or make a reservation.

2. Information We Collect

We may collect the following categories of personal information:

• Identity information: full name, date of birth (for age verification or birthday celebrations) • Contact information: email address, telephone number, physical address • Reservation information: date, time, number of guests, occasion type, dietary requirements • Financial information: payment card details (processed securely via third-party payment processors; we do not store card details) • Communication records: enquiries, feedback, and correspondence submitted through our website or in person • Technical information: IP address, browser type, and usage data collected via cookies when you visit our website

3. How We Use Your Information

We process your personal information for the following purposes:

• To confirm and manage your reservation or private dining enquiry • To communicate with you regarding your booking, including confirmations and reminders • To accommodate dietary requirements and special requests • To process payments for services rendered • To respond to enquiries and complaints • To send you information about events, promotions, or news from Joanna's, where you have consented to receive such communications • To comply with our legal and regulatory obligations

4. Legal Basis for Processing

We process your personal information on the following lawful grounds under POPIA:

• Performance of a contract: processing necessary to fulfil your reservation or event booking • Legitimate interests: improving our services, maintaining security, and preventing fraud • Legal obligation: complying with applicable laws and regulations • Consent: where you have expressly consented to receive marketing communications

5. Sharing of Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Service providers who assist us in operating our business (e.g., reservation platforms, payment processors, email service providers), bound by confidentiality agreements • Professional advisers (lawyers, accountants, auditors) where necessary • Regulatory authorities, law enforcement, or courts where required by law

All third parties are required to process your information in accordance with POPIA and our instructions.

6. Retention of Information

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Reservation data is typically retained for a period of five (5) years for accounting and legal compliance purposes. Marketing consent records are retained until you withdraw consent.

7. Your Rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you • Request correction of inaccurate or incomplete information • Request deletion of your information, subject to legal retention requirements • Object to the processing of your information for direct marketing purposes • Withdraw consent at any time, where processing is based on consent • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us at [email protected].

8. Cookies

Our website uses cookies to improve your browsing experience and to analyse website traffic. You may disable cookies through your browser settings; however, this may affect the functionality of certain features on our website.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include SSL encryption, access controls, and regular security assessments.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Information Officer:

Joanna's Steakhouse (Pty) Ltd Sandton City, Johannesburg, 2196 Email: [email protected] Telephone: +27 (0) 11 884 0000

Information Regulator of South Africa Website: www.justice.gov.za/inforeg