Website Privacy Policy (POPIA) – Miya’s Sushi & Catering Company

Miya’s Cullinary Adventure and 2003/100483/23
7 Tower Village, Elsie Rd, Radiokop, Tel no. 0834594818 and info@miyas-sushi.co.za
Katsuhiko Miyamoto(by default the owner or CEO)
https://miyas-sushi.co.za/
FNB, EMAIL info@miyas-sushi.co.za, booking system via webmail, Website host: Afrihost

Introduction and who we are

Miya’s Culinary Adventure – Registration number: 2003/100483/23
respects your privacy and processes your personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains what we collect, why, who we share it with, and the rights you have.

It applies to our website at https://miyas-sushi.co.za, and to information we collect by email, phone, WhatsApp, in person, or when you book or receive our catering services.

For POPIA purposes, we are the “responsible party”. Our Information Officer is Katsuhiko Miyamoto, who can be reached at terry@miyas-sushi.co.za or 0834594818. Our address is 7 Tower Village, Elsie Rd, Radiokop.

By using our website or giving us your information, you acknowledge this policy. Where POPIA requires your consent, we will ask for it separately.

What personal information we collect

We only collect what we need to quote, plan, deliver and invoice your event, and to run our business. Depending on how you deal with us, this may include:

Contact details: name, email address, phone number, company name, billing and delivery address.
Event details: date, venue, guest numbers, menu choices and special requests.
Dietary and allergy information: allergies, medical dietary needs, and religious or cultural food requirements (see section 4).
Payment details: invoice and EFT records, and card details only if processed by us. If you pay via a third-party provider, we do not store full card numbers.
Website and device data: IP address, browser type, pages visited and cookie data (see section 7).
Communications: emails, messages, enquiry-form submissions and reviews you send us.
Business contacts: details of suppliers, freelance staff and venue partners.

We collect this directly from you in most cases. Sometimes it comes from the person booking on your behalf, such as an event planner or your employer, or from venues and payment providers.

Providing the information is voluntary, but if you don’t give us what we need for a booking (for example, event details or an address), we may not be able to quote or deliver.

How and why we use your information

We use your personal information only for the purposes below, and only where POPIA allows it.

Purpose	Lawful basis under POPIA
Quoting, booking, preparing and delivering your event	Needed to conclude or perform a contract with you
Invoicing, payment, accounting and tax records	Contract and legal obligations (e.g. tax law)
Managing allergies and dietary needs safely	Your consent, and our duty to protect guest health
Answering enquiries and giving support	Our legitimate interests and yours
Keeping our website secure and improving it	Our legitimate interests
Sending newsletters, offers and promotions	Your consent, or the existing-customer rule below
Responding to complaints, disputes or legal requests	Legal obligation and legitimate interests

Direct marketing. We will only send you marketing by email, SMS or WhatsApp if you opted in, or if you are an existing customer who was given the chance to object when we collected your details and who has not objected. Every marketing message includes a simple way to opt out, and you can also email terry@miyas-sushi.co.za at any time. We do not sell your personal information. Email addresses: terry@miyas-sushi.co.za or info@miyas-sushi.co.za

Allergies, dietary needs and children

Information about allergies, medical dietary requirements and religious or cultural food needs can reveal your health or beliefs, which POPIA treats as “special personal information”. We collect it only so that we can prepare safe, suitable food, and only with your consent, which you give when you submit it to us. We use it for your event, share it only with the staff and kitchen team who need it, and delete or anonymise it once the event is done and any legal need to keep it has passed.

If you give us this information about your guests, please make sure they know and agree.

Our website is not aimed at children, and we do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. For children’s events, we deal with the parent or guardian who books.

Who we share your information with

We share personal information only where needed to run your event or our business, and we require anyone who handles it for us (“operators” under POPIA) to protect it and use it only on our instructions. This may include:

Payment and banking providers: FNB current account, Miya’s Culinary Adventure, account no. 62133152257
Delivery drivers, venues, event planners and hire companies working on your event
Our website host, email and booking or CRM systems – Afrihost, Bookings via webmail
Accountants, auditors and professional advisers
Authorities, where the law requires it

Some of these providers store data on servers outside South Africa. When that happens, we only transfer your information where the recipient is bound by privacy rules that offer similar protection to POPIA, or where you consent, or where it is needed to perform our contract with you.

Security, retention and breaches

We take reasonable technical and organisational steps to protect your information, including password protection, access limited to staff who need it, secure hosting and keeping paper records locked away. No system is completely secure, so we cannot guarantee absolute security.

We keep personal information only as long as needed for the purpose we collected it, or as the law requires, as a guide: event and enquiry records for 5 years after the event, and financial and tax records for 5 years, which is the usual tax-law period. Marketing details are kept until you opt out. Afterwards, we delete or de-identify the information. If your information is compromised and there is a risk of harm to you, we will notify you and the Information Regulator as soon as reasonably possible, as POPIA requires.

Cookies and website analytics

Our website uses cookies, which are small files stored on your device. Essential cookies make the site work (for example, keeping an enquiry form running).

You can accept or decline non-essential cookies through our cookie banner, and you can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site from working.

Your rights

Under POPIA you may, at any time:

Ask whether we hold personal information about you, and request access to it
Ask us to correct, update or delete information that is inaccurate, outdated or no longer needed
Object to us processing your information, including for direct marketing
Withdraw consent you gave us (this doesn’t affect processing done before you withdrew)
Complain to the Information Regulator or to us

To use these rights, email our Information Officer at terry@miyas-sushi.co.za. We may ask you to verify your identity first, and we will respond within a reasonable time.

If you are unhappy with how we handled your information, you can complain to the Information Regulator (South Africa). Check the current details at inforegulator.org.za before publishing. At the time of writing, complaints go to POPIAComplaints@inforegulator.org.za and general enquiries to enquiries@inforegulator.org.za.

Changes to this policy and contact us

We may update this policy from time to time, for example when our services or the law change. The latest version is always on our website with its “last updated” date:

19 October 2026. If we make material changes, we will take reasonable steps to let you know.

Contact us: Miya’s Catering, 7 Tower Village, Elsie Rd, Radiokop, 0834594818. Attention: Information Officer, Teresa Miyamoto