Data Processing Agreement

Roles

For data a customer enters into its iFoodlab account, the customer is the responsible party (controller) and iFoodlab is the operator (processor). We process that data only on the customer's documented instructions and to provide the service.

What we process and why

We process the categories of data a customer chooses to put into the platform — for example staff, supplier, customer and operational records — for the sole purpose of providing the iFoodlab service. We do not use customer data for our own purposes, and AI features never use customer data to train models.

Sub-processors

We use a small number of service providers to deliver the service. Each is bound by terms that require them to protect the data and process it only on our instructions:

• Cloud hosting and application delivery.
• Managed database and file storage.
• Transactional email delivery.
• AI processing, where you use AI features — under a commercial agreement that excludes training on your data and applies a limited retention period.

We will give customers notice of any new sub-processor before it starts processing their data.

Security

We apply the technical and organisational measures described on our Security page, including tenant isolation, encryption in transit and at rest, backups, independent penetration testing and security checks on every release.

International transfers

Where a sub-processor processes data outside South Africa, we rely on appropriate safeguards — including contractual terms such as standard contractual clauses — consistent with POPIA.

Data subject requests, breaches and deletion

• We assist the customer in responding to requests from data subjects under POPIA.
• We notify the customer without undue delay if we become aware of a personal information breach affecting their data.
• On termination, we return or delete customer personal information as instructed, subject to legal retention requirements.

To request the signed long-form DPA or a current sub-processor list, email hello@ifoodlab.com.