Privacy Policy

Last updated 3 October 2026 · Protection of Personal Information Act 4 of 2013 (POPIA)

This explains what we collect when you order delivery from us, why we need it, and who else sees it. We keep it short because we collect very little.

1. Who is responsible

LEKKER KOREA, a trading name of Leesang (Pty) Ltd, is the responsible party for your personal information. Address: 1st Floor, The Rivonia Wellness Centre, 353 Rivonia Blvd, Edenburg, Johannesburg, 2128. Phone: +27 76 842 2539.

2. What we collect and why

We process this information to perform the contract you enter into when you order, and to meet our legal obligations. We do not use automated decision-making or profiling.

3. What we never collect

We never receive your card number, expiry date or CVV. Those are entered on Yoco's payment page and stay with Yoco. We do not collect your ID number, date of birth, or anything about your health.

4. Who else sees it

• Yoco Technologies — our payment processor. They receive the amount and an order reference, and handle your card securely.
• Our delivery partner — when a courier delivers your order, they receive your name, mobile number, address, pin and access notes. They need these to deliver and to call you on arrival.
• Google Maps Platform — when you search for your address, your search text and the chosen location are processed by Google so the map and distance work.
• Google Firebase — our database and sign-in provider. Order data is stored in Google's Johannesburg region (africa-south1).

That is the full list. We do not share your information with anyone else, and we never sell it or rent it to advertisers.

5. Where it is stored

Order records are stored in Google's South African data centre. Some supporting services (sign-in, delivery of the verification SMS) may process data outside South Africa. These providers are bound by contractual terms that require a level of protection comparable to POPIA.

6. How long we keep it

• Order and payment records: five years, as required by South African tax law.
• Saved addresses: until you delete them, or three years after your last order.
• The address saved on your own phone stays in your browser and never leaves it until you place an order. Clearing your browser data removes it.

7. Marketing

We only send you marketing messages if you tick the box asking for them. Ordering from us does not sign you up for anything. Every marketing message tells you how to stop, and stopping is immediate.

The only message we send automatically is the one-time code that verifies your number. Anything about the order itself appears on your tracking page, or we call you.

8. Security

• The whole site runs over HTTPS.
• Your mobile number is verified by one-time code before an order can be placed.
• Only staff accounts can open the kitchen screen, and even they cannot change the amount of a paid order.
• Your tracking link contains a long random code, so nobody can guess their way to your order.

9. Your rights

Under POPIA you may ask us to:

• tell you what personal information we hold about you;
• correct anything that is wrong;
• delete your details, where we are not required by law to keep them;
• stop using your information for marketing.

Call or WhatsApp us on +27 76 842 2539 and we will deal with it. If you are not satisfied, you may complain to the Information Regulator of South Africa (inforegulator.org.za).

10. Cookies and local storage

We do not use advertising or tracking cookies. The order page stores your saved addresses and your verification status in your own browser so you don't have to type them again. You can clear this at any time through your browser settings.

11. Changes

If this policy changes we update this page and the date at the top.