HOLLYWOOD SPORTSBOOK KWAZULU NATAL PROPRIETARY LIMITED

(“Hollywood Bunny Bar”)

CUSTOMER PRIVACY NOTICE

1. PURPOSE OF THIS PRIVACY NOTICE

This privacy notice explains how we collect, use, and process your personal information through your use of the Hollywood Bunny Bar website, including any information you may provide through this website when you place an order with us. We will ensure that the personal information we collect from yourself is protected and processed carefully and responsibly.

It is important that you read this privacy notice together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you so that you are fully aware of how and why we are using your information. This privacy notice supplements other notices, the Standard Terms and Conditions and privacy policies and is not intended to override them.

2. WHO IT APPLIES TO

This notice applies to any person (natural or juristic) whose information is loaded on our website for the purpose of placing an order for delivery or for booking our catering services.

We may need to update this privacy notice periodically and encourage you to check our privacy notice regularly so that you remain up to date on how we process and protect your personal information.

If you have any questions about this notice, please email us at [email protected].

3. WHAT PERSONAL INFORMATION WE COLLECT AND GENERATE

Personal information means any information about a natural person from which that person can be identified. It does not include information where the identity has been removed (anonymous information).

We collect the personal information we require, to register you as a customer and to communicate with you.

• The following is the information we collect:

• Name;
• Surname;
• Contact details – email address, landline number and mobile number;
• Address details – (physical and delivery );
• Visual images; or
• Banking information – account name, card number, CVV number and name of Banking Institution.

• We generate information about you in the form of:

• Customer profile;
• Order records;
• Payment records; or
• Processing of orders and delivery requests.

As a general rule, we do not collect any special categories of personal information about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric information).

4. WHEN AND WHY WE COLLECT AND PROCESS YOUR PERSONAL INFORMATION

• We process your personal information to meet our contractual obligations with you, as well as collect and use your personal information for the following purposes:

• To register an account with us;
• To process your order when you submit an online order;
• To notify you of the confirmation of your order;
• To process a payment that you make on confirming an order;
• To reply to you when you contact us for support;
• To process the return of goods;
• To process refunds;
• To investigate and resolve your query, complaint or request; or
• To plan and schedule the delivery of your order.

• In some instances, we process your personal information because it is in our or your legitimate interest to do so. For example:

• We may monitor our premises with CCTV cameras to ensure your and our safety; or
• We may record your details (name/company name, identity number, contact number and vehicle registration number) upon the entrance to any of our premised to ensure your safety and our safety.

• We are legally required to collect and process certain information, including:

• to identify and validate our customers and for purposes related to the prevention of financial crime, including sanctions screening, monitoring of anti-money laundering and financing of terrorist activities;
• to report suspicious activity on your account to the relevant authorities; or
• to report to other governmental agencies, for example the South African Revenue Service.

When you register an account with Hollywood Bunny Bar you can choose if you want to receive promotional material from us. We may send you information about our services, products and promotional activities via the communication channels you selected. You can unsubscribe at any time by following the unsubscribe link or by contacting us.

5. CHILDREN’S INFORMATION

All information about minors will require parents and and/or a legal guardian’s consent for processing.

This applies to anyone under the age of 18 years.

We do not knowingly collect the personal information of persons under the age of 18 years.

6. WE ONLY SHARE YOUR INFORMATION WITH OTHERS WE TRUST

We only use service providers we trust and who have agreed to keep your personal information secure and confidential and to only use it for the purposes for which we shared it with them.

We use/may use service providers to assist with the following:

• communication with you;
• verification of your banking details;
• monitoring the effectiveness of our services to you;
• storing of your information for retention of records purposes as governed by respective legislation; and/ or
• processing of our accounting information;

Some of the service providers that we use may be located in other countries. These countries may not have the same levels of protection of personal information as South Africa, in which case the foreign service providers must undertake to protect the personal information of our customers to the same level that we do.

We provide for appropriate safeguards by means of contracts between us and our foreign service providers. By using our website, you agree to not being notified of details regarding the level of protection afforded to your information in the relevant country/countries.

We may be required to share your personal information with external auditors, internal auditors, professional accountants, professional advisors, South African Revenue Services, other regulatory and law enforcement bodies.

7. USE OF YOUR PERSONAL INFORMATION WHEN ENTERING PROMOTIONAL COMPETITIONS

In the event you enter any of our promotional competitions, we will collect and process your personal information for the purposes of the competition. This will include communication from us and our partners in relation to the competition.

As we are required by the Consumer Protection Act to announce the prize winners in any promotional competition held, details of winners will be published on our various social media platforms, namely, Facebook, Twitter and Instagram. This will usually be your name and surname. On certain occasions, we may publish photographs of winners but in this case we will obtain your specific and informed consent.

You have a right to request that your personal information not be published on any of the social media platforms by sending an email to [email protected].

8. REASONABLE STEPS TAKEN TO SAFEGUARD YOUR PERSONAL INFORMATION

We take reasonable steps to protect your personal information against the following:

• loss;
• interference;
• unauthorised access;
• use;
• modification;
• disclosure; or
• other misuse.

These steps include password protection for electronic files, securing paper files and physical access restrictions. We will continuously review our security controls and processes to ensure that security risks are identified and addressed.

If something should happen, we will take the necessary steps to minimise the threat to your privacy and we will let you know if your personal information has been compromised. We will also let you know how you can help minimise the impact of a breach.

9. WE DO NOT KEEP YOUR PERSONAL INFORMATION LONGER THAN WE NEED TO

We will not keep your personal information longer than we need to unless we are legally required to do so. We take legal requirements, contractual obligations and the expectations and requirements of our customers into account when we determine how long we should retain information. When we no longer need your personal information we will securely delete or destroy it in line with the Protection of Personal Information Act (POPIA) requirements.

10. CHANGES TO THE PRIVACY NOTICE AND YOUR DUTY TO INFORM US OF CHANGES

We keep our privacy notice under regular review, and therefore encourage you to check our privacy notice regularly so that you remain up to date on how we process and protect your personal information.

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

11. IF YOU FAIL TO PROVIDE PERSONAL INFORMATION

In this case, we may not be in a position to process your order or the service that you may require from us but we will notify you if this is the case at the time.

12. ACCESS AND CORRECTION OF PERSONAL INFORMATION

You have the right to:

• be notified that your personal information is being collected;
• be notified of security compromises where reasonable grounds exist for us to believe that your personal information has been accessed or acquired by an unauthorised person;
• ask us what we know about you and request access to such information; ask what personal information was sent to our service providers or any other third party;
• ask us to update, correct or delete any out-of-date or incorrect personal information we hold about you;where it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully;
• unsubscribe from any direct marketing communications we may send you and

object to the processing of your personal information;

• request us to delete or remove your personal information where there is no good reason for us continuing to process, although this will be subject to Hollywood Bunny Bar requiring the information for legal and legitimate reasons;
• request restrictions on processing of your personal information;
• withdraw your consent at any time where we are relying on consent to process your personal information;
• submit a complaint to the Information Regulator. You have the right to submit a complaint to the Information Regulator regarding an alleged interference with the protection of your personal information. However, please note that until POPIA is in force, the Information Regulator does not have the power to enforce your protection under POPIA;

You can request access to the personal information we hold about you or correct your personal information. It can take us up to 21 days to respond to your request due to procedures that we are required to follow. In certain cases, we may require proof of your identity and sometimes changes to your personal information may be subject to additional requirements such as valid proof of residence.

Please see below our contact details for our information officers:

13. DOCUMENT METADATA