Privacy Policy
1. Who is responsible
KS Consulting Services (registration number 2024/862023/07), trading as GuestWave, is the responsible party for personal information processed through the GuestWave platform, in terms of the Protection of Personal Information Act, 2013 (POPIA). Our Information Officer can be reached at hello@guestwave.co.
2. Who this covers
This policy covers account holders and their team members. Guests are anonymous— when a guest scans a tag we do not collect personal information about them; a signed, non-identifying session cookie is used to run the guest page, and some per-viewer preferences may be stored locally in the guest’s own browser.
3. What we collect
- Account details — your name and email address.
- Billing details — company / legal name, VAT number, invoice email and billing address.
- Authentication — if you sign in with Google, basic profile information from Google.
- Payment information — card payments are collected and processed by Paystack. We do not receive or store your card number; we retain only Paystack references (customer, subscription and authorisation codes).
- Usage & support — content you create (menus, branding), activity logs, and messages you send us.
4. Why we use it & lawful basis
We use personal information to provide and secure the service, take payment and issue invoices, provide support, and meet legal obligations. We process it to perform our contract with you, with your consent where required, for our legitimate business interests, and to comply with the law.
5. Who we share it with (operators)
We use trusted operators/processors to run the service:
- Paystack — payment processing.
- Google — sign-in (Auth) and address lookup (Places), where you use those features.
- Resend — sending transactional email such as invoices and verification codes.
- Google Cloud — hosting and database, in the africa-south1 (Johannesburg) region.
Some operators may process information outside South Africa; where they do, we rely on appropriate safeguards as required by POPIA. We do not sell your personal information.
6. Retention
We keep personal information for as long as your account is active and as needed to provide the service, then for any period required to meet legal, tax and accounting obligations, after which it is deleted or anonymised.
7. Your rights
Subject to POPIA, you may request access to, correction or deletion of your personal information, and object to certain processing. Contact hello@guestwave.co. You may also complain to the Information Regulator (South Africa) at inforeg@justice.gov.za.
8. Cookies & local storage
We use an essential cookie to keep you signed in. Guest pages may store small per-viewer preferences (such as a basket or a remembered tab) in the guest’s own browser; these stay on that device and are not sent to us.
9. Security
We use encryption in transit, keep card data with our PCI-compliant payment provider, and apply access controls. No system is perfectly secure, but we take reasonable steps to protect your information.
10. Changes & contact
We may update this policy and will post the current version here. Questions: hello@guestwave.co.