Privacy policy.

1. Who is responsible for your information

The Yummy Fish brand is owned by Laudian Investment Holdings and managed by The Franchise Co. The responsible party for personal information collected through this website — the party that decides why and how it is processed — is The Franchise Co.

• Address: Shop 102 & 112, 1st Floor, Finforum Centre Montana, Dr Van Der Merwe Rd, Montana, Pretoria, 0182, South Africa
• Email: info@thefranchiseco.co.za
• Telephone: +27 10 492 3793

Our Information Officer, appointed and registered as POPIA requires, can be contacted about anything in this policy or to exercise any of the rights in section 9:

• Email: info@laudiangroup.co.za
• Telephone: +27 10 492 3793
• In writing: at the postal address above, marked for the attention of the Information Officer

2. What we collect

Information you give us

The only place this website asks for your personal information is the franchise enquiry form. When you complete it we collect:

• your full name;
• your phone number;
• your email address;
• the town or area where you would like to open a store;
• the investment range you selected; and
• anything you choose to write in the message box, which is optional.

Everything except the message is required, because we cannot answer a franchise enquiry without it. This website does not create accounts, does not take payments, and does not ask for identity numbers, banking details or any special personal information such as health, race or religion.

Information collected automatically

• Server logs. Like any website, our hosting server records technical details of each request, including your IP address, browser type and the page requested. This happens for every visitor and is used for security and troubleshooting.
• Spam protection. When you submit the enquiry form we store a short-lived counter against a one-way SHA-256 hash of your IP address, purely to stop the form being abused. The raw address is never written to disk, the hash cannot be reversed back to your address, and the record is deleted automatically within two hours.

This website sets no cookies. It has no analytics, no advertising pixels, no embedded social media widgets and no third-party scripts of any kind. Nothing on this site tracks you across other websites, and there is no cookie banner because there is nothing to consent to.

3. Why we use it, and our lawful basis

We use your information only for the purpose you gave it to us for. If we ever want to use it for something else, we will ask you first.

4. Who we share it with

• The franchise team at The Franchise Co., limited to the people who handle franchise enquiries. Your enquiry is emailed to them, with your email address set as the reply address so they can respond to you directly.
• Our hosting provider, which stores the website and transmits the enquiry email on our behalf.

That is the whole list. We do not sell your personal information, we do not share it for anyone else’s marketing, and no advertising or analytics company receives anything from this website.

5. How long we keep it

• Franchise enquiries: kept while we deal with your enquiry and for up to 24 months after our last contact with you, so we can pick the conversation up again if you come back to us. After that they are deleted, unless a law requires us to keep them longer.
• Failed-delivery copies: if the enquiry email cannot be sent, a copy is written to a private folder on our server — outside the public website — so that your enquiry is not silently lost. These copies are reviewed, actioned and deleted, and are covered by the same 24-month limit above.
• Spam-protection records: deleted automatically within two hours.
• Server logs: rotated and deleted by our hosting provider on their standard schedule.

6. Information sent outside South Africa

We do not transfer your personal information outside South Africa for our own purposes. Your enquiry is sent to mailboxes used by The Franchise Co. and is not passed to any overseas service. If the email provider that carries the message routes or stores mail outside the country, that transfer is covered by section 72 of POPIA, on the basis of your consent and that provider’s own contractual data-protection commitments.

7. How we protect it

We take the security measures POPIA section 19 requires. On this website that means:

• the whole site is served over an encrypted HTTPS connection;
• browser security controls, including a Content-Security-Policy that blocks any third-party script, so nothing outside this site can read what you type into the form;
• every field is validated and length-limited on the server, not only in your browser;
• spam traps and rate limiting on the enquiry form;
• the file holding the recipient addresses, and the folder holding any failed-delivery copies, are both blocked from being served to the public.

No website can promise perfect security, but if a breach ever affected your personal information we would notify you and the Information Regulator, as section 22 of POPIA requires.

8. Marketing

We do not send marketing messages from this website. Completing the enquiry form signs you up to nothing. If we ever start sending marketing, we will ask for your consent first and every message will carry a way to opt out, as section 69 of POPIA requires.

9. Your rights

Under POPIA you have the right to:

• be told what personal information we hold about you, and get a copy of it (section 23);
• have information corrected if it is wrong, or deleted if it is inaccurate, irrelevant, excessive, out of date or held without a lawful basis (section 24);
• object to us processing your information (section 11(3));
• withdraw your consent at any time — this does not undo anything we did lawfully before you withdrew it;
• complain to the Information Regulator.

To exercise any of these, contact our Information Officer using the details in section 1. We may need to confirm your identity first. Formal requests for access to records are handled under the Promotion of Access to Information Act (PAIA), which sets the forms and timelines that apply.

10. Complaints

Please raise any concern with us first — we would rather fix it directly. If you are not satisfied, you can complain to the Information Regulator (South Africa):

• Website: inforegulator.org.za
• POPIA complaints: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za
• Telephone: 010 023 5200, or toll free 0800 017 160
• Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191

The Regulator publishes its current contact details and complaint forms on its own website; if they ever differ from the details above, the Regulator’s website is the correct source.

11. Children

This website is intended for adults enquiring about a franchise. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the website or the law changes. The effective date at the top of the page shows when it was last revised, and any material change will be reflected here.