Privacy Notice

1. Who is responsible?

Strydom Prime Genetics (Pty) Ltd, trading as Prime Wagyu and Prime Wines, is the responsible party for the processing described here.

For privacy matters, address your request to the Information Officer using these contact details. You do not need to create a Rewards account to contact us.

External booking, payment and shopping services have their own privacy notices for information they process independently. Prime Wagyu and Prime Wines are brands of the same responsible party. Marketing permission identifies the brands it covers; this notice does not enrol you in marketing.

2. What we collect and where it comes from

• Rewards signup: first name, email, an optional mobile number, optional birthday day and month, membership identifier, signup source and time, terms acceptance and marketing choices, including the exact consent wording and version, selected channels and contact details, your 18-or-older confirmation, timestamps, signup source and later preference changes or withdrawals. Details come from you, including when a staff member enters them at your request. We do not ask for your birth year.
• Linked visits: bill and receipt references, venue, payment date, eligible spend, refunds or voids, and the serving staff identifier and name. These come from Lightspeed POS, staff linking your membership to a bill, and manager corrections. Linking a bill connects its purchase record to your membership.
• Enquiries, bookings and events: contact details, dates, guest numbers, company details where supplied, menu choices, budget, dietary or access requests, proposals, messages and booking arrangements. These come from you, your authorised organiser, our staff and booking services such as Dineplan where you book with us.
• Account and website use: email verification records, session identifiers, technical request information such as IP address and browser information, security logs, and event-enquiry steps and referral categories. Public reviews displayed on our site may include the reviewer’s published name, rating, date and comments, with a link to the original platform.

Required or optional? Rewards needs your first name and email to register you and provide email sign-in. Without them we cannot complete signup. Mobile and birthday details are optional; omitting them does not prevent membership. Enquiry forms mark the details needed to respond or arrange your event. You can browse the public website without joining Rewards.

Do not send payment-card numbers, identity documents or unnecessary sensitive details through signup or enquiry forms. If arranging an event for others, share only information you are authorised to provide. Dietary and accessibility details can reveal health or religious information: provide only what is needed for the requested accommodation.

3. Why we use information

• Membership and service: register and identify members, verify email access, link paid visits, correct records, handle enquiries and provide requested bookings and events. This supports our agreement with you or steps you ask us to take before an agreement.
• Programme administration: analyse spend and return visits, prevent duplicate claims and assess customer retention. We associate the serving staff member with each linked visit to understand staff performance and later return visits, even when another employee serves you. Earlier signup attribution may remain in audit records. These uses support our legitimate interests in running and improving the service, subject to your privacy rights.
• Birthday benefits: use the day and month you choose to provide to administer birthday benefits when offered. Providing a birthday is not consent to promotional messages.
• Communications: send necessary account, verification and booking messages; send optional promotions only on an appropriate marketing permission, as explained below.
• Protection and legal duties: investigate misuse, resolve disputes, maintain financial and audit records, and comply with applicable legal requirements, including tax and consumer-protection obligations.

Rewards is currently a membership and visit-tracking pilot; gift earning and redemption are not yet live. See the Rewards Terms. You can ask a person to review an incorrect visit, membership record or programme outcome.

4. Marketing is your choice

Our Rewards form offers separate, optional choices for email, WhatsApp and SMS news, offers and invitations from Prime Wagyu and Prime Wines, both operated by Strydom Prime Genetics (Pty) Ltd. You can choose any, all or none. Joining, accepting the Rewards Terms or reading this notice does not itself provide marketing consent.

The permission covers dining, events, wine tastings, wine and deli products, birthday offers and member benefits. Offers may be personalised using your linked visits, purchases, preferences and birthday, within the scope of the permission you give. Because offers include wine, we ask those choosing marketing to confirm that they are 18 or older. This is a declaration, not proof of age for purchasing alcohol.

A mobile number is needed only if you choose WhatsApp or SMS. Those preferences can be recorded before the sending services are connected. We require verified email access before using the new permission for marketing. We do not treat an email-only permission collected earlier as agreement to these broader purposes, brands or channels.

We keep a dated history of the wording and version presented, your channel choices and contact details, how your choice was recorded, and later changes. On a shared tablet, staff must ask for your choices; they must not select channels without your instruction. Signing up again with an existing email does not overwrite that account’s preferences.

You can manage your marketing choices after email sign-in or use the stop-marketing link in a promotional message without signing in. Opening a link alone does not change a preference: confirm “Stop all marketing”. You can also email bookings@primewagyu.co.za with the contact details to stop. No particular wording or fee from us is required.

Withdrawal blocks further marketing through our consent-controlled sending process. A message already handed to a delivery provider may still arrive. Your membership stays active and necessary account or booking messages may continue. We keep a minimal suppression record so a stopped contact is not accidentally added again. You may explicitly opt your verified email back in; contact us to review re-enabling a stopped mobile number.

Submitting a booking or event enquiry does not add you to a marketing list. We respect withheld or withdrawn permission, and updating this notice does not extend an earlier choice. POPIA’s limited existing-customer exception is not blanket permission to market to every member.

5. Who receives information

Relevant information is available to authorised staff and managers who need it for customer service, membership administration, bookings, reporting or resolving a request. Event enquiries and arrangements are sent to our bookings and management team.

Service providers involved include Lightspeed for POS records; Google/Gmail for business email and account messages; OpenAI Sites and its Cloudflare infrastructure for website hosting, storage and technical operations; and booking services such as Dineplan when used. An alternative email-delivery provider, such as Resend, may be used if configured. Providers receive information needed for their role. We may also disclose necessary records to professional advisers, authorities or other recipients where legally required or necessary to establish, exercise or defend legal rights.

We do not sell Rewards contact lists or give unrelated advertisers permission to market to you through this notice.

Processing outside South Africa

Our cloud, email and POS providers operate international systems, so information may be stored or processed outside South Africa, including in the United States and other countries where their infrastructure or support teams operate. Those countries may have different privacy laws and may not provide the same protections as POPIA.

International processing must have a basis permitted by section 72 of POPIA, such as a binding arrangement providing substantially similar protection, or a transfer necessary to perform your agreement with us. We remain responsible for meeting these requirements; this notice is not a request for blanket consent to overseas transfers. Contact us for information about the providers, destinations and safeguards relevant to your records.

6. Keeping information and protecting it

Retention depends on the purpose of the record: membership information is needed to operate your account; visit, booking and financial records may also be needed for reconciliation, legal duties or disputes. Permission and objection records may need to be kept to show what you chose and avoid contacting you again. We must delete or de-identify information when there is no longer a lawful reason to keep it. Closing an account does not automatically erase records that must lawfully be retained.

Sign-in codes expire after 10 minutes and member sign-in sessions after seven days. Expiry prevents further use; it is not a promise that every associated record or backup is erased at that moment. You can ask about retention or request deletion using the contact details below.

The application uses HTTPS, restricted administrative access, email verification for member account access and protected session cookies. We are responsible for reasonable organisational and technical safeguards under POPIA. No online service can guarantee absolute security. If a security compromise occurs, notification to affected people and the Information Regulator must be handled as POPIA requires.

7. Cookies and browser storage

Essential cookies support account sign-in, security and authorised tablet sessions. Blocking them may prevent those functions from working. Logging out ends your member session.

Event pages use a temporary referral category and entry-page record in session storage, with a 30-minute inactivity window, and record enquiry steps to help us understand how visitors use the forms. These features honour the browser’s Do Not Track setting. They are not used to enrol visitors in marketing.

If you choose “Save progress” in the event menu builder, menu choices are stored on your device. Drafts older than 30 days are not restored; you can remove a saved draft or clear your browser storage. Avoid saving personal plans on a shared device. External booking and payment services may use their own cookies under their own notices.

8. Children’s information

Please do not enter a child’s personal contact details into the Rewards signup. An adult organiser can provide necessary guest numbers and accommodation requests for a family booking. If we need a child’s personal information, an appropriate POPIA authorisation, including consent from a competent person where required, must be in place. Contact us if you believe a child’s information has been submitted inappropriately. An optional birthday day and month does not verify age; alcohol may not be supplied to anyone under 18.

9. Your rights and how to contact us

Subject to POPIA’s requirements and lawful exceptions, you can:

• Ask whether we hold your information and request access.
• Ask us to correct inaccurate information, or delete information we are no longer entitled to keep.
• Object to processing where POPIA permits, including direct marketing, and withdraw consent for processing based on it.
• Ask to close your Rewards membership or raise a concern about how information is used.

Email bookings@primewagyu.co.za, call 087 149 4685, or write to our address above, for the attention of the Information Officer. Describe your request and the contact details associated with your record. We may need proportionate identity verification before releasing or changing records. Never send us a sign-in code.

We will explain any applicable formal process, prescribed access fee or lawful reason that limits a request. Withdrawing marketing permission does not require payment or closing your account.

Complain to the Information Regulator

You may raise a complaint directly with South Africa’s Information Regulator:
POPIAComplaints@inforegulator.org.za
010 023 5200 · Toll-free 0800 017 160
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.
Current contact details and complaint guidance ↗

10. Changes to this notice

We will date updated notices here and draw attention to material changes through an appropriate channel. A change to this notice does not retrospectively expand your marketing consent or remove your rights. Where new processing requires your permission, we must obtain it separately.