Privacy
1 November 2026
Who we are
Yoohoo is run by Tastemaker Studios in Cape Town. Contact our information officer at bernard@tastemaker.works.
Two roles
For the shops that install Yoohoo, we are the responsible party for their account data under the Protection of Personal Information Act (POPIA).
For a shop’s customers, the shop is the responsible party. We process their information as the shop’s operator, on the shop’s instructions.
What we collect
- From Shopify: the shop’s details, orders, and each customer’s name, phone number, email address, delivery addresses and fulfilment status.
- From Stitch: the status and amount of each payment link, the payment method type, and a card’s first six and last four digits where the shop’s integration provides them. We never receive full card numbers.
- From WhatsApp: messages to and from the shop’s number, whether they were delivered and read, opt-ins, and STOP replies.
- From this website: standard server logs. We use no advertising trackers.
What we use it for
- To send the shop’s payment reminders, receipts and delivery questions, and the messages a customer has opted into.
- To answer a customer’s questions from their order. An AI model may draft the answer from the shop’s own data. That data is not used to train the model.
- To show the shop its dashboard in the Shopify admin.
Who we share it with
Only the service providers Yoohoo needs to run: Shopify, Stitch, Meta (WhatsApp), and our hosting, database and AI model providers, each under contract. We do not sell personal information.
Some of these providers are outside South Africa. We transfer information to them only under the safeguards section 72 of POPIA requires.
How long we keep it
For as long as the shop uses Yoohoo. We delete a shop’s data within 30 days of the shop uninstalling Yoohoo, and act on Shopify’s requests to delete a customer’s or a shop’s data.
Your rights
You can ask to see the information held about you, to correct it, to delete it, or object to how it is used. Ask the shop, or write to us at bernard@tastemaker.works. Replying STOP on WhatsApp ends messages from that shop.
If you are unhappy with how we handle your information, you can complain to the Information Regulator.
Security
Information is encrypted in transit, and access tokens are encrypted at rest. Only the people who need access to run Yoohoo have it.
Changes
When this policy changes, we update this page and the date at the top.