86'd
Log in

Privacy Policy

Last updated: May 2026

Who we are

86'd is a B2B wholesale platform connecting hospitality venues — restaurants, cafes, bistros, delis and bars — with their suppliers. The responsible party under the Protection of Personal Information Act (POPIA) is the operator of 86'd.

What personal information we collect

  • Account data: first name, last name, email address.
  • Org data: venue or supplier name, trading address, contact details and the staff users you add to your org.
  • Order data: baskets, orders, line items and history while you use the platform.
  • Communication data: emails sent on your behalf are logged (sender, recipient, subject, status) for up to 2 years.
  • Session data: login tokens and timestamps used at login.

Why we process your information

  • To provide the platform services you have signed up for (lawful basis: contract performance).
  • To route orders and order updates between venues and their suppliers (lawful basis: contract performance).
  • To maintain security and detect abuse (lawful basis: legitimate interest).

Who we share your data with

Your data is shared with the suppliers and venues you trade with on 86'd, and only as needed to fulfil orders. We do not sell or share personal data with third parties for marketing.

Authentication is centralised at sso.8by3.net, operated by the same team. Single sign-on is used for login, password management and passkeys.

Emails are sent via MailPace (MailPace Ltd, United Kingdom), who process email delivery on our behalf and are bound by a data processing agreement.

How long we keep your data

  • Account data: until you delete your account.
  • Order history: retained for financial record purposes (7 years).
  • Email logs: purged after 2 years.
  • Login session tokens: expire automatically after 60 days.

Your rights under POPIA

You have the right to:

  • Access the personal information we hold about you — email privacy@8by3.net.
  • Correct inaccurate information — update your profile in Account Settings.
  • Delete your account and personal data — available in Account Settings.
  • Object to processing — email privacy@8by3.net.
  • Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

Security

All data is transmitted over HTTPS. Authentication is delegated to sso.8by3.net which uses Argon2 password hashing and supports TOTP and passkeys. Access to personal data is restricted to authenticated users and the org owners they belong to.

Contact

For privacy-related requests, email privacy@8by3.net.