Privacy Policy

Effective Date: 21 July 2026
ZamaSU (Pty) Ltd
Registered name: K2026398003 (South Africa) (Pty) Ltd (trading as ZamaSU (Pty) Ltd)
CIPC registration number: 2026/398003/07 · SARS tax reference: 9168614296
Republic of South Africa

1. Who We Are

ZamaSU (Pty) Ltd, registered name K2026398003 (South Africa) (Pty) Ltd (CIPC registration number 2026/398003/07; SARS tax reference 9168614296) ("ZamaSU", "we", "us", "our") is a South African company registered and operating in the Republic of South Africa. We operate a community-based digital marketplace at zamasu.co.za, connecting customers with local service providers, and the ZamaSU Merchant Network for voucher acceptance by approved retailers.

ZamaSU is the Responsible Party as defined under POPIA for all personal information collected through its platform.

Contact our Information Officer: info@zamasu.co.za

2. Information We Collect

2.1 Customer & Provider Accounts

When you register as a customer or service provider, we collect:

• Full name
• Phone number and/or email address
• Profile photo (optional)
• Physical address or general location (used for job matching and service delivery)
• Government-issued ID number (for identity verification)
• Date of birth
• Bank account details (for wallet withdrawals and payouts)
• Skills, service categories, and portfolio items (Providers)

2.2 Merchant (Retailer) Accounts

When you register as a ZamaSU Merchant, we additionally collect:

• Business name, trading name, and legal status
• Business registration number or company registration number
• Business physical address and operating hours
• Business bank account details for settlement
• Business logo and shop photo (optional, displayed in Merchant Portal)
• API key and Merchant Portal credentials (generated by ZamaSU, treated as confidential)
• Voucher redemption history, settlement records, and accounting ledger data
• Identity documentation of the account representative (ID/passport)
• Tax reference number where required

2.3 Transaction & Wallet Data

• Job postings, bids, and accepted offers
• Payment amounts, wallet balances, and transaction history
• Voucher issuance, redemption status, and settlement batch records
• Withdrawal requests and payout details
• Platform fee records

2.4 Device & Usage Data

• IP address and approximate geolocation
• Device type, browser, and operating system
• Pages visited, features used, and session duration
• Push notification tokens (if you opt in)
• Error logs and crash reports

2.5 Communications

• Messages sent through the ZamaSU platform
• Support enquiries and dispute correspondence
• Ratings and reviews

3. How We Use Your Information

• To create and manage your account
• To verify your identity and comply with legal requirements
• To facilitate job matching between Requestors and Providers
• To process payments, wallet transactions, withdrawals, and Merchant settlements
• To operate and settle the ZamaSU Merchant Network
• To investigate and resolve disputes
• To detect, prevent, and investigate fraud or abuse
• To send transactional notifications (job updates, payment confirmations, settlement notices)
• To send platform announcements and updates (you may opt out of non-transactional communications)
• To improve and optimise the ZamaSU platform
• To comply with tax, regulatory, and legal reporting obligations

4. Escrow & Financial Data

Job payments are held in escrow by ZamaSU until the job is completed and confirmed. All escrow and wallet balances are recorded in our secure database. Bank account details provided for payouts are encrypted at rest using AES-256 encryption.

We do not store full card numbers or payment card data. Where applicable, payment processing is handled by third-party payment partners who maintain their own PCI-DSS compliance.

5. Merchant Data Security

Merchant bank account details and settlement records are stored encrypted. Merchant API keys are generated using cryptographically secure random values. You are responsible for keeping your Merchant Portal credentials and API key confidential. If you believe your credentials have been compromised, notify us immediately at support@zamasu.co.za.

ZamaSU staff with access to Merchant settlement data are bound by confidentiality obligations. Settlement data is retained for a minimum of 5 years to comply with financial record-keeping requirements.

6. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Other platform users: Your public profile (name, profile photo, ratings, service categories) is visible to other ZamaSU users as necessary for job matching
• Payment processors: Your banking details and transaction data are shared with payment providers to process withdrawals and settlements
• Identity verification services: ID numbers and photos may be shared with third-party verification providers for KYC compliance
• Legal and regulatory authorities: We will disclose information when required by a court order, subpoena, legal process, or regulatory request
• Fraud prevention services: We may share data with fraud prevention agencies where we suspect fraudulent activity
• Service providers: Hosting, email delivery, push notification, and monitoring services that operate under confidentiality agreements

All third parties who receive your data are contractually required to handle it in accordance with POPIA and our instructions.

7. Location Data

ZamaSU may use your device location to show nearby jobs, calculate distances, or improve job matching. Location data is used for these functional purposes only and is not sold or shared with advertisers. You can disable location access in your device settings, though this may limit some platform features.

8. Push Notifications

If you opt in to push notifications, we will send you job alerts, payment confirmations, dispute updates, and platform announcements. You can withdraw consent at any time through your device notification settings or by updating your account preferences.

9. Community Moderation

ZamaSU may appoint community moderators who have limited access to platform content to assist with dispute resolution and safety. Moderators are bound by strict confidentiality agreements and may only access content directly relevant to their moderation duties.

10. Data Retention

• Active accounts: Data is retained for as long as your account is active
• Closed accounts: Core records are retained for 5 years to comply with South African financial and tax record-keeping laws
• Transaction records: Payment, escrow, wallet, and settlement records are retained for a minimum of 5 years
• Identity verification: ID documents are retained for the period required by applicable regulations
• Dispute records: Dispute files are retained for 5 years after final resolution
• Usage logs: Technical logs are retained for up to 12 months for security and debugging

11. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act 4 of 2013, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that incorrect or outdated information be corrected
• Deletion: Request that your information be deleted, subject to our legal retention obligations
• Objection: Object to the processing of your information in certain circumstances
• Restriction: Request that we limit how we process your information in certain circumstances
• Complain: Lodge a complaint with the Information Regulator of South Africa if you believe we have violated POPIA

To exercise any of these rights, contact our Information Officer at info@zamasu.co.za. We will respond within 30 days.

12. Security

We implement industry-standard technical and organisational security measures to protect your personal information, including:

• AES-256 encryption for sensitive data at rest (bank account details, API keys)
• HTTPS/TLS for all data in transit
• Access controls limiting staff access to personal data on a need-to-know basis
• Regular security reviews and vulnerability monitoring

While we take all reasonable steps to protect your information, no internet-based system is completely secure. You are responsible for keeping your account credentials confidential.

13. Cookies & Tracking

ZamaSU uses session cookies for authentication and functionality. We do not currently use third-party advertising cookies or tracking pixels. Session data is automatically deleted when you log out. You may configure your browser to decline cookies, but this will prevent you from logging into the platform.

14. Children's Privacy

ZamaSU is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered on the platform, please notify us at info@zamasu.co.za and we will close the account and delete associated data.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email or in-platform notification at least 30 days before taking effect. The effective date at the top of this document reflects the most recent update.

Continued use of the platform after a policy update constitutes your acceptance of the revised policy.

16. Contact & Complaints

ZamaSU (Pty) Ltd
Registered name: K2026398003 (South Africa) (Pty) Ltd (trading as ZamaSU (Pty) Ltd)
CIPC registration number: 2026/398003/07 · SARS tax reference: 9168614296
Republic of South Africa

Information Officer: info@zamasu.co.za
Support: support@zamasu.co.za

Information Regulator of South Africa:
Website: www.justice.gov.za/inforeg
Enquiries: inforeg@justice.gov.za