PRIVACY POLICY

1. Introduction

eKasi Digital Mall ("eKasi", "we", "us") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains what information we collect, why, and how we use and protect it when you use our marketplace, website or WhatsApp channels.

2. What eKasi Is (and Is Not)

eKasi is a consumer and merchant-facing digital marketplace for discovering, purchasing and redeeming vouchers. eKasi is not a bank, wallet, payment service provider, clearing house or settlement entity. Payment and wallet functions are provided by our group infrastructure partners, who process certain information under their own applicable policies.

3. Information We Collect

Depending on how you use eKasi, we may collect: contact details (name, phone number, WhatsApp ID, email); merchant business details (business name, location, category, contact person); transaction information related to voucher purchases and redemptions; and technical information such as device type and general usage data when you use our website.

4. How We Use Your Information

We use personal information to: provide and improve the marketplace; process and facilitate voucher purchases and redemptions; communicate with you about your account, orders or enquiries; verify and onboard merchants and partners; and meet legal, regulatory and security obligations.

5. Legal Basis for Processing

We process personal information where you have consented, where it is necessary to perform a service you have requested, where required by law, or where it is necessary for our legitimate business interests and does not unreasonably infringe your rights as a data subject.

6. Sharing of Information

We may share personal information with: group infrastructure and payment partners strictly to enable voucher issuance and redemption; participating merchants, limited to what is needed to fulfil a transaction; and service providers who support our operations (e.g. hosting, messaging). We do not sell personal information to third parties.

7. Data Security

We implement reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, interference, modification or disclosure, as required by POPIA.

8. Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law, after which it is securely deleted or anonymised.

9. Your Rights

Under POPIA, you have the right to: access the personal information we hold about you; request correction or deletion of your information; object to certain processing; and lodge a complaint with the Information Regulator. To exercise these rights, contact us using the details below.

10. Children's Information

eKasi is not intended for use by children under 18 without the involvement of a parent or guardian. We do not knowingly collect personal information from children in violation of POPIA.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via our website or WhatsApp channel. Continued use of eKasi after changes take effect constitutes acceptance of the updated policy.

For questions about this policy, POPIA requests, or to exercise your rights as a data subject, contact our Information Officer at hello@ekasidm.co.za. You may also lodge a complaint with the Information Regulator of South Africa at justice.gov.za/inforeg.