Last updated: January 2025
1. Introduction
ALPHA5 TECHNOLOGIES (Pty) Ltd (Registration Number: 2025/552272/07) ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the OneTap mobile application and website (the "Service").
This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African data protection laws.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Account Information: Name, email address, phone number, and profile picture.
- Authentication Data: Login credentials and authentication tokens.
- Transaction Information: Order history, payment details (processed securely through our payment partners), and purchase preferences.
- Communication Data: Messages, feedback, and support requests.
2.2 Automatically Collected Information
When you use the Service, we may automatically collect:
- Device Information: Device type, operating system, unique device identifiers.
- Usage Data: Pages visited, features used, time spent on the Service.
- Location Data: General location based on IP address (we do not collect precise GPS location without consent).
3. How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain the Service.
- To process and fulfill your orders.
- To communicate with you about orders, updates, and promotions.
- To improve and personalize your experience.
- To detect, prevent, and address technical issues and fraud.
- To comply with legal obligations.
- To send push notifications about order status (with your consent).
4. Legal Basis for Processing (POPIA Compliance)
Under POPIA, we process your personal information based on:
- Consent: Where you have given explicit consent for specific processing activities.
- Contractual Necessity: To fulfill our contract with you when you place an order.
- Legal Obligation: To comply with applicable laws and regulations.
- Legitimate Interest: For purposes that are necessary for our legitimate business interests, provided these do not override your rights.
5. Information Sharing and Disclosure
We may share your information with:
- Vendors: To process and fulfill your orders (name and order details only).
- Payment Processors: Yoco and other payment partners to process transactions securely.
- Service Providers: Third-party companies that help us operate the Service (hosting, analytics, customer support).
- Legal Requirements: When required by law, court order, or government request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
We do not sell your personal information to third parties.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit and at rest.
- Secure authentication mechanisms.
- Regular security assessments and updates.
- Access controls limiting who can view personal data.
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide the Service and fulfill orders.
- Comply with legal obligations.
- Resolve disputes and enforce agreements.
When your information is no longer needed, we will securely delete or anonymize it.
8. Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information (subject to legal requirements).
- Object: Object to processing of your personal information.
- Withdraw Consent: Withdraw consent for processing where consent was the basis.
- Data Portability: Request your data in a structured, commonly used format.
- Lodge a Complaint: File a complaint with the Information Regulator of South Africa.
To exercise these rights, contact us at onetap.eventsafrica@gmail.com.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep you signed in.
- Remember your preferences.
- Analyze usage patterns to improve the Service.
You can control cookie settings through your browser. Disabling cookies may affect Service functionality.
10. Push Notifications
With your consent, we send push notifications to:
- Update you on order status changes.
- Notify you when your order is ready for collection.
- Send promotional offers (optional, can be disabled).
You can manage notification preferences in your device settings or the app.
11. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. International Data Transfers
Your information may be transferred to and processed in countries other than South Africa (e.g., where our service providers are located). We ensure appropriate safeguards are in place for such transfers in compliance with POPIA.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
For questions, concerns, or to exercise your rights under this Privacy Policy, contact us at:
ALPHA5 TECHNOLOGIES (Pty) Ltd
Information Officer
Email: onetap.eventsafrica@gmail.com
Registration Number: 2025/552272/07
You may also contact the Information Regulator of South Africa:
Information Regulator (South Africa)
Website: www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za