1. Introduction

iZinga ("iZinga", "we", "us", or "our") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, No. 4 of 2013 ("POPIA").

This Privacy Policy explains:

This Privacy Policy applies to all users of the iZinga ecosystem, including:

This Policy applies to both delivery.izinga.co.za and onboard.izinga.co.za. The data processing activities across both platforms are substantially similar and therefore a unified policy is appropriate at this stage. Separate privacy notices may be introduced in future if a product develops materially different processing activities.

2. Responsible Party

For purposes of POPIA, iZinga acts as the Responsible Party in respect of personal information processed through the platform.

Information Officer

Information Officer: Lindani Masinga

Entity: Curiousoft (Pty) Ltd (Registration No. 2016/429327/07)

Email: privacy@izinga.co.za

Telephone: +27 81 281 5707

Physical Address: 68 Jacaranda Avenue, Olivedale, Randburg, 2188

Registration effective: 20 August 2026

The Information Officer is registered with the Information Regulator of South Africa. Registration was completed on 20 August 2026.

3. Personal Information We Collect

Depending on your role and use of the platform, we may collect the following categories of personal information.

3.1 Identity and Contact Information

This information is used for account creation, verification, communications, onboarding and support.

3.2 Account Information

This information allows iZinga to manage access rights, workflows and operational functions.

3.3 Driver and Compliance Information

For drivers and delivery partners we may collect:

This information assists with onboarding, compliance assessments, fraud prevention and operational safety.

3.4 Financial Information

We may collect:

iZinga does not store or process raw card payment information. Payment card transactions are processed by Yoco as described below.

3.5 Order and Delivery Information

This information is required to provide delivery services and manage orders.

3.6 Device and Technical Information

This information assists with platform functionality, notifications, troubleshooting and security.

3.7 Communications and Support Information

Support interactions may be stored and reviewed for quality control, dispute resolution and service improvement.

4. How We Collect Information

We collect personal information through:

Direct collection

When you:

Automated collection

Through:

Support-assisted collection

Information may also be collected or verified through customer support interactions.

5. Lawful Basis for Processing

Under POPIA, iZinga processes personal information where:

6. How We Use Personal Information

We use personal information to:

7. Third-Party Service Providers

7.1 Yoco

iZinga uses Yoco as a payment service provider. When you make a card payment:

Yoco processes personal information in accordance with its own privacy notices and applicable legal requirements.

7.2 Google Firebase

iZinga uses Google Firebase services, including:

Firebase processes personal information on behalf of iZinga for authentication, hosting, messaging and chat functions. The processing may involve storage or transfer of information outside South Africa. Appropriate safeguards are implemented through Google's contractual commitments and security controls.

7.3 Other Service Providers

Depending on operational needs, iZinga may engage:

All operators must be contractually required to implement appropriate security measures.

8. AI-Assisted Support and Messaging

Where support services are conducted through WhatsApp or AI-assisted systems:

Important: Users should avoid sharing passwords, PINs, OTPs or payment card information during support interactions.

9. Sharing Personal Information

We may share personal information:

We do not sell personal information.

10. Data Security

iZinga implements reasonable technical and organisational measures to protect personal information, including:

No system can guarantee absolute security, but we continuously monitor and improve our safeguards.

11. Data Retention

iZinga retains personal information in accordance with legal, operational and compliance requirements.

Data Category Retention Period
Customer account records Duration of account plus 5 years after closure
Order and delivery records 5 years from order completion
Driver onboarding records Duration of relationship plus 5 years
Driver compliance documents Duration of relationship plus 5 years unless longer retention is legally required
Financial and payout records 5 years after financial year end
Tax and accounting records Minimum period required by applicable tax legislation
Chat and support records 3 years from closure of interaction
Identity verification records 5 years after account closure
Device and notification records 12 months after last activity
Marketing consent records 5 years after withdrawal of consent
Website authentication logs 12 months
Rejected onboarding applications 12 months unless litigation or regulatory requirements require longer retention

Where litigation, investigations, regulatory requests or legal obligations apply, information may be retained for longer periods. At the end of the retention period, information will be securely deleted, anonymised or destroyed.

12. Your Rights Under POPIA

You have the right to:

Access

Request confirmation of whether iZinga holds personal information about you and obtain access to that information.

Correction

Request correction, updating or completion of inaccurate information.

Deletion

Request deletion of information where retention is no longer legally required.

Objection

Object to the processing of personal information where permitted by POPIA.

Withdrawal of Consent

Withdraw consent where processing relies on consent.

Direct Marketing Objection

Object to direct marketing communications at any time.

Complaint

Submit a complaint to iZinga or directly to the Information Regulator.

Requests may be submitted to:

13. Information Regulator

If you believe that your personal information has been processed unlawfully, you may lodge a complaint with:

Information Regulator (South Africa)

Website: https://www.justice.gov.za/inforeg/

Email: complaints.IR@justice.gov.za

14. Cross-Border Transfers

Certain technology providers, including Google Firebase and related cloud infrastructure providers, may process personal information outside South Africa. Where cross-border transfers occur, iZinga will ensure that:

15. Cookies and Local Storage

iZinga uses cookies and browser storage technologies to:

Users may manage cookie settings through their browser.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or operational changes. The latest version will always be available on:

Continued use of the platform following publication of changes constitutes acceptance of the updated policy.