Privacy Policy

ReDrip, operating under that trading name, is the responsible party for the personal information processed through the marketplace. [FOUNDER INFORMATION REQUIRED] — the registered legal entity name, company registration number and registered or principal business address must be inserted here.

Support: support@redrip.co.za. Privacy: privacy@redrip.co.za. Legal: legal@redrip.co.za.

[FOUNDER INFORMATION REQUIRED] — the Information Officer's name and contact details must be inserted here once appointed. We will also publish PAIA-related details where required.

We may collect the following categories of personal information:

• name, email address and telephone number
• account information and profile information (including profile photo and bio)
• identity or verification information
• bank account details (for seller payouts)
• delivery addresses and billing information
• transaction records and purchase history
• listing content, photographs and descriptions
• messages between users
• support requests and dispute evidence
• fraud and security information
• subscription information
• Paystack customer identifiers, subscription codes and payment references (see Section 5 and the automatic-renewal disclosure below)
• device information, browser information, IP address and technical logs
• cookies, analytics and preferences

ReDrip does not store raw card numbers or CVV. Card payments are processed by Paystack, which handles card data according to its own security standards. We store payment references and Paystack-issued identifiers needed to operate the platform, not raw card credentials.

We process personal information to:

• provide and administer user accounts
• operate the marketplace (listing, buying, selling, messaging)
• process payments and manage seller payouts
• facilitate delivery
• provide Buyer Protection and manage disputes
• prevent fraud and protect platform security
• provide and manage ReDrip Plus subscriptions
• provide customer support
• comply with legal obligations
• perform analytics and product improvement
• send transactional, security and service communications
• send marketing communications where permitted

We do not rely on a single universal "legal basis". Processing may be undertaken where necessary to:

• perform or administer agreements with users (for example to complete orders and payouts)
• comply with legal obligations
• protect the legitimate business or security interests of ReDrip, users or third parties, where permitted
• obtain consent where consent is the appropriate justification, with the right to withdraw that consent

This processing-justification wording should be reviewed by a qualified South African privacy lawyer. [LEGAL REVIEW REQUIRED]

We may share personal information where applicable with:

• Paystack (payment processing and recurring billing)
• courier and fulfilment providers (delivery)
• hosting and infrastructure providers
• communications providers
• analytics providers
• fraud and security service providers
• professional advisers
• law enforcement or regulators where lawfully required
• buyers and sellers where necessary for a transaction (for example delivery details shared with the seller)

We do not sell your personal information to third parties for marketing purposes. This reflects our current practice; it is not a contractual guarantee beyond what applicable law requires.

Bank account details are treated as sensitive financial personal information and handled with strong safeguards. We do not describe bank details as "special personal information" under POPIA unless and until that classification is legally verified.

Your information may be transferred to, or processed by, service providers located outside South Africa (for example hosting or payment providers). We aim to put appropriate safeguards in place for such transfers.

We implement reasonable technical and organisational security measures, including encryption in transit, access controls and monitoring. No system is completely secure. Users are responsible for keeping login credentials confidential.

We retain personal information for as long as reasonably required for the purposes described in this policy, to comply with legal obligations, to handle disputes and fraud prevention, and for record-keeping. We have not published fixed retention periods for every category of data. [LEGAL REVIEW REQUIRED] — a formal retention schedule should be developed.

Subject to applicable law, you may have rights concerning:

• access to your personal information
• correction of inaccurate information
• deletion where applicable
• objection to processing
• lodging a complaint with the Information Regulator
• withdrawal of consent where consent is relied upon

To exercise these rights, contact privacy@redrip.co.za.

You may request account deletion. Deletion does not necessarily require immediate deletion of information that must lawfully or reasonably be retained for transactions, disputes, fraud prevention or regulatory reasons.

We use cookies and similar technologies to remember preferences, operate the platform and perform analytics. You can manage cookies through your device or browser settings. Disabling some cookies may affect functionality.

We may send direct marketing where we have consent or another lawful basis. You can opt out at any time. Transactional and security messages are not marketing and may still be sent.

ReDrip is not intended for users under 18 without parental or guardian consent. If we learn we have inadvertently collected personal information from a minor without the required consent, we will take reasonable steps to address it.

We may update this Privacy Policy. Significant changes will be communicated through the platform or by email. Continued use after a change takes effect constitutes acceptance of the updated policy.

You may lodge a complaint with the Information Regulator (South Africa). The contact details below are taken from the existing project and should be verified against the regulator's official site before reliance:

Information Regulator (South Africa)
Website: www.inforegulator.org.za
Email: PAIA@inforegulator.org.za

[LEGAL REVIEW REQUIRED] — verify the regulator's current official contact details.