POPIA Privacy Notice

1. Purpose of This Notice

This POPIA Privacy Notice explains how TAPTIP (PTY) LTD collects, uses, retains, protects, and shares personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA), and other applicable South African law.

2. Responsible Party and Contact

TAPTIP (PTY) LTD operates a South African digital tipping platform. For questions about personal information or to exercise applicable rights, contact:

Email: support@taptipsa.co.za
Website: https://taptipsa.co.za

3. Personal Information We May Process

Depending on how you interact with TAPTIP (PTY) LTD, we may process:

• full name;
• email address;
• mobile number;
• banking or payout details;
• profile and account information;
• identification or verification documents where required;
• device and browser information;
• IP address;
• transaction references and payment status;
• website usage, analytics, and cookie information; and
• other information reasonably necessary to provide, secure, and administer the platform.

Customers are not required to create an account to leave a tip. TAPTIP (PTY) LTD does not store customers' full debit or credit card numbers on its own servers.

4. Purposes of Processing

We process personal information for purposes including:

• providing and administering digital tipping;
• processing, reconciling, and recording transactions;
• facilitating payouts to registered attendants;
• verifying identities and payout information where required;
• preventing fraud, abuse, and security incidents;
• supporting customers, attendants, and participating businesses;
• maintaining platform security and reliability;
• resolving disputes and investigating payment issues;
• improving our products and services; and
• complying with legal, regulatory, payment-provider, and court requirements.

5. Lawful Processing

TAPTIP (PTY) LTD processes personal information only where permitted by POPIA, including where processing is necessary to provide a service, comply with a legal obligation, pursue a legitimate interest that is not overridden by the individual's rights, prevent fraud or security threats, or where consent is required and has been obtained.

6. Payment Providers and Other Operators

TAPTIP (PTY) LTD uses third-party providers to support payment processing, hosting, banking or payout services, security, analytics, and other operational functions.

Yoco is the proposed payment provider. No application has been submitted and no approval has been granted. Online checkout is closed. If enabled after approval, payment information will be handled through the provider’s hosted checkout. TAPTIP (PTY) LTD does not store customers' full debit or credit card numbers on its own servers.

Third-party providers may process personal information under their own legal obligations, terms, and privacy notices. TAPTIP (PTY) LTD takes reasonable steps to establish appropriate contractual and security arrangements for service providers processing information on its behalf.

7. Security Safeguards

We implement reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, disclosure, alteration, or destruction.

Users are also responsible for protecting passwords, devices, and account credentials and for promptly reporting suspected unauthorised access.

8. Retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, meet legal and regulatory requirements, prevent fraud, resolve disputes, maintain transaction records, and enforce agreements. Information that is no longer required will be securely deleted, destroyed, or anonymised where reasonably practicable and legally permitted.

9. Your Rights Under POPIA

Subject to applicable law, you may have the right to:

• request access to personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion where legally permitted;
• object to certain processing activities;
• withdraw consent where processing is based on consent; and
• complain to the Information Regulator of South Africa.

Requests should be sent to support@taptipsa.co.za. We may need to verify your identity before responding to a request.

10. Cross-Border Processing

Some service providers may process or store personal information outside South Africa. Where applicable, TAPTIP (PTY) LTD will take reasonable steps to ensure that cross-border transfers or access comply with POPIA and that appropriate safeguards are in place.

11. Changes to This Notice

We may update this Notice when our processing activities, services, or legal requirements change. The latest version will be published on the TAPTIP (PTY) LTD website with the most recent revision date.

12. Contact

For questions, privacy requests, or concerns regarding personal information, contact:

Email: support@taptipsa.co.za
Website: https://taptipsa.co.za

If you remain dissatisfied with how your personal information has been handled, you may contact the Information Regulator of South Africa through its official channels.