SIVOA PAY – PRIVACY POLICY

Last Updated: 2026/01/04
Effective Date: 2026/01/04

This Privacy Policy explains how Sivoa (Pty) Ltd (“Sivoa”, “we”, “us”, “our”) collects, uses, stores, and protects personal information when you access or use Sivoa and its payment product, Sivoa Pay.

We are committed to protecting personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. SCOPE OF THIS POLICY

This Privacy Policy applies to:

• Restaurants using Sivoa Pay

• Customers making payments via Sivoa Pay

• Visitors to the Sivoa website

This Policy does not apply to third-party services (such as payment processors) governed by their own privacy policies.

2. INFORMATION WE COLLECT

2.1 Restaurant Information

We may collect:

• Business name

• Email address

• Phone number

• Bank account details

• Account and usage data

2.2 Customer Information

We may process:

• Customer name

• Customer phone number
  (provided by the Restaurant for billing purposes)

2.3 Transaction Data

We collect transaction-related information including:

• Bill amounts

• Payment dates

• Payment status

• Reconciliation and payout records

2.4 Payment Card Information

• Sivoa does not collect, store, or process card details

• All card information is handled exclusively by Yoco, a licensed payment processor

3. PURPOSE OF COLLECTION

We collect and process personal information to:

• Provide and operate the Sivoa Pay platform

• Facilitate digital billing and payments

• Process payouts to Restaurants

• Communicate operational and transactional updates

• Maintain audit and reconciliation records

• Comply with legal, tax, and regulatory obligations

4. LAWFUL BASIS FOR PROCESSING

We process personal information based on:

• Contractual necessity

• Legitimate business interests

• Legal and regulatory obligations

• Consent where required by POPIA

5. THIRD-PARTY SERVICE PROVIDERS

We share limited personal information with trusted third parties strictly for operational purposes, including:

• Yoco – payment processing

• Supabase – authentication and database services

• Resend – transactional email delivery

• Framer – website hosting and infrastructure

  
  

All third-party providers are contractually required to maintain appropriate security and confidentiality standards.

6. DATA STORAGE & SECURITY

6.1 We implement reasonable technical and organizational safeguards to protect personal information, including:

• Encryption where appropriate

• Restricted access controls

• Secure infrastructure providers

6.2 No payment card data is stored on Sivoa systems.

6.3 While we take security seriously, no system can be guaranteed to be completely secure.

7. DATA RETENTION

We retain personal information:

• For as long as necessary to provide services

• To comply with legal, accounting, and tax obligations

• For a minimum of five (5) years where required by South African law

Data that is no longer required is securely deleted or anonymized.

8. USER RIGHTS UNDER POPIA

You have the right to:

• Request access to your personal information

• Request correction or updating of inaccurate data

• Request deletion (subject to legal retention requirements)

• Object to certain processing activities

• Lodge a complaint with the Information Regulator of South Africa

Requests can be submitted to the contact details below.

9. COOKIES & ANALYTICS

We use cookies and similar technologies for:

• Authentication and session management

• Performance monitoring

• Basic usage analytics

You may disable cookies via your browser, though this may affect functionality.

10. DATA BREACH MANAGEMENT

In the event of a data breach:

• We will take immediate remedial action

• Affected users will be notified where required by law

• Relevant authorities will be informed where necessary

11. CROSS-BORDER DATA TRANSFERS

Some third-party service providers may process data outside South Africa. Where this occurs, we ensure appropriate safeguards are in place in line with POPIA.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.
Continued use of Sivoa or Sivoa Pay after updates constitutes acceptance of the revised policy.

13. CONTACT INFORMATION

For privacy-related queries or POPIA requests, contact:

Sivoa (Pty) Ltd
Email: teamsivoa@sivoa.co.za