Privacy Policy

This Privacy Policy describes how E-BOLEKA (PTY) LTD ("E-Boleka", "BOLEKA", "we", "us", or "our"), a company registered in South Africa, collects, uses, stores, and shares personal information when you visit or use our website, eboleka.co.za, our mobile application, and any related services (collectively, the "Platform").

E-Boleka acts as the responsible party (data controller) for the personal information processed through the Platform. This policy is drafted to comply with the Protection of Personal Information Act, 4 of 2013 ("POPIA") and other applicable data protection laws.

Information you provide

• Identity and account details: your full name, email address, phone/WhatsApp number, profile photo, and any information you provide when creating or updating your account.
• Contact information: your email address, mobile number, and location or delivery details you supply when listing, renting, or requesting items.
• Communications: messages you send through the Platform, and any support requests, emails, or chat messages you send to us.

Rental and marketplace information

• Listing details: item titles, descriptions, photos, categories, prices, and availability you publish on the Platform.
• Rental records: rental requests, agreements, pickup and return details, payments, wallet transactions, and QR-code verification logs.
• Reviews and ratings: feedback you submit about other users and items.

Technical data and cookies

• Usage data: internet protocol (IP) address, browser type and version, device information, operating system, pages viewed, timestamps, and referring URLs.
• Cookies and similar technologies: session cookies, preference cookies, and analytics and advertising tags, as described in Section 4.

We process your personal information for the following purposes:

Marketplace listings and transactions

• To publish and display your item listings, connect renters with owners, and facilitate rental requests, payments, returns, and QR-code verification.
• To build trust through reviews, ratings, and reliability scores.

Platform security

• To detect, prevent, and respond to fraud, abuse, spam, and other harmful or unlawful activity.
• To verify identities, resolve disputes, enforce our Terms, and protect the security of accounts and the Platform.

Advertising and measurement

• To personalise advertising and measure the performance of our marketing campaigns using Meta Business Tools and Google Services, as detailed in Section 5.
• To understand how visitors use the Platform and to improve our products, features, and user experience.

Communications and legal compliance

• To send transactional notifications, service updates, and responses to your support requests.
• To comply with POPIA, tax, accounting, and other legal or regulatory obligations.

We use cookies and similar technologies (such as pixels and tags) to recognise your browser, remember your preferences, and collect usage data. Cookies are small text files stored on your device.

Categories of cookies we use

• Strictly necessary cookies: required for the Platform to function, including authentication and security.
• Preference cookies: remember your settings and choices to improve your experience.
• Analytics cookies: help us measure traffic and understand how visitors interact with the Platform.
• Advertising cookies: set by Meta (Meta Pixel) and Google (Google Ads tags) to personalise ads and measure campaign effectiveness.

You can control or disable cookies through your browser settings. Most browsers allow you to refuse or delete cookies; however, disabling strictly necessary cookies may affect the functionality of the Platform. You can also manage advertising preferences through the opt-out controls described in Sections 5 and 8.

To operate, market, and measure the Platform, we integrate third-party business tools that may collect and process your information as described below. These providers are subject to their own privacy policies and act as separate data controllers or processors, as applicable.

Meta Business Tools (Meta Platforms, Inc.)

• Meta Pixel: a tracking tag on our website that records page views and actions you take (such as visits and sign-ups) to measure ad performance and help Meta show you more relevant ads on Facebook and Instagram.
• Meta Conversions API and Graph API: we send selected event data to Meta through its Graph API, including a hashed (encrypted) email address for events such as CompleteRegistration, to improve ad measurement, audience matching, and engagement tracking.
• Meta may combine this data with other information it holds about you in line with the Meta Data Policy.

To control how Meta uses your information, you can review your Facebook Ad Preferences and manage your off-Facebook activity in your Facebook settings.

Google Services (Google LLC)

• Google Analytics: collects technical and usage data (such as pages visited, device type, and approximate location) to help us measure website performance and understand user behaviour.
• Google Ads tracking tags: conversion tracking and remarketing tags that enable ad personalisation and measurement of Google advertising campaigns.
• Google may process this data in accordance with the Google Privacy Policy.

You can opt out of personalised Google advertising through your Google Ads Settings and install the Google Analytics Opt-out Browser Add-on.

We may share your personal information in the following circumstances:

• Service providers: trusted third parties that help us operate the Platform, including hosting, authentication, database, payment processing (such as PayFast), and cloud storage providers, who process data only on our instructions.
• Advertising and analytics partners: Meta (Meta Business Tools) and Google (Google Services), as described in Section 5.
• Legal and safety: where required by law, regulation, legal process, or a lawful request from authorities, or to protect the rights, property, or safety of E-Boleka, our users, or the public.
• Business transfers: in connection with a merger, acquisition, reorganisation, or sale of assets, where personal information may be transferred as part of the transaction.

We do not sell your personal information to third parties. Other users of the Platform can see information you choose to publish, such as your listings and profile information.

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, including to provide the Platform, comply with legal and accounting obligations, resolve disputes, and enforce our agreements. When information is no longer required, we securely delete or anonymise it.

Subject to applicable law (including POPIA), you have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct or update inaccurate or incomplete information.
• Deletion: request deletion of your personal information or your account (see account deletion below).
• Objection and restriction: object to or request restriction of certain processing, including direct marketing.
• Withdrawal of consent: withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.
• Opt-out of personalised advertising: use the Meta and Google controls described in Section 5, or adjust cookie settings in your browser.

Account deletion requests

You may request deletion of your account and associated personal information at any time by contacting us using the details in Section 11, or through the account settings in the Platform. We will action verified requests within the timeframes required by law, subject to any retention obligations.

You also have the right to lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za if you believe your personal information has been processed unlawfully.

The Platform is intended for users aged 18 years and older and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

For any privacy-related questions, requests, or concerns, or to exercise any of the rights described above, please contact our privacy team: