Privacy & POPIA Policy

1. About this Privacy Policy

This Privacy Policy explains how REVEND collects, uses, stores, shares and otherwise processes personal information when users access or use the REVEND marketplace and related services.

REVEND intends to process personal information in accordance with applicable South African privacy and data protection requirements, including the Protection of Personal Information Act, 4 of 2013 ("POPIA"), where applicable.

This Policy should be read together with REVEND's Terms & Conditions and other applicable platform policies.

2. Personal information we may collect

The information REVEND collects depends on how you use the platform.

We may collect information including:

• full name;
• email address;
• cellphone number;
• account and profile information;
• delivery and collection addresses;
• suburb, city, province and postal information;
• seller or business information;
• banking or payout-related information where required;
• identity or verification information where required;
• listing information;
• product photographs;
• order and transaction information;
• payment status information;
• delivery and courier information;
• tracking information;
• support requests;
• dispute information and evidence;
• reviews and ratings;
• communications relating to REVEND transactions;
• device and technical information;
• security and fraud-prevention information; and
• other information reasonably required to provide the REVEND service.

3. Information you provide directly

REVEND receives personal information when you voluntarily provide it through the platform.

This may happen when you:

• register an account;
• update your profile;
• create a listing;
• purchase a product;
• provide a delivery address;
• provide seller collection information;
• provide payout information;
• submit a support request;
• open or respond to a dispute;
• submit evidence;
• leave a review; or
• communicate with REVEND.

4. Transaction information

REVEND maintains information about transactions conducted through the platform.

Transaction records may include the buyer, seller, listing, product price, REVEND fees, delivery charges, payment status, transaction status, delivery status, dispute status and other information needed to administer the transaction.

REVEND may retain transaction information where reasonably necessary for accounting, fraud prevention, support, disputes, legal compliance, audit and record-keeping.

5. Payment information

REVEND may use authorised third-party payment providers, banks or other financial service providers to process payments and payouts.

Depending on the payment method and provider, sensitive payment credentials such as complete card details may be collected and processed directly by the payment provider rather than stored by REVEND.

REVEND may receive and retain information relating to the payment, such as:

• payment status;
• transaction reference;
• payment amount;
• provider reference;
• refund status;
• payout status; and
• information reasonably required for reconciliation, fraud prevention and transaction support.

6. Delivery and courier information

REVEND processes delivery information to coordinate managed delivery between buyers, sellers and courier or logistics providers.

This may include:

• buyer name;
• buyer cellphone number;
• delivery address;
• seller collection address;
• seller contact details;
• parcel dimensions and weight;
• courier service information;
• shipment reference;
• tracking information;
• collection records;
• delivery records; and
• proof of delivery where applicable.

REVEND may share the information reasonably necessary to complete a shipment with the selected courier or logistics provider.

7. Seller collection addresses

Seller collection addresses are operational information used for delivery and courier purposes.

REVEND does not intend to display a seller's private collection address publicly on a marketplace listing.

Collection information may be disclosed to an authorised courier or other service provider where reasonably necessary to complete the transaction.

8. Support requests

When a customer submits a REVEND support request, REVEND may collect the customer's:

• name;
• email address;
• cellphone number;
• order number, where applicable;
• issue category;
• message;
• support history;
• internal case information; and
• other information reasonably required to investigate or resolve the request.

REVEND uses a request-first support model. Customers submit a support request and REVEND may then contact the customer by email or telephone where appropriate.

Support information may be retained as reasonably necessary for customer service, security, dispute resolution, fraud prevention and legal record-keeping.

9. Disputes and evidence

Where a dispute is opened, REVEND may process information and evidence necessary to investigate the transaction.

This may include:

• listing information;
• product photographs;
• photographs submitted after delivery;
• serial numbers;
• packaging information;
• transaction communications;
• courier information;
• proof of collection or delivery;
• support communications; and
• buyer and seller statements.

REVEND may retain dispute records where reasonably necessary to resolve the matter, prevent abuse, enforce platform rules or comply with legal obligations.

10. Why REVEND processes personal information

REVEND may process personal information for purposes including:

• creating and administering user accounts;
• operating the marketplace;
• publishing and managing listings;
• processing transactions;
• coordinating payments and payouts;
• arranging and tracking delivery;
• providing customer support;
• managing disputes and refunds;
• maintaining transaction records;
• preventing fraud and platform abuse;
• protecting users and REVEND;
• improving the platform;
• communicating service information;
• complying with accounting and tax obligations;
• complying with lawful requests and legal obligations; and
• establishing, exercising or defending legal rights.

11. Lawful processing

REVEND processes personal information only where there is an appropriate basis for doing so under applicable law.

Depending on the circumstances, processing may be necessary to perform or administer a transaction, comply with a legal obligation, protect a legitimate interest, prevent fraud, provide a requested service or because the user has provided valid consent where consent is required.

12. Sharing personal information

REVEND does not sell personal information as a product.

REVEND may share personal information where reasonably necessary with:

• payment providers;
• banks and financial service providers;
• couriers and logistics providers;
• hosting and technology providers;
• email and communication providers;
• fraud-prevention and security providers;
• professional advisers;
• auditors and accountants;
• insurers where applicable;
• regulators;
• courts;
• law-enforcement authorities; and
• other parties where disclosure is authorised or required by applicable law.

REVEND aims to limit information shared with service providers to what is reasonably necessary for the relevant service or lawful purpose.

13. Buyer and seller information

Certain information may need to be exchanged or made available between a buyer and seller to administer a transaction.

REVEND aims to avoid unnecessarily exposing private information and may use managed transaction, delivery and support processes to reduce direct disclosure where practical.

Users must not misuse personal information obtained through REVEND for unrelated marketing, harassment, fraud, identity misuse or another unlawful purpose.

14. Cookies and similar technologies

REVEND may use cookies, local storage and similar technologies where necessary to operate, secure and improve the platform.

These technologies may be used for purposes such as:

• keeping users signed in;
• remembering preferences;
• maintaining sessions;
• security;
• fraud prevention;
• performance;
• analytics; and
• improving the user experience.

Where applicable law requires consent for a particular cookie or technology, REVEND will implement an appropriate consent mechanism before relying on that technology.

15. Security

REVEND takes reasonable technical and organisational steps intended to protect personal information against loss, unauthorised access, misuse, alteration or disclosure.

Security measures may include access controls, authentication, restricted administrative access, encrypted communications, secure hosting, monitoring and other safeguards appropriate to the nature of the information and service.

No internet-based service can guarantee absolute security. Users must also take reasonable steps to protect their account credentials and devices.

16. Data retention

REVEND retains personal information for no longer than is reasonably necessary for the purpose for which it was collected, subject to applicable legal, accounting, security, fraud-prevention and record-retention requirements.

Different categories of information may therefore be kept for different periods.

Transaction, payment, dispute and accounting records may need to be retained after an account is closed where reasonably necessary or legally required.

17. International service providers

Some technology, hosting, payment, communication or other service providers used by REVEND may process information outside South Africa.

Where personal information is transferred across borders, REVEND will take reasonable steps intended to ensure that the transfer is handled in accordance with applicable data-protection requirements.

18. Marketing communications

REVEND may send service-related communications that are reasonably necessary to administer an account or transaction.

Marketing communications will be handled in accordance with applicable law and users will be provided with appropriate choices where required.

Opting out of marketing does not necessarily stop important operational communications relating to an account, order, payment, delivery, security matter or dispute.

19. Children's information

REVEND is not intended to knowingly collect personal information from children in circumstances where parental or guardian authorisation is legally required and has not been obtained.

REVEND may restrict account or transaction functionality according to age, verification, payment-provider or legal requirements.

20. Your privacy rights

Subject to POPIA and other applicable law, a person may have rights relating to their personal information.

These may include the right, where applicable, to:

• ask whether REVEND holds personal information about them;
• request access to personal information;
• request correction of inaccurate information;
• request deletion or destruction where the legal requirements for deletion are satisfied;
• object to certain processing where legally permitted;
• withdraw consent where processing is based on consent, subject to lawful consequences of that withdrawal;
• object to certain direct marketing communications; and
• lodge a complaint with the Information Regulator where applicable.

REVEND may need to verify the identity of a person before acting on a privacy request.

Some information cannot immediately be deleted where REVEND is legally required or otherwise lawfully entitled to retain it.

21. Privacy requests

Users may submit privacy, access, correction or related requests through REVEND Support.

Select the most appropriate support category and clearly state that the request relates to personal information or privacy.

22. Information Regulator

Where applicable, a person may have the right to lodge a complaint with South Africa's Information Regulator in accordance with POPIA and the procedures made available by the regulator.

REVEND encourages users to first submit a support request where appropriate so that REVEND has an opportunity to investigate and address the concern.

23. Changes to this Privacy Policy

REVEND may update this Privacy Policy from time to time to reflect changes to the marketplace, technology, service providers, business operations or applicable law.

The latest version and update date will be made available through REVEND.

24. Contacting REVEND about privacy

REVEND operates a request-first support model and does not publish a customer-service telephone number for incoming support calls.

Submit a support request and REVEND will review the matter and contact you using the contact information you provide where further communication is required.

REVEND's public support email may also be used where appropriate:

support@re-vend.com

25. Relationship with REVEND Terms

This Privacy Policy forms part of REVEND's broader legal and operational framework and should be read together with the REVEND Terms & Conditions.