Privacy Policy — Talo Pay

Talo Pay is committed to your privacy. We collect the minimum information necessary to operate, and we never sell your personal data. This policy is written in plain language to help you understand your rights under South Africa's Protection of Personal Information Act (POPIA).

1. Who We Are

Talo Pay (Pty) Ltd operates the Talo Pay scan-to-pay and tap-to-pay tipping platform, accessible at talo.tips.

Information Officer: For all privacy-related requests and complaints, contact our designated Information Officer at info@talopay.co.za.

2. Information We Collect

From Workers (service providers who receive tips)

Full name and identity number (for KYC/FICA verification)
South African bank account details (for PayShap settlement)
Contact details: mobile number
Occupation / service type (e.g. car guard, petrol attendant)
Profile photo (optional, displayed on payment page)

From Customers (people making tip payments)

Payment confirmation data provided by the Customer's bank or payment method
Transaction amount and timestamp
We do not require Customers to create an account or provide personal details to tip

Technical Information (all users)

IP address, device type, and browser information
Page interaction and usage analytics
Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

Purpose	Legal Basis (POPIA)
Verifying Worker identity and bank account (KYC/FICA)	Legal obligation
Settling tips to the Worker's bank account via PayShap	Performance of contract
Fraud detection and platform security	Legitimate interest / Legal obligation
Sending account and transaction notifications	Performance of contract
Improving platform performance and user experience	Legitimate interest
Complying with regulatory and legal requirements	Legal obligation

We will never use your personal information for unrelated marketing without your explicit consent.

4. How We Share Your Information

Talo Pay does not sell your personal information. We share data only where necessary:

Payment Service Providers (PSPs): To process and settle tip payments securely via PayShap
Identity Verification Providers: To conduct KYC/FICA checks required by South African financial law
Cloud Infrastructure Providers: Who host Talo Pay's systems under strict data processing agreements
Regulatory Authorities: Including the Financial Intelligence Centre (FIC) and South African Reserve Bank, where legally required

All third-party processors are contractually required to protect your information and may only use it for the specified purpose.

5. Data Retention

We retain personal information only for as long as required to provide our services, meet regulatory obligations, resolve disputes, and enforce our agreements. Financial transaction records are retained for a minimum of five years in accordance with South African financial legislation. See our Data Retention Policy for full details.

6. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act (Act 4 of 2013), you have the right to:

Access: Request a copy of the personal information we hold about you
Correction: Request that inaccurate or outdated information be corrected
Deletion: Request deletion of information we are not legally required to retain
Objection: Object to certain types of processing, including direct marketing
Restriction: Request that we limit how we use your information in certain circumstances
Portability: Receive your information in a structured, commonly used format

To exercise any of these rights, email info@talopay.co.za. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg/.

7. Security

Talo Pay implements industry-standard technical and organisational safeguards to protect your personal information, including encryption in transit and at rest, access controls, and regular security reviews. No system can guarantee absolute security; in the event of a breach affecting your rights, we will notify you and the Information Regulator as required by POPIA.

8. Children

Talo Pay is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the talo.tips website or by email. Continued use of the Platform after changes are posted constitutes acceptance.

10. Contact

For all privacy inquiries, data access requests, or complaints:
Information Officer — Talo Pay (Pty) Ltd
info@talopay.co.za