Last Updated: 17 July 2026

POPIA Compliant – ZEEDER (Pty) Ltd

This Data Protection Policy explains how ZEEDER (Pty) Ltd collects, uses, stores, processes, and protects personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This Policy forms part of ZEEDER’s legal framework and is available on our website before final payment. It explains the personal information we collect, how it is processed, your rights under POPIA, and how we safeguard your information.

1. INTRODUCTION

1.1 This Data Protection Policy (“Policy”) sets out how ZEEDER (Pty) Ltd (“Zeeder”, “we”, “us”, “our”) collects, uses, stores, and protects personal information in compliance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).

1.2 This Policy is available on our website and is disclosed to you before final payment.【Nedbank E-Commerce Annexure 4.2.7】

1.3 By using our services, you (“Customer”, “you”) agree to the terms of this Policy.

2. DEFINITIONS

2.1 “Personal Information” has the meaning set out in POPIA and includes any information relating to an identifiable, living natural person, and where applicable, an identifiable, existing juristic person.

2.2 “Processing” has the meaning set out in POPIA and includes any operation or activity concerning personal information.

2.3 “Data Subject” means the person to whom personal information relates.

3. PERSONAL INFORMATION WE COLLECT

3.1 We collect the following personal information:

3.1.1 Contact information (name, email address, phone number, physical address);
3.1.2 Identification information (ID number, company registration number, VAT number);
3.1.3 Payment information (payment method, billing address);
3.1.4 Transaction history;
3.1.5 Technical information (IP address, browser type, device information);
3.1.6 Any other information you provide to us.

4. PURPOSE OF PROCESSING

4.1 We process personal information for the following purposes:

4.1.1 To provide our services;
4.1.2 To process payments;
4.1.3 To communicate with you;
4.1.4 To comply with legal and regulatory requirements;
4.1.5 To prevent fraud and money laundering;
4.1.6 To improve our services;
4.1.7 For marketing purposes (with your consent).

5. LAWFUL BASIS FOR PROCESSING

5.1 We process personal information on one or more of the following lawful bases:

5.1.1 Consent (where you have given consent);
5.1.2 Contractual necessity (where processing is necessary for the performance of a contract);
5.1.3 Legal obligation (where processing is required by law);
5.1.4 Legitimate interest (where processing is necessary for our legitimate interests).

6. DISCLOSURE OF PERSONAL INFORMATION

6.1 We may disclose personal information to:

6.1.1 Our employees and contractors who need the information to perform their duties;
6.1.2 Our service providers (including Peach Payments and Nedbank) who process personal information on our behalf;
6.1.3 Our professional advisers (including lawyers and accountants);
6.1.4 Regulatory authorities where required by law;
6.1.5 Third parties where you have given consent.

6.2 We require all third-party processors to comply with POPIA and to implement appropriate security measures.

7. CROSS-BORDER TRANSFERS

7.1 We may transfer personal information to countries outside South Africa where:

7.1.1 The recipient country has adequate data protection laws; or
7.1.2 We have obtained your consent; or
7.1.3 The transfer is necessary for the performance of a contract.

7.2 Where personal information is transferred to a country without adequate data protection laws, we will ensure appropriate safeguards are in place.

8. DATA SECURITY

8.1 We implement appropriate technical and organisational measures to protect personal information against:

8.1.1 Unauthorised or unlawful processing;
8.1.2 Accidental loss, destruction, or damage;
8.1.3 Unauthorised access, alteration, or disclosure.

8.2 Our security measures include:

8.2.1 Encryption of personal information in transit and at rest;
8.2.2 Access controls;
8.2.3 Firewalls and intrusion detection systems;
8.2.4 Regular security assessments;
8.2.5 Employee training on data protection.

9. DATA RETENTION

9.1 We retain personal information for as long as necessary to:

9.1.1 Provide our services;
9.1.2 Comply with legal and regulatory requirements;
9.1.3 Resolve disputes;
9.1.4 Enforce our agreements.

9.2 We retain transaction records for at least three years from the date of the transaction.

9.3 We securely delete or anonymise personal information when it is no longer needed.

10. DATA SUBJECT RIGHTS

10.1 Under POPIA, you have the following rights:

10.1.1 Right of access (to request access to your personal information);
10.1.2 Right to rectification (to correct inaccurate personal information);
10.1.3 Right to deletion (to request deletion of personal information);
10.1.4 Right to object (to object to the processing of personal information);
10.1.5 Right to restrict processing (to request restriction of processing);
10.1.6 Right to withdraw consent (where processing is based on consent).

10.2 To exercise your rights, contact us at info@zeeder.ai .

10.3 We will respond to your request within 30 days.

11. DATA BREACH NOTIFICATION

11.1 In the event of a data breach, we will:

11.1.1 Notify the Information Regulator within 24 hours of becoming aware of the breach;
11.1.2 Notify affected data subjects where required by law;
11.1.3 Take all necessary steps to mitigate the breach;
11.1.4 Investigate the cause of the breach;
11.1.5 Implement measures to prevent future breaches.

12. COOKIES

12.1 We use cookies to improve your experience on our website.

12.2 For more information, please see our Cookies Policy.

13. COMPLAINTS

13.1 If you have a complaint about our handling of your personal information, you may:

13.1.1 Contact us at [privacy@zeeder.ai];
13.1.2 Lodge a complaint with the Information Regulator.

14. UPDATES TO THIS POLICY

14.1 We may update this Policy from time to time.

14.2 We will notify you of material changes by posting the updated Policy on our website.