Jump to a section
LOVCASH DATA PROTECTION & PRIVACY POLICY
How LovCash collects, uses and protects personal information
YOUR PRIVACY MATTERS
LovCash handles information about people and businesses using our platform, including traders who earn supplier-funded cashback and customers using any supported wallet or payment service. This Policy explains what information we collect, why we need it, who may receive it and how you can exercise your rights.
We aim to use clear language and treat personal information lawfully, fairly and transparently. The Protection of Personal Information Act, 2013 (POPIA), applies where relevant.
1. WHO IS RESPONSIBLE
Lov.Cash Proprietary Limited (registration number 2008/027698/07), a South African company, is responsible for personal information processed for its own LovCash services. Where LovCash handles information on behalf of another responsible party under a lawful arrangement, the parties' respective responsibilities follow the agreement and applicable data-protection law.
You can contact LovCash about privacy at data@lovcash.com. You may also use the support details provided in the LovCash app or on the website. LovCash handles requests involving the Information Officer in accordance with POPIA.
2. WHO THIS POLICY APPLIES TO
This Policy explains processing involving visitors to our website, app users, registered businesses and traders, agents, consumers, participating suppliers and retailers, service providers, and other people who contact or deal with LovCash. It applies to processing through supported online and offline channels.
3. INFORMATION WE MAY COLLECT
Depending on the service and lawful purpose, information can include your name, cellphone number, contact details, identification or business registration information, account and security records, trader or wholesaler card identifiers, linked cellphone numbers, relevant transaction and purchase details, products and suppliers involved in eligible purchases, cashback allocations and redemption history, device and app records, support enquiries and information required for lawful verification or fraud prevention.
Where necessary and lawful, additional information may include settlement and bank account details, compliance documentation and records supporting payments or disputes. We will not claim to collect every category for every user.
4. HOW WE OBTAIN INFORMATION
We may collect information directly from you when you register, use the app, contact us or provide documents. We may receive transaction or account-matching information from participating wholesaler and retailer systems, authorised agents, payment service providers and other lawful sources involved in an available LovCash service.
If providing particular information is required by law or necessary to operate a requested service, we will explain that requirement and the material consequences of not supplying it.
5. WHY WE USE INFORMATION
We use information for specified lawful purposes, which may include registering accounts, connecting trader identifiers to the correct cellphone number, verifying eligible stock purchases, applying supplier-specific conditions, allocating and redeeming eligible rewards, supporting users, reconciling transactions, processing supported settlements and agreed fees, detecting fraud, maintaining platform security, keeping required records, complying with legal obligations, and preparing authorised operational reports.
Where allowed, we may also publish appropriate details showing that a participating business uses LovCash. We do not treat taking part in cashback as consent to unrelated direct marketing.
6. OUR LEGAL BASIS FOR PROCESSING
We process personal information where a lawful justification under POPIA applies, including where necessary for a contract, legal compliance, a legitimate interest recognised by the law, or your valid consent where required. We use information only for appropriate specified purposes and in ways consistent with the rights of affected people.
We do not treat registering an account, receiving cashback or identifying a qualifying purchase as blanket consent to unrelated advertising or sharing personal information for unrelated purposes.
7. SUPPLIERS, STORES AND SERVICE PROVIDERS
To administer a qualifying cashback programme, LovCash may share information with participating stores and suppliers only for specified lawful purposes, such as checking eligible products, reconciling funded rewards, investigating errors and operating the relevant programme. Supplier performance reports will use aggregated or de-identified information by default. Identifiable trader-level records may be shared only where necessary for a documented, lawful purpose, appropriately disclosed and subject to access controls and contractual safeguards. LovCash does not treat participation in cashback as permission for a supplier to use identifiable purchase records for unrelated marketing. We may also share limited information with vetted hosting and technical service providers, banks, payment partners, auditors, legal advisers or competent authorities where authorised or required by law.
Information may also be shared with vetted technology and hosting providers, banks and payment partners, security and verification partners, professional advisers, auditors or competent authorities where permitted or required. Service providers should be subject to appropriate confidentiality, security and processing arrangements.
8. DIRECT MARKETING AND YOUR CHOICES
Electronic direct marketing is governed by POPIA, including section 69. Where opt-in consent is required for unsolicited electronic marketing, LovCash must obtain it in the prescribed manner. Any applicable existing-customer exception must be assessed against the law. We will provide lawful ways to object or unsubscribe.
Operational messages about your account, transactions, security, service changes and legal notices are different from promotional marketing and may have another lawful basis.
9. CHILDREN'S AND SENSITIVE INFORMATION
We will not intentionally use personal information about children or special personal information without an appropriate lawful basis and any additional safeguards required by POPIA. Services intended for adult business users should be operated in a manner consistent with their eligibility requirements.
10. INFORMATION SECURITY
We take reasonable technical and organisational steps to protect personal information against unauthorised access, loss, misuse and unlawful processing. These may include access restrictions, controlled system roles, monitoring, safeguards for service providers and appropriate handling of security incidents.
No online service is completely free from risk. Where the law requires it, we will notify affected people and the Information Regulator following a qualifying security compromise.
11. INTERNATIONAL TRANSFERS
When information is transferred, stored or accessed outside South Africa, we apply the conditions required by POPIA, including appropriate protection arrangements or another lawful basis for the transfer.
12. HOW LONG WE KEEP INFORMATION
We keep personal information only as long as a valid business purpose, contractual necessity, legal duty, recordkeeping requirement, dispute, audit or other lawful reason justifies it. After that, it should be deleted, destroyed or de-identified as the law requires.
Information categories may have different lawful retention periods. We use applicable contractual, legal, audit and legitimate operational requirements to determine retention, after which information is securely deleted or de-identified where appropriate.
13. YOUR RIGHTS
Depending on the law and circumstances, you may request access to personal information, ask for incorrect information to be corrected, request deletion where applicable, object to certain processing or withdraw consent. Withdrawal does not automatically invalidate earlier lawful processing or remove records we must legally keep.
Contact the privacy team using the official contact details. We may request reasonable identity verification before disclosing personal information and will use lawful response processes and applicable prescribed fees.
14. ACCURACY AND ACCOUNT INFORMATION
Please keep your contact and account information accurate. If you use a trader card linked to a cellphone number, incorrect details may prevent purchases from being associated with your account. We may ask you to verify or update information for legitimate operational reasons.
15. CHANGES TO THIS POLICY
We may update this Policy to reflect service, technology, security or legal changes. Where the law requires notice or consent, we will provide it. We will identify the applicable version and effective date of the public notice.
16. QUESTIONS AND COMPLAINTS
For privacy questions or requests, email data@lovcash.com. If you believe we have not handled your personal information as required by POPIA, you may lodge a complaint with the Information Regulator using its official published channels, including https://inforegulator.org.za.
