Privacy Policy

1. Introduction

UniFuel (“we”, “us”, or “our”) is committed to protecting the privacy of every person who uses our platform. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the UniFuel website and services. We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all other applicable South African data protection legislation.

2. Information We Collect

We collect the following categories of personal information:

• Identity information: Full name, email address, and South African mobile phone number provided during account registration.
• Payment information: Payment card details and billing information are collected and processed directly by our payment provider, Payfast. UniFuel does not store your full card number or CVV.
• Transaction information: Purchase history, voucher details, redemption records, and transaction reference numbers.
• Device and usage data: IP address, browser type, operating system, device identifiers, pages visited, and interaction data collected automatically when you access our platform.
• Communication data: Records of correspondence when you contact our support team.

3. How We Use Your Information

We use your personal information for the following purposes:

• Service delivery: Processing voucher purchases, issuing wiCodes, and managing your account.
• Notifications: Delivering voucher codes via WhatsApp and email, sending transaction confirmations, and providing service updates.
• Customer support: Responding to enquiries, resolving disputes, and processing refund requests.
• Platform improvement: Analysing usage patterns to improve our platform, features, and user experience.
• Legal compliance: Meeting our obligations under South African law, including tax and financial reporting requirements.
• Fraud prevention: Detecting and preventing fraudulent transactions and misuse of the Service.

4. Information Sharing

We do not sell your personal information. We share your information only with the following third parties, and only to the extent necessary to provide the Service:

• Payfast: Your payment details are shared with Payfast to process transactions securely. Payfast operates under its own privacy policy and PCI-DSS compliance standards.
• WiGroup/Yoyo: Your mobile number and voucher details are shared with WiGroup/Yoyo to facilitate wiCode generation and redemption.
• WhatsApp (Meta): Your mobile number is used to deliver voucher codes through the WhatsApp Business API.
• Law enforcement: We may disclose information where required by law, court order, or to cooperate with regulatory or law enforcement authorities.

5. Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. Our security measures include:

• Encryption of data in transit using TLS/SSL and encryption of sensitive data at rest.
• Secure data storage through our infrastructure provider, Supabase, which implements industry-standard security controls including row-level security and automated backups.
• Strict access controls ensuring that only authorised personnel can access personal information, and only on a need-to-know basis.
• Regular security reviews and monitoring for suspicious activity.

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

• Account data: We retain your personal information for as long as your account remains active and for a reasonable period thereafter to fulfil any outstanding obligations.
• Transaction records: Financial transaction data is retained for a minimum of five years in compliance with South African tax and financial regulations.
• Deletion upon request: You may request deletion of your personal information at any time. We will comply with your request unless we are legally required to retain certain data.

7. Your Rights under POPIA

As a data subject under POPIA, you have the following rights:

• Right of access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request that we correct or update inaccurate or incomplete personal information.
• Right to deletion: You may request that we delete your personal information, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal information for direct marketing purposes.
• Right to lodge a complaint: If you believe your privacy rights have been infringed, you have the right to lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

To exercise any of these rights, please contact us at privacy@unifuel.co. We will respond to your request within 30 days.

8. Cookies & Analytics

Our platform uses cookies and similar tracking technologies to enhance your experience:

• Essential cookies: Required for the platform to function, including session management and authentication.
• Analytics cookies: Used to understand how visitors interact with our platform so we can improve our services. Analytics data is aggregated and does not identify individual users.

You may disable non-essential cookies through your browser settings. Disabling essential cookies may affect the functionality of the platform.

9. Third-Party Services

Our platform integrates with the following third-party services, each governed by their own privacy policies:

• Payfast — Payment processing and transaction management.
• WiGroup/Yoyo — wiCode voucher generation, management, and redemption infrastructure.
• WhatsApp Business (Meta) — Voucher delivery and transactional messaging.
• Supabase — Database hosting and authentication services.
• Vercel — Website hosting and content delivery.

We encourage you to review the privacy policies of these providers. UniFuel is not responsible for the privacy practices of third-party services.

10. Children’s Privacy

The UniFuel Service is not intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete that information promptly. If you believe a child has provided us with their personal information, please contact us at privacy@unifuel.co.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or through a prominent notice on our platform. The “Last updated” date at the top of this page indicates when the most recent revisions were made. We encourage you to review this policy periodically.

12. Contact

For any privacy-related queries, data access requests, or complaints, please contact our designated Information Officer: