Privacy Policy

Who is responsible

INVEXB (Pty) Ltd (registration number 2022/283237/07) is the responsible party for personal information processed through Footrand. We operate in South Africa.

The Information Officer is the person you should contact about this policy, access requests, correction, deletion, or a complaint. Write to support@footrand.co.za.

What we collect

We only collect information that we need to run Footrand, honour a claim, pay you, support a shop, or meet the law. Depending on how you use Footrand, that may include:

• Identity and contact details such as your name, email address, phone number and date of birth.
• Account details, such as your login, device type and app settings.
• Location, used only when you open the app near a shop and when you claim, so we can confirm you are inside the store.
• Claim and wallet history, including rewards you take and cash that settles to your Footrand wallet.
• Bank details you give us so we can pay cash out to a South African bank account.
• Shop and partner details if you apply or list a store, including business name, registration, venue, address, hours and contact people.
• Messages you send to us through the app, website or email.

We do not ask shops or other walkers for your private profile. We do not buy walker lists from anyone else.

Why we use it

POPIA requires a lawful reason to process personal information. We use yours to:

• Create and run your Footrand account, and let you delete it at any time in the app.
• Show rewards near you and confirm a claim only when you are inside the shop.
• Pay cash into your wallet and, when you ask, pay it out to your South African bank from R10.
• Review shop applications, list approved stores, and let a shop see that a reward was claimed at their store.
• Keep Footrand safe, stop fraud, and fix faults.
• Reply to you, and send service messages about your account, a claim or a payout.
• Keep records the law requires, including tax and financial records.

We do not use your information to profile you for sale to advertisers. We do not send your data into unrelated marketing databases.

We do not share your data

Your name, contact details, location history, wallet and other personal information are not sold, rented or traded. We do not share them with other companies for their marketing. Other walkers cannot see your profile. Shops do not receive your phone number, email or bank details.

The only times anyone outside Footrand may see limited information is when it is strictly necessary:

• Your bank, when you ask us to pay cash out to your account.
• Paystack, when a shop pays the monthly listing fee. Paystack sees the card or EFT details and the email used to pay.
• Operators we appoint in writing under POPIA, such as hosting or payment processors, who may only use the information on our instructions and must keep it secure.
• A shop, only the fact that a valid cash claim happened at their store. Not your full identity pack.
• A court, regulator or the South African Police Service, if South African law requires us to disclose it.

Location

Footrand uses your device location to see if you are inside a shop when you claim. We do not track you around the city for advertising. You can switch location off in your phone settings. If you do, you will not be able to claim, because a claim has to happen in store.

Delete your account at any time

You can delete your Footrand account in the app at any time. Open the app, go to your account or settings, and choose delete account. You do not need to email us first.

When you delete your account we stop using your profile to run Footrand. Your name, contact details and app profile are removed from active systems. If you would rather write to us, email support@footrand.co.za and we will action the same deletion.

We may keep a limited record after deletion only where South African law says we must, for example payout, tax or fraud records. We keep those records no longer than we have to, and we do not use them to market to you.

Your POPIA rights

As a data subject you may, subject to POPIA:

• Ask whether we hold personal information about you, and request a copy.
• Ask us to correct or update information that is wrong or incomplete.
• Object to processing in the cases POPIA allows.
• Ask us to delete personal information that we no longer need, including by deleting your account in the app.
• Withdraw consent where we relied on consent, without affecting processing we already completed lawfully.
• Lodge a complaint with the Information Regulator.

Send requests to support@footrand.co.za. We will reply within a reasonable time. There is usually no fee for a standard request. We may need to confirm it is you before we release information.

The Information Regulator of South Africa is the independent regulator for POPIA. You can contact them at inforeg@inforegulator.org.za, 010 023 5200, or JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. Website: https://inforegulator.org.za.

Security

We take reasonable technical and organisational steps to protect personal information against loss, misuse and unauthorised access, as POPIA requires. Access inside Footrand is limited to people who need it to do their job. No internet service is perfectly secure. If we become aware of a breach that creates a real risk of harm, we will notify you and the Information Regulator as the law requires.

How long we keep it

We keep personal information only for as long as we need it for the purpose we collected it, or for as long as the law says we must. Account data stays while your account is open. After you delete your account we remove profile data from active use. Financial and claim records may be kept for the period required by tax and financial laws, then deleted or made anonymous.

Children

Footrand is for people aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has created an account, email support@footrand.co.za and we will delete it.

Cookies and this website

This website uses cookies and similar storage that are needed to run the page, remember a staff sign in, and keep the site working. We also keep a first-party visitor cookie so we can count how many people open pages on footrand.co.za. That count stays on our own systems for the super admin desk. We do not use advertising cookies to follow you around the internet, and we do not sell cookie data.

You can block cookies in your browser. If you do, a staff session on this site may not stay signed in. The Footrand app uses device permissions (such as location) that you control in your phone settings, not website cookies.

Storage and operators

Your information is processed for a South African company and a South African service. If an operator stores or processes information outside South Africa, we only do so with a written operator agreement and a lawful basis under POPIA, including adequate protection for the information.

Changes

We may update this policy when the app, the law or our process changes. The effective date at the top of this page will change. The current version always lives on the Privacy Policy page on this website. Material changes will be posted here and, where we can, in the app.