Privacy Policy

Last updated: 1 January 2026 · Freshlight Pty Ltd · South Africa · POPIA compliant

1. Who we are

Freshlight Pty Ltd is the responsible party for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). Our Information Officer can be reached at privacy@freshlight.co.za.

2. What we collect

We collect: your name and contact details (phone number, email address) at registration; South African ID or passport for KYC verification; bank account details for withdrawals; device and browser information; transaction history and communications on the platform; and trust/rating data generated by your activity.

3. Why we collect it

Your information is used to: verify your identity and prevent fraud; process payments and escrow transactions; communicate order updates and dispute rulings via WhatsApp and email; calculate your Trust Score; comply with South African financial regulations (FICA); and improve the Freshlight platform.

4. Who we share it with

We share data with: Smile Identity (KYC verification); our payment providers (Stitch, PayFast) for transaction processing; The Courier Guy and other couriers where delivery tracking is enabled; and law enforcement or regulators when required by law. We do not sell your personal information to third parties.

5. How we protect your data

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is limited to authorised personnel. KYC document images are stored in a dedicated secure bucket with strict access controls and are not accessible to buyers or sellers on the platform.

6. Data retention

Transaction records are kept for 7 years as required by South African financial regulations. KYC documents are retained for 5 years after your last transaction. Account data is deleted within 90 days of account closure, subject to legal retention requirements.

7. Your rights under POPIA

You have the right to: access your personal information; correct inaccurate information; request deletion (subject to legal obligations); object to processing; and lodge a complaint with the Information Regulator of South Africa. To exercise these rights, contact privacy@freshlight.co.za.

8. Cookies

Freshlight uses only essential cookies and local storage required for authentication. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this policy periodically. Material changes will be communicated via the platform or WhatsApp. Continued use of Freshlight after changes constitutes acceptance.

Contact our Information Officer: privacy@freshlight.co.za

Information Regulator of South Africa: www.justice.gov.za/inforeg