Privacy Policy

📋 Introduction

Tolta ("we", "our", or "us") is a grocery delivery marketplace that connects users with local vendors in South Africa. This Privacy Policy explains how we collect, use, and protect your personal information when you use our mobile application.

By using Tolta, you agree to the collection and use of information in accordance with this policy.

📊 Data We Collect

🎯 How We Use Your Data

• Account Management — Create and manage your user account, verify identity via OTP
• Order Fulfillment — Process orders, coordinate delivery between vendors and drivers
• Real-Time Tracking — Share your delivery location with drivers for accurate navigation
• Push Notifications — Send order updates, delivery status, and promotional offers
• Payments — Process transactions securely through PayStack
• Analytics & Improvements — Understand app usage to improve features and performance
• Customer Support — Respond to inquiries and resolve issues

🔗 Third-Party Services

Tolta integrates with trusted third-party services to provide its functionality. Each service has its own privacy policy governing data handling:

🔒 Data Protection

We take data security seriously. Here's how we protect your information:

• Encryption in Transit — All data sent between the app and our servers is encrypted using industry-standard TLS/SSL protocols
• Secure Storage — User data is stored in secure, access-controlled cloud infrastructure (Google Cloud / Firebase)
• Access Controls — Only authorized personnel and systems can access user data, and only for legitimate purposes
• Payment Security — All payment processing is handled by PayStack (PCI DSS compliant); we never store full card details

⚖️ Your Rights

In compliance with South Africa's Protection of Personal Information Act (POPIA), you have the following rights:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your account and associated data
• Objection — Object to the processing of your data for specific purposes
• Data Portability — Request your data in a structured, commonly used format

To exercise any of these rights, contact us at the email below. We will respond within 30 days as required by POPIA.

🗑️ Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. When you delete your account, we will delete or anonymize your personal data within 90 days, unless retention is required by law.

👶 Children's Privacy

Tolta is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will delete it promptly.

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.