POPIA Notice

1. Our commitment under POPIA

We process personal information in line with the eight conditions for lawful processing set out in POPIA: accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation.

2. Responsible party

For the purposes of POPIA, TipEasy is the “responsible party” that determines why and how your personal information is processed. Questions, requests and complaints can be directed to our Information Officer at privacy@tipeasy.co.za.

3. Lawful basis for processing

We process personal information where:

• you have consented to the processing (for example, by accepting our Terms and this notice when registering);
• it is necessary to provide the service you asked for, such as creating a tipping profile or routing a tip to a worker;
• it is required to comply with a legal obligation, for example tax, accounting or anti-fraud requirements; or
• it is in our legitimate interests to operate, secure and improve the platform, balanced against your rights.

4. Information we process

We process the categories of personal information described in our Privacy Policy — including identifying and contact details, authentication data (your cellphone number and the one-time SMS codes used to sign you in), identity-verification information (ID or passport number and, where provided, an ID document) collected to help prevent fraud, worker payout details (bank account), tip and transaction data, and basic technical/usage data. We do not knowingly process the personal information of children.

5. How we protect your information

We apply appropriate, reasonable technical and organisational measures to safeguard personal information against loss, damage, unauthorised access and unlawful processing. Tip payments are handled by our third-party payment provider, and TipEasy does not store your card details or hold tip funds.

6. Sharing and cross-border transfers

We share personal information only with operators and service providers who help us run TipEasy (such as our payment provider, our SMS gateway provider used to deliver one-time login codes and service messages such as payout notifications, and cloud hosting providers), under contractual obligations to keep it secure. Where information is processed or stored outside South Africa, we take reasonable steps to ensure it remains protected by a comparable level of safeguards, as required by section 72 of POPIA.

7. Your rights as a data subject

Under POPIA you have the right to:

• be notified that your personal information is being collected;
• request access to the personal information we hold about you;
• request the correction, updating or deletion of your personal information;
• object, on reasonable grounds, to the processing;
• withdraw consent where processing is based on consent;
• not be subject to a decision based solely on automated processing; and
• lodge a complaint with the Information Regulator.

To exercise any of these rights, contact our Information Officer at privacy@tipeasy.co.za.

8. Withdrawing consent

Where we rely on your consent, you may withdraw it at any time by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and some processing may continue where we have another lawful basis (for example, a legal obligation).

9. Complaints to the Information Regulator

If you believe we have not handled your personal information lawfully, you may lodge a complaint with the Information Regulator (South Africa):

• Website: inforegulator.org.za
• Email: POPIAComplaints@inforegulator.org.za

10. Changes to this notice

We may update this POPIA Notice from time to time. When we do, we will revise the “Last updated” date above.

11. Contact us

For any questions about this notice or how we process your personal information, email our Information Officer at privacy@tipeasy.co.za.

See also our Privacy Policy and Terms & Conditions.