POPIA Notice

Effective date: 14 June 2026

This notice is provided in terms of the Protection of Personal Information Act, 2013 ("POPIA") to tell you how Chelo Services (Pty) Ltd ("Chelo") collects and processes your personal information. It should be read together with our Privacy Policy.

1. Who is processing your information

Chelo Services (Pty) Ltd is the responsible party. Our Information Officer can be reached at support@cheloapp.com.

2. What we collect and why

We collect personal information such as your name, contact details, account and role information, donation or transaction history, banking details (for payouts), and the identification details required to issue tax certificates. We collect this information to: provide the Chelo platform; process donations, releases and payouts; prevent fraud; issue section 18A tax certificates and meet SARS reporting obligations; communicate with you; and comply with the law.

3. Whether supply is voluntary or mandatory

Providing certain information is voluntary, but some information is required to use parts of the Platform (for example, you cannot receive payouts without banking details, or a tax certificate without the details SARS requires). If you do not provide required information, we may not be able to provide the related service.

4. Our lawful basis

We process personal information on one or more of the bases permitted by POPIA, including: performance of our contract with you; compliance with a legal obligation; your consent; and the protection of legitimate interests.

5. Who we share it with, and cross-border processing

We share personal information only as needed to operate the Platform: with payment providers, limited to the payment details needed to process your donation or payout; with cloud hosting and infrastructure providers that store and process data on our behalf as our operators; and with SARS where required to issue tax certificates and meet statutory reporting obligations. Some of these providers process or store information outside South Africa. In terms of section 72 of POPIA, we do so only where there is adequate protection, where it is necessary to perform our contract with you, or with your consent. By using the Platform you consent to this cross-border processing.

6. How we protect it

We apply reasonable technical and organisational safeguards in line with section 19 of POPIA, and we will notify you and the Information Regulator of a material security compromise as required by section 22.

7. Your rights

You have the right to access, correct, update or delete your personal information, to object to processing, and to withdraw consent where applicable. Contact our Information Officer at support@cheloapp.com to exercise these rights.

8. Complaints

You may lodge a complaint with the Information Regulator (South Africa) at enquiries@inforegulator.org.za if you believe your personal information has not been handled lawfully.