Skip to main content
Shop Chelo

Privacy Policy

Last updated: June 14, 2026

Privacy Policy

Effective date: 14 June 2026

This Privacy Policy explains how Chelo Services (Pty) Ltd ("Chelo", "we", "us") collects, uses, shares and protects your personal information when you use the Chelo platform at cheloapp.com (the "Platform"). We are the responsible party for the processing of your personal information under the Protection of Personal Information Act, 2013 ("POPIA").

This policy should be read together with our POPIA Notice and Terms and Conditions.

1. Information we collect

Depending on how you use the Platform, we may collect:

  • Account information — name, email address, phone number, password, and role (donor, fundraiser or service provider).

  • Donor information — donation history, and (where you request a tax certificate) the identification details required by SARS.

  • Fundraiser and organisation information — organisation name, registration details, project content, and banking details for payouts.

  • Service provider information — business details, deliverables, and banking details for payment.

  • Payment information — processed by our payment providers; we do not store full card numbers.

  • Technical information — IP address, device and browser information, and usage data collected through cookies and similar technologies.

2. How we use your information and our lawful basis

We process personal information only where we have a lawful basis under POPIA, including: performance of our contract with you; compliance with a legal obligation (for example, SARS reporting); your consent; protection of a legitimate interest; or where processing is necessary to pursue our or a third party's legitimate interests. We use personal information to:

  • create and manage your account and provide the Platform;

  • process donations, releases and payouts, and prevent fraud;

  • issue tax certificates and meet SARS third-party (IT3(d)) reporting obligations;

  • communicate with you and provide support;

  • comply with legal and regulatory obligations; and

  • improve and secure the Platform.

We collect personal information directly from you wherever reasonably practicable.

3. Sharing your information

We share personal information only as needed to operate the Platform:

  • Payment providers — limited to the payment and transaction details needed to process your donations and payouts;

  • Cloud hosting and infrastructure providers that store and process platform data on our behalf, as our operators;

  • SARS, where required to issue tax certificates and meet statutory reporting obligations;

  • Fundraisers and organisations you choose to support, to the extent necessary; and

  • Authorities or third parties where required by law or to protect rights and safety.

We require our operators (processors) to protect personal information and to process it only on our instructions.

4. Cross-border transfers

Some of our service providers — including our payment processor and cloud hosting and infrastructure providers — process or store personal information outside South Africa. In accordance with section 72 of POPIA, we transfer personal information across borders only where: the recipient is subject to laws or a binding agreement providing an adequate level of protection and onward-transfer safeguards; the transfer is necessary to perform our contract with you; or you have consented. By using the Platform, you consent to the cross-border processing of your personal information for these purposes.

5. Security

We take reasonable technical and organisational measures to safeguard personal information against loss, damage, and unauthorised access or processing, in line with section 19 of POPIA. No method of transmission or storage is completely secure, but we work to protect your information and continually review our safeguards.

6. Data breach notification

If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you as soon as reasonably possible, in accordance with section 22 of POPIA.

7. Retention

We keep personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law (for example, financial and tax records must be kept for statutory periods).

8. Your rights

Under POPIA you have the right to: request access to your personal information; request that it be corrected, updated or deleted; object to processing in certain circumstances; and withdraw consent where processing is based on consent. To exercise these rights, contact our Information Officer (see clause 11). You also have the right to lodge a complaint with the Information Regulator (clause 12).

9. Cookies

We use cookies and similar technologies to operate the Platform, remember your preferences, and analyse usage. You can manage cookies through your browser settings, though some features may not work without them.

10. Children

The Platform is not intended for use by persons under 18. We do not knowingly collect the personal information of children without the consent of a competent person.

11. Information Officer

Questions or requests about this policy or your personal information can be sent to our Information Officer at support@cheloapp.com.

12. Complaints

If you believe we have not handled your personal information lawfully, you may lodge a complaint with the Information Regulator (South Africa) — enquiries@inforegulator.org.za.

13. Changes

We may update this policy from time to time. Material changes will be notified through the Platform, and the effective date above will be updated.

Privacy Policy | Chelo