1.   INTRODUCTION

Welcome to Toastli (“Toastli”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, disclose, process, and protect your personal information when you access or use our platform, including our website, mobile applications, and related services (collectively, the “Platform”).

Toastli is committed to protecting your privacy and ensuring that your personal information is handled in accordance with applicable data protection laws, including the Protection of Personal Information Act, 4 of 2013 (“POPIA”) of South Africa.

By using our Platform, you agree to the terms of this Privacy Policy.

2.   DEFINITIONS

For the purposes of this Privacy Policy:

• “Personal Information” means any information relating to an identifiable, living natural person or existing juristic person.
• “User” refers to any individual who accesses or uses the Platform, including customers and vendors.
• “Vendor” refers to a user who lists services, venues, or products for booking on the
• “Processing” means any operation performed on personal information, including collection, storage, use, or sharing.

3.   INFORMATION WE COLLECT

We may collect and process the following categories of personal information:

3.1  Information You Provide Directly

When you register or use the Platform, we may collect:

• Full name and surname
• Email address
• Phone number
• Physical address
• Identification documents (e.g. ID or passport)
• Selfie or biometric verification data (for vendor verification)
• Banking and payout details (for vendors only)
• Profile information and account preferences

3.2  Transaction and Booking Information

• Booking details (dates, services, pricing)
• Payment information (processed via third-party providers)
• Communication between users and vendors
• Cancellation and refund history

3.3  Automatically Collected Information

When you use the Platform, we may automatically collect:

• IP address
• Device information
• Browser type and version
• Usage data and activity logs
• Location data (if enabled)
• Cookies and tracking data

3.4  Vendor Verification Information

To maintain trust and safety on the Platform, we may collect:

• Identity verification documents
• Proof of banking details
• Business registration documents (if applicable)

4.   PURPOSE OF PROCESSING

We process personal information for the following purposes:

4.1  Platform Operation

• Creating and managing user accounts
• Providing access to services and features
• Enabling bookings and transactions

4.2  Vendor Verification and Trust

• Verifying vendor identities
• Preventing fraud and unauthorized activity
• Ensuring compliance with platform standards

4.3  Payments and Transactions

• Facilitating payments through third-party providers
• Processing refunds and payouts
• Managing disputes

4.4  Communication

• Sending booking confirmations and updates
• Facilitating communication between users and vendors
• Providing customer support

4.5  Security and Fraud Prevention

• Monitoring suspicious activity
• Detecting and preventing fraud
• Enforcing our terms and policies

4.6  Legal and Regulatory Compliance

• Complying with applicable laws and regulations
• Responding to lawful requests from authorities

4.7  Platform Improvement

• Analysing usage trends
• Improving user experience
• Developing new features and services

5.   LEGAL BASIS FOR PROCESSING

We process personal information based on:

• User consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests

6.   DATA SHARING AND DISCLOSURE

We may share your personal information with:

6.1  Payment Providers

To facilitate secure transactions and payouts.

6.2  Verification Services

To verify identity and prevent fraud.

6.3  Service Providers

Including:

• Hosting providers
• Analytics providers
• Customer support tools

6.4  Vendors and Users

• Relevant information may be shared between users and vendors to facilitate

6.5  Legal Authorities

Where required by law, regulation, or legal process.

6.6  Business Transfers

In the event of a merger, acquisition, or sale of assets.

7.   DATA SECURITY

We implement appropriate technical and organisational measures to protect personal information, including:

• Encryption of sensitive data
• Secure servers and firewalls
• Access controls and authentication measures
• Regular security monitoring

However, no system is completely secure, and we cannot guarantee absolute security.

8.   DATA RETENTION

We retain personal information only for as long as necessary to:

• Fulfil the purposes outlined in this Policy
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements

When information is no longer required, it will be securely deleted or anonymised.

9.   USER RIGHTS (POPIA)

Under POPIA, users have the right to:

• Request access to their personal information
• Request correction or updating of information
• Request deletion of personal data (where applicable)
• Object to processing in certain circumstances
• Withdraw consent at any time

Requests can be submitted to: hello@toastli.com

10.  COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

• Improve functionality and performance
• Analyse user behaviour
• Personalise user experience

Users can manage cookie preferences through their browser settings.

11.  THIRD-PARTY SERVICES

Toastli may use third-party services for:

• Payments
• Analytics
• Verification

These third parties have their own privacy policies, and Toastli is not responsible for their practices.

12.  CROSS-BORDER DATA TRANSFERS

Your personal information may be transferred to and processed in countries outside South Africa.

In such cases, we ensure:

• Adequate data protection safeguards
• Compliance with applicable laws

13.  CHILDREN’S PRIVACY

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

14.  LIMITATION OF LIABILITY

While we take reasonable measures to protect personal information, Toastli shall not be liable for:

• Unauthorized access beyond our control
• Data breaches caused by third parties
• User negligence (e.g. sharing login details)

15.  CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Users will be notified of material changes via:

• Email
• Platform notifications

Continued use of the Platform constitutes acceptance of the updated Policy.

16.  CONTACT INFORMATION

For any questions, requests, or concerns regarding this Privacy Policy:

Email: hello@toastli.com

Company: Toastli (Pty) Ltd

17.  ACCEPTANCE OF THIS POLICY

By using the Toastli Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy.

END OF POLICY