1. Introduction and Scope

1nga Business ("we," "us," "our," or "1nga Business") is committed to protecting your privacy and personal information. This Privacy Policy and Data Protection Notice ("Privacy Policy") explains how we collect, use, disclose, transfer, store, and protect your personal information when you access and use the 1nga Business platform, including but not limited to the website located at business.1nga.store, mobile applications, APIs, and all related services (collectively, the "Platform" or "Service").

This Privacy Policy applies to all Users of the Platform, including Business Users, Suppliers, and any other individuals or entities that access or use the Platform. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

This Privacy Policy is designed to comply with applicable data protection laws and regulations, including but not limited to: (a) the Protection of Personal Information Act, 2013 (POPIA) in South Africa; (b) the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) in the European Union; (c) the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) in California; and (d) other applicable data protection laws and regulations in jurisdictions where we operate.

If you do not agree with this Privacy Policy, you must immediately discontinue your use of the Platform and may not access or use any services provided therein.

2. Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

"Personal Information" or "Personal Data" means any information relating to an identified or identifiable natural person or, where applicable, an identified or identifiable legal entity, including but not limited to: name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person or entity.

"Processing" means any operation or set of operations performed on Personal Information, whether or not by automated means, including but not limited to: collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, combination, restriction, erasure, or destruction.

"Data Controller" means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Information.

"Data Processor" means a natural or legal person, public authority, agency, or other body which Processes Personal Information on behalf of the Data Controller.

"Data Subject" means the natural person or, where applicable, legal entity to whom Personal Information relates.

"Consent" means any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the Processing of Personal Information relating to him or her.

"Third Party" means a natural or legal person, public authority, agency, or body other than the Data Subject, Data Controller, Data Processor, and persons who, under the direct authority of the Data Controller or Data Processor, are authorized to Process Personal Information.

3. Information We Collect

3.1 Information You Provide Directly

We collect Personal Information that you provide directly to us when you: (a) register for an Account; (b) place Orders; (c) communicate with us or Suppliers; (d) participate in surveys, promotions, or other activities; (e) request customer support; (f) subscribe to newsletters or marketing communications; or (g) otherwise interact with the Platform.

The types of Personal Information we collect directly from you may include, but are not limited to:

Account and Registration Information: Full name, business name, business registration number, tax identification number, business address, billing address, shipping address, email address, telephone number, mobile number, fax number, date of birth, government-issued identification numbers, and any other information required for account registration and verification.

Business Information: Business type, industry, business description, number of employees, annual revenue, business licenses, permits, certifications, banking information, payment method information, credit card numbers, bank account numbers, and other financial information necessary for payment processing.

Order and Transaction Information: Order history, purchase history, product preferences, shipping preferences, delivery addresses, payment information, transaction amounts, order status, refund and return information, and any other information related to your Orders and transactions.

Communication Information: Messages, inquiries, feedback, complaints, support requests, and any other communications you send to us or Suppliers through the Platform, email, telephone, or other means.

Profile and Preference Information: Account settings, preferences, language preferences, notification preferences, marketing communication preferences, and any other information you choose to provide in your account profile.

Content and User-Generated Content: Reviews, ratings, comments, photographs, videos, and any other content you submit, post, upload, or otherwise make available on or through the Platform.

3.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain information about your device, browsing behavior, and usage patterns. This information may include, but is not limited to:

Device Information: Internet Protocol (IP) address, device type, device model, device identifier, operating system, browser type, browser version, browser language, screen resolution, time zone, and other technical information about your device and software.

Usage Information: Pages visited, time spent on pages, clicks, searches, features used, functions accessed, navigation paths, referral sources, exit pages, and other information about how you interact with the Platform.

Location Information: General location information based on your IP address, GPS coordinates (if you grant location permissions), and other location data that may be available through your device or browser.

Log Information: Server logs, access logs, error logs, and other log files that record your interactions with the Platform, including but not limited to: timestamps, IP addresses, user agents, request methods, URLs, status codes, and other technical information.

Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, local storage, session storage, and other tracking technologies. For detailed information about our use of cookies and tracking technologies, please see our Cookie Policy at /legal/cookies.

Analytics Information: Information collected through analytics services, including but not limited to: page views, unique visitors, session duration, bounce rates, conversion rates, and other analytics data.

3.3 Information from Third Parties

We may receive Personal Information about you from third parties, including but not limited to:

Payment Processors: Information from payment processors and financial institutions, including but not limited to: payment method information, transaction history, payment status, and fraud detection information.

Delivery and Logistics Providers: Information from delivery and logistics companies, including but not limited to: delivery status, tracking information, delivery confirmations, and delivery-related communications.

Suppliers and Suppliers: Information from Suppliers and suppliers, including but not limited to: order confirmations, product availability, shipping information, and other transaction-related information.

Business Verification Services: Information from business verification and credit check services, including but not limited to: business registration information, credit scores, credit reports, and business verification status.

Social Media Platforms: Information from social media platforms if you choose to connect your social media accounts or use social media features on the Platform, including but not limited to: profile information, friend lists, and social media activity.

Public Sources: Information from publicly available sources, including but not limited to: business directories, government databases, and other public records.

Marketing and Advertising Partners: Information from marketing and advertising partners, including but not limited to: demographic information, interest information, and marketing preferences.

4. How We Use Your Information

We use the Personal Information we collect for the following purposes:

4.1 Service Provision and Platform Operation

We use your Personal Information to: (a) create and manage your Account; (b) process and fulfill your Orders; (c) facilitate communication between you and Suppliers; (d) coordinate delivery and logistics; (e) process payments and manage financial transactions; (f) provide customer support and respond to your inquiries; (g) send order confirmations, shipping notifications, and other transactional communications; (h) manage your account preferences and settings; (i) verify your identity and business information; (j) prevent fraud and abuse; (k) enforce our Terms and Conditions and other policies; and (l) provide, maintain, and improve the Platform and our services.

4.2 Platform Improvement and Analytics

We use your Personal Information to: (a) analyze usage patterns and trends; (b) understand how Users interact with the Platform; (c) identify areas for improvement; (d) develop new features and services; (e) conduct research and analytics; (f) test and optimize Platform functionality; (g) measure the effectiveness of our services; and (h) improve user experience and Platform performance.

4.3 Communication and Marketing

We use your Personal Information to: (a) send you important notices and updates about the Platform, your Account, and your Orders; (b) respond to your inquiries and provide customer support; (c) send you marketing communications, promotional offers, and newsletters (with your consent, where required by law); (d) notify you about new products, features, and services; (e) conduct surveys and gather feedback; and (f) communicate with you about your use of the Platform.

4.4 Legal and Security

We use your Personal Information to: (a) comply with applicable laws, regulations, and legal obligations; (b) respond to legal process, court orders, subpoenas, and government requests; (c) enforce our Terms and Conditions and other agreements; (d) protect our rights, property, and safety, and the rights, property, and safety of our Users and third parties; (e) prevent, detect, and investigate fraud, abuse, security threats, and other illegal activities; (f) comply with anti-money laundering, sanctions, and other regulatory requirements; and (g) establish, exercise, or defend legal claims.

4.5 Business Operations

We use your Personal Information to: (a) manage our business operations; (b) conduct financial reporting and accounting; (c) manage relationships with Suppliers and other business partners; (d) conduct business analytics and market research; (e) manage mergers, acquisitions, and other corporate transactions; and (f) other legitimate business purposes.

5. Legal Basis for Processing

We Process your Personal Information based on the following legal bases, as applicable:

Consent: Where you have given your Consent to the Processing of your Personal Information for specific purposes, such as marketing communications or the use of certain cookies.

Contract Performance: Where Processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract, such as processing Orders and providing Platform services.

Legal Obligation: Where Processing is necessary for compliance with a legal obligation to which we are subject, such as tax reporting, anti-money laundering compliance, or responding to legal process.

Legitimate Interests: Where Processing is necessary for the purposes of our legitimate interests or the legitimate interests of third parties, such as fraud prevention, security, Platform improvement, and business operations, provided that such interests are not overridden by your interests or fundamental rights and freedoms.

Vital Interests: Where Processing is necessary to protect the vital interests of you or another natural person.

Public Interest: Where Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

6. Information Sharing and Disclosure

We may share and disclose your Personal Information in the following circumstances:

6.1 With Suppliers

We share necessary Personal Information with Suppliers to: (a) process and fulfill your Orders; (b) coordinate delivery and logistics; (c) resolve order issues and disputes; (d) facilitate communication between you and Suppliers; and (e) provide customer support. Suppliers are independent data controllers with respect to the Personal Information they receive, and their use of your Personal Information is subject to their own privacy policies and practices.

6.2 With Service Providers

We share Personal Information with trusted service providers who perform services on our behalf, including but not limited to: (a) payment processors and financial institutions; (b) delivery and logistics providers; (c) cloud hosting and infrastructure providers; (d) customer support service providers; (e) analytics and data analysis service providers; (f) marketing and advertising service providers; (g) email and communication service providers; (h) fraud detection and prevention service providers; and (i) other service providers necessary for Platform operation.

These service providers are contractually obligated to: (a) use your Personal Information only for the purposes for which it was shared; (b) maintain the confidentiality and security of your Personal Information; (c) comply with applicable data protection laws and regulations; and (d) not disclose your Personal Information to third parties except as necessary to perform their services or as required by law.

6.3 With Business Partners

We may share Personal Information with business partners, including but not limited to: (a) Affiliates and subsidiaries; (b) joint venture partners; (c) strategic partners; and (d) other business partners with whom we collaborate to provide services or conduct business operations.

6.4 Legal Requirements

We may disclose Personal Information when required by: (a) applicable laws, regulations, or legal process; (b) court orders, subpoenas, or other judicial or administrative processes; (c) government requests or regulatory inquiries; (d) law enforcement requests; (e) to comply with legal obligations; (f) to protect our rights, property, and safety, and the rights, property, and safety of our Users and third parties; (g) to prevent or investigate fraud, abuse, or illegal activities; or (h) to enforce our Terms and Conditions and other agreements.

6.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of assets, or other business transfer, your Personal Information may be transferred to the acquiring entity or successor entity as part of the transaction. You will be notified of any such transfer and any material changes to this Privacy Policy.

6.6 With Your Consent

We may share Personal Information with third parties with your explicit Consent for specific purposes, such as marketing communications, social media sharing, or other purposes for which you have provided Consent.

6.7 Aggregated and Anonymized Information

We may share aggregated, anonymized, or de-identified information that does not identify you personally with third parties for various purposes, including but not limited to: (a) business analytics; (b) market research; (c) industry reports; and (d) other legitimate business purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

Encryption: We use industry-standard encryption technologies to protect Personal Information in transit and at rest, including but not limited to: Transport Layer Security (TLS), Secure Sockets Layer (SSL), and Advanced Encryption Standard (AES).

Access Controls: We implement strict access controls to ensure that only authorized personnel have access to Personal Information, and we regularly review and update access permissions.

Authentication and Authorization: We use secure authentication and authorization mechanisms to verify the identity of Users and control access to Personal Information.

Security Monitoring: We continuously monitor our systems for security threats, vulnerabilities, and suspicious activities, and we have incident response procedures in place to address security incidents.

Regular Security Assessments: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and address security risks.

Employee Training: We provide regular training to our employees on data protection, security best practices, and privacy compliance.

Physical Security: We maintain physical security measures at our facilities and data centers to prevent unauthorized physical access to systems and data.

Backup and Recovery: We maintain regular backups of data and have disaster recovery procedures in place to ensure business continuity and data recovery in the event of a security incident or system failure.

However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You acknowledge that you provide Personal Information at your own risk, and you are responsible for taking appropriate measures to protect your account credentials and other sensitive information.

8. Data Retention

We retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The retention period may vary depending on: (a) the type of Personal Information; (b) the purpose for which it was collected; (c) legal and regulatory requirements; (d) business needs; and (e) other relevant factors.

Generally, we retain Personal Information for: (a) as long as your Account is active; (b) as necessary to provide services and fulfill Orders; (c) as required by applicable laws and regulations (e.g., tax records, financial records, and other records that must be retained for statutory periods); (d) as necessary to resolve disputes and enforce agreements; and (e) as necessary for legitimate business purposes.

When Personal Information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and applicable law. However, some information may be retained in backup systems or archives for longer periods, and we may retain certain information as required by law or for legitimate business purposes.

9. Your Rights and Choices

Depending on your jurisdiction and applicable data protection laws, you may have certain rights regarding your Personal Information, including but not limited to:

9.1 Right of Access

You have the right to request access to your Personal Information and to obtain a copy of the Personal Information we hold about you, subject to certain limitations and exceptions as provided by applicable law.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete Personal Information. You can update much of your Personal Information directly through your Account settings, or you can contact us to request corrections.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your Personal Information in certain circumstances, subject to legal and regulatory requirements and our legitimate business interests. We may not be able to delete all Personal Information if: (a) it is necessary for the performance of a contract; (b) it is required by law; (c) it is necessary for legal claims; or (d) there are other legitimate reasons for retention.

9.4 Right to Restrict Processing

You have the right to request restriction of Processing of your Personal Information in certain circumstances, such as when you contest the accuracy of the data or object to Processing.

9.5 Right to Data Portability

You have the right to receive your Personal Information in a structured, commonly used, and machine-readable format and to transmit that information to another data controller, where technically feasible and applicable.

9.6 Right to Object

You have the right to object to Processing of your Personal Information based on legitimate interests or for direct marketing purposes. You can opt-out of marketing communications at any time by using the unsubscribe links in our emails or by adjusting your account preferences.

9.7 Right to Withdraw Consent

Where Processing is based on Consent, you have the right to withdraw your Consent at any time. Withdrawal of Consent does not affect the lawfulness of Processing based on Consent before its withdrawal.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that our Processing of your Personal Information violates applicable data protection laws. In South Africa, you can lodge a complaint with the Information Regulator. In the European Union, you can lodge a complaint with the supervisory authority in your member state.

To exercise any of these rights, please contact us using the contact information provided in the Contact Us section of this Privacy Policy. We will respond to your request within the timeframes required by applicable law, typically within thirty (30) days, though this may be extended in certain circumstances as permitted by law.

10. International Data Transfers

Your Personal Information may be transferred to and Processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place for international transfers of Personal Information, including but not limited to:

Standard Contractual Clauses: We use standard contractual clauses approved by relevant data protection authorities to ensure adequate protection of Personal Information transferred to countries outside the European Economic Area or other jurisdictions with strict data protection laws.

Adequacy Decisions: We may transfer Personal Information to countries that have been determined to provide adequate levels of data protection by relevant data protection authorities.

Binding Corporate Rules: We may rely on binding corporate rules or other approved transfer mechanisms to ensure adequate protection of Personal Information.

Consent: In some cases, we may transfer Personal Information based on your explicit Consent.

By using the Platform, you Consent to the transfer of your Personal Information to countries that may have different data protection laws than your country of residence, and you acknowledge that such transfers are necessary for the provision of services and Platform operation.

11. Children's Privacy

The Platform is not intended for individuals under the age of eighteen (18) years, and we do not knowingly collect Personal Information from children. If you are under the age of eighteen (18), you must not use the Platform or provide any Personal Information to us.

If we become aware that we have collected Personal Information from a child under the age of eighteen (18) without parental consent, we will take steps to delete such information promptly. If you believe that we have collected Personal Information from a child under the age of eighteen (18), please contact us immediately using the contact information provided in the Contact Us section of this Privacy Policy.

12. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not owned or controlled by 1nga Business. This Privacy Policy does not apply to third-party websites, services, or applications, and we are not responsible for the privacy practices of third parties.

We encourage you to review the privacy policies of third-party websites, services, and applications before providing any Personal Information to them. Your interactions with third parties are subject to their own terms and conditions and privacy policies.

13. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, session storage, and other tracking technologies to collect information about your use of the Platform. For detailed information about our use of cookies and tracking technologies, including the types of cookies we use, how we use them, and how you can manage your cookie preferences, please see our Cookie Policy at /legal/cookies.

14. Marketing Communications

We may send you marketing communications, promotional offers, and newsletters if you have provided your Consent or if we have a legitimate interest in doing so, subject to applicable law. You can opt-out of marketing communications at any time by: (a) using the unsubscribe links in our emails; (b) adjusting your account preferences; or (c) contacting us using the contact information provided in the Contact Us section of this Privacy Policy.

Please note that even if you opt-out of marketing communications, we may still send you important transactional and administrative communications related to your Account, Orders, and the Platform.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. Material changes to this Privacy Policy will be posted on the Platform with an updated "Last Updated" date, and we may, but are not obligated to, provide additional notice of material changes through email, in-app notifications, or other means.

Your continued use of the Platform following the posting of any changes to this Privacy Policy constitutes your acceptance of such changes. If you do not agree to the modified Privacy Policy, you must immediately discontinue your use of the Platform and may terminate your Account.

You are responsible for reviewing this Privacy Policy periodically to stay informed of any changes. The most current version of this Privacy Policy will always be available on the Platform.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Data Protection Officer: business@1nga.com

Privacy Inquiries: business@1nga.com

General Inquiries: business@1nga.com

Address: 16A Katalina Avenue, Rhodesfield Kempton Park

Phone: 0710906662

Business Hours: 9h00 to 17h00

We will respond to your inquiries and requests within the timeframes required by applicable law, typically within thirty (30) days, though this may be extended in certain circumstances as permitted by law.

17. Regional Privacy Rights

17.1 South African Users (POPIA)

If you are located in South Africa, you have rights under the Protection of Personal Information Act, 2013 (POPIA), including but not limited to: (a) the right to be notified that Personal Information is being collected; (b) the right to access your Personal Information; (c) the right to request correction of inaccurate Personal Information; (d) the right to request deletion of Personal Information; (e) the right to object to Processing; (f) the right to file a complaint with the Information Regulator; and (g) other rights as provided by POPIA.

17.2 European Users (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including but not limited to: (a) the right of access; (b) the right to rectification; (c) the right to erasure (right to be forgotten); (d) the right to restrict Processing; (e) the right to data portability; (f) the right to object to Processing; (g) the right to withdraw Consent; and (h) the right to lodge a complaint with a supervisory authority.

17.3 California Users (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including but not limited to: (a) the right to know what Personal Information is collected, used, shared, or sold; (b) the right to delete Personal Information; (c) the right to opt-out of the sale of Personal Information; (d) the right to non-discrimination; (e) the right to correct inaccurate Personal Information; and (f) the right to limit the use and disclosure of sensitive Personal Information.

17.4 Other Jurisdictions

If you are located in other jurisdictions, you may have additional rights under applicable data protection laws. Please contact us if you have questions about your rights in your jurisdiction.

18. Consent and Acknowledgment

BY USING THE PLATFORM, YOU ACKNOWLEDGE THAT: (A) YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY; (B) YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY; (C) YOU CONSENT TO THE TRANSFER OF YOUR PERSONAL INFORMATION TO COUNTRIES THAT MAY HAVE DIFFERENT DATA PROTECTION LAWS THAN YOUR COUNTRY OF RESIDENCE; (D) YOU CONSENT TO THE USE OF COOKIES AND TRACKING TECHNOLOGIES AS DESCRIBED IN OUR COOKIE POLICY; AND (E) IF YOU ARE PROVIDING PERSONAL INFORMATION ON BEHALF OF A BUSINESS ENTITY, YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO PROVIDE SUCH CONSENT ON BEHALF OF THE ENTITY.