PRIVACY POLICY

Notchd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our digital loyalty platform, website, and services (collectively, the "Services").

This policy is compliant with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. By using our Services, you consent to the practices described in this policy.

We collect the following types of information:

• Account Information: Name, email address, business name, phone number, and password when you register as a merchant.
• Customer Data: Names and phone numbers of end-customers that you add to your loyalty programme. This data is processed on your behalf as the responsible party under POPIA.
• Usage Data: Information about how you interact with our platform, including login times, pages visited, and feature usage.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Payment Information: Billing details processed securely via our payment partner NetCash. We do not store your full credit card details.

We use your information to:

• Provide, maintain, and improve our Services
• Process payments and manage your subscription
• Send you service-related notifications and updates
• Issue and manage digital loyalty passes via Apple Wallet and Google Wallet
• Send WhatsApp messages to your customers on your behalf
• Comply with legal obligations and prevent fraud
• Analyse usage patterns to improve user experience

We do not sell your personal information. We may share data with:

• Service Providers: Twilio (WhatsApp messaging), NetCash (payment processing), and cloud infrastructure providers. All partners are bound by strict confidentiality agreements.
• Apple & Google: Limited customer data required to generate and deliver Wallet passes.
• Legal Authorities: When required by law, court order, or to protect our rights and safety.

We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest, access controls, and regular security audits. Your account is protected by password authentication and optional multi-factor authentication.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide you with our Services. When you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

Under South African POPIA, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate or incomplete data
• Object to the processing of your personal information
• Request deletion of your personal information (where applicable)
• Lodge a complaint with the Information Regulator of South Africa

To exercise these rights, contact us at info@t23ventures.com.

We use cookies and similar technologies to enhance your browsing experience, analyse traffic, and personalise content. You can control cookie preferences through your browser settings. Essential cookies required for the operation of the Services cannot be disabled.

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Your continued use of the Services after any changes indicates your acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: