1. INTRODUCTION

My Perks (Pty) Ltd, trading as WoveGifts ("WoveGifts", "we", "us", or "our"), respects your privacy and is committed to protecting your personal information in accordance with:

• The Protection of Personal Information Act, 4 of 2013 ("POPIA")
• The Electronic Communications and Transactions Act ("ECTA")
• The Consumer Protection Act ("CPA")
• Any other applicable South African data protection legislation

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you:

• Visit our website
• Purchase or redeem a Gift Card or Voucher Code
• Participate in a corporate incentive programme
• Interact with our API or enterprise integrations
• Contact customer support

2. RESPONSIBLE PARTY

The Responsible Party for purposes of POPIA is:

My Perks (Pty) Ltd

Trading as WoveGifts

Registered Address:

8 Vineyard Road

Claremont

Cape Town

South Africa

Email: [email protected]

3. DEFINITIONS

Personal Information means information relating to an identifiable, living natural person or juristic person, as defined under POPIA.

Data Subject means the individual whose personal information is processed.

Processing includes collection, storage, updating, use, sharing, deletion, or destruction of personal information.

4. PERSONAL INFORMATION WE COLLECT

We may collect the following categories of personal information:

4.1 Identity Information

• Full name
• Surname
• ID number (where required for compliance)
• Company details (for corporate users)

4.2 Contact Information

• Email address
• Mobile number
• Physical address
• Billing address

4.3 Transaction Information

• Purchase history
• Voucher issuance records
• Redemption history
• Payment confirmation status

4.4 Technical Information

• IP address
• Device information
• Browser type
• Cookies and usage analytics

4.5 Corporate Programme Data

• Employer name
• Employee number
• Reward allocations
• Campaign participation records

4.6 Support Information

• Customer service communications
• Complaint details
• Fraud investigations

5. HOW WE COLLECT INFORMATION

We collect personal information:

• Directly from you when you purchase or register
• From corporate clients issuing vouchers to employees
• From API partners (banks, telcos, loyalty platforms)
• Through cookies and analytics tools
• From payment processors

6. PURPOSE OF PROCESSING

We process personal information for the following lawful purposes:

• Issuing Gift Cards and Voucher Codes
• Processing payments
• Preventing fraud and abuse
• Providing customer support
• Complying with legal obligations
• Administering corporate reward programmes
• Improving platform performance
• Sending transactional communications
• Marketing (only where consent has been provided)

We will not process personal information for purposes incompatible with those listed above.

7. LAWFUL BASIS FOR PROCESSING

Under POPIA, we rely on:

• Consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate interests (fraud prevention, security, system integrity)

8. SPECIAL PERSONAL INFORMATION

WoveGifts does not intentionally collect or process special personal information (e.g., health, religion, biometric data).

If such data is inadvertently received, it will be securely deleted unless legally required.

9. CHILDREN'S INFORMATION

Gift Cards may be gifted to minors.

We do not knowingly collect personal information directly from children under 18 without appropriate consent from a parent, guardian, or corporate sponsor.

10. SHARING OF INFORMATION

We may share personal information with:

• Payment gateways
• Banking partners
• Telco integrations
• Corporate clients (for campaign reporting)
• Merchants (for redemption validation)
• Cloud hosting providers
• Fraud detection service providers

All third-party processors are contractually bound to comply with POPIA and appropriate data security standards.

We do not sell personal information.

11. CROSS-BORDER TRANSFERS

Where data is stored or processed outside South Africa (e.g., cloud hosting providers), we ensure:

• The recipient country has adequate data protection laws; or
• Appropriate contractual safeguards are in place.

12. DATA SECURITY

WoveGifts implements appropriate technical and organisational security measures including:

• Encryption in transit (SSL/TLS)
• Access control and authentication controls
• Role-based access
• Firewalls and intrusion monitoring
• Regular security reviews
• ISO-aligned information security practices

No system is 100% secure; however, we take reasonable measures to protect your information.

13. DATA RETENTION

We retain personal information only for as long as:

• Required to fulfil the purpose collected
• Required by tax and financial regulations
• Required for dispute resolution
• Required under corporate contracts

Expired or unnecessary data is securely deleted or anonymised.

14. YOUR RIGHTS UNDER POPIA

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion (where legally permissible)
• Object to processing
• Withdraw consent
• Lodge a complaint with the Information Regulator

To exercise your rights, contact:

[email protected]

15. COOKIES

Our website uses cookies to:

• Improve user experience
• Analyse traffic
• Prevent fraud

Users may disable cookies via browser settings; however, this may affect functionality.

16. DIRECT MARKETING

We will only send marketing communications where:

• You have opted in; or
• A lawful existing customer relationship applies.

You may unsubscribe at any time.

17. INFORMATION OFFICER

In terms of POPIA, My Perks (Pty) Ltd has appointed an Information Officer.

Requests relating to personal data should be directed to:

Email: [email protected]

18. BREACH NOTIFICATION

In the event of a data breach posing risk to Data Subjects:

• Affected individuals will be notified; and
• The Information Regulator will be informed as required by POPIA.

19. UPDATES TO THIS POLICY

We may update this Privacy Policy periodically.

Updated versions will be published on the WoveGifts website and take effect immediately upon publication.