Privacy Policy

SoWhereTo>Access Privacy Policy Legal entity SoWhereTo Access (Pty) Ltd Registration number

2026/224849/07

This Policy replaces the current short-form web policy and applies to customers, Brand Owners, Brand Marketing Agents, website visitors and other platform users.

1. Who we are

SoWhereTo Access (Pty) Ltd, trading as SoWhereTo>Access (SA>App), is responsible for the personal information it determines how and why to process. Our registration number is 2026/224849/07 and our registered-office details are available upon lawful or reasonable request.

Privacy enquiries may be sent to support@sowheretoaccess.com.

2. Information we collect

Identity and contact information, including name, email address, telephone number, delivery address and account identifiers.

Account and verification information supplied by Brand Owners and Brand Marketing Agents, including identity, business-registration, tax, banking and compliance documents where required.

Transaction information, including orders, sales, refunds, payouts, commissions, payment status and delivery records.

Technical and usage information, including device, browser, IP address, login activity, cookies, analytics and interaction data.

Communications, support requests, complaints, reviews, survey responses and consent records.

Messages exchanged between customers and Brand Owners through the platform messaging feature, including message content, sender and recipient identifiers, the item the conversation relates to, timestamps and read status.

Information from payment providers, couriers, verification partners, referrals and other service providers.

3. Why we process information

Create and administer accounts.

Verify Brand Owners and Brand Marketing Agents.

Display products, process orders and facilitate payments, settlements, commissions and refunds.

Provide delivery information and customer support.

Review conversations between customers and Brand Owners in order to assist with enquiries, resolve disputes, enforce platform rules and detect misuse.

Insure security measures are in place to protect all users.

Improve the platform, analytics, reporting and user experience.

Send service messages and, where permitted, marketing communications.

Comply with tax, accounting, consumer-protection, data-protection and other legal obligations.

Establish, exercise or defend legal claims.

4. Lawful grounds

Depending on the activity, we process personal information to perform a contract, comply with law, pursue legitimate business interests, protect a legitimate interest of a person, or with consent.

Where consent is relied on, it may be withdrawn, but withdrawal does not affect processing already lawfully initiated or completed.

5. Marketplace sharing

A supplying Brand Owner receives only the information reasonably required to prepare, dispatch and resolve the relevant order. This may include the customer’s name, delivery address, approved contact details, order details and delivery instructions.

Brand Owners may use this information only for fulfilment and active-order communication. They may not add customers to marketing databases; contact them for unrelated promotions; share websites, online stores, social-media accounts, direct sales contacts, QR codes or payment details; place such information in customer packages; or encourage customers introduced through SoWhereTo>Access to transact outside the platform.

Brand Marketing Agents receive only information required for approved brand onboarding and support activities.

5.1. Platform messaging and monitoring

The platform provides a messaging feature that allows a customer and a Brand Owner to communicate about a specific product, service or listing. Messages sent through this feature are stored by SoWhereTo>Access and are not private between the two parties.

Authorised SoWhereTo>Access personnel may access and review these conversations in order to respond to support requests, resolve disputes between a customer and a Brand Owner, investigate suspected fraud or abuse, enforce the platform rules set out in the applicable terms, and meet legal or regulatory obligations.

Access may occur in response to a report or enquiry, or through routine administrative review. Summaries of messaging activity, which may include message content, are sent automatically to a monitored internal administrative address so that the platform can identify conversations needing assistance. These summaries are treated as confidential and are subject to the same access controls, retention limits and security measures as other personal information described in this Policy.

We rely on our legitimate interest in operating a safe and functional marketplace, on the performance of our agreement with users, and on compliance with law, as the grounds for this processing.

We do not use the content of platform messages for marketing, and we do not sell it.

Users should not send payment card details, passwords, identity-document numbers or other sensitive information through platform messaging. Where a conversation moves off the platform, this Policy no longer applies to it.

6. Service providers and third parties

Payment processors, including international gateways where enabled.

Courier, logistics and fulfilment providers.

Identity, business, banking, security and compliance-verification providers.

Hosting, cloud, cybersecurity, analytics, communications, customer-support and professional advisers.

Regulators, law-enforcement bodies, courts or other parties where required or permitted by law.

Support organisations and partners, funders/sponsors directly contributing to SA>App.

7. Payment information

Payments are handled by approved payment providers. SoWhereTo>Access does not ordinarily receive or store complete card credentials. Payment providers process information under their own privacy and security terms.

8. Direct marketing

We send electronic marketing only where permitted by law. Marketing messages will identify the sender and provide a reasonable way to opt out.

Withdrawing marketing consent does not stop necessary service, security, order, payout or legal communications.

9. Children and younger BMAs

The platform may permit Brand Marketing Agents or Sellers aged 15 to 17 to participate subject to age-appropriate safeguards and parent or guardian consent where required.

We limit collection and use of children’s information to what is necessary for lawful onboarding, safety, participation, payment and compliance. We do not knowingly use children’s information for unrelated profiling or marketing.

10. Cookies and analytics

We may use essential cookies for security, login, preferences and checkout, and optional analytics or marketing technologies where permitted.

Users may control non-essential cookies through the available consent tool or browser settings. Blocking essential cookies may affect platform functions.

11. International transfers

Some service providers may process information outside South Africa. Where this occurs, we take reasonable steps to ensure an appropriate legal basis and safeguards for the transfer.

12. Retention

We retain information only for as long as reasonably necessary for the stated purpose, legal obligations, security measures, dispute resolution, tax and accounting records, and enforcement of agreements.

Information is deleted, de-identified or securely archived when no longer in use, subject to lawful retention duties.

13. Security and incidents

We use reasonable organisational and technical safeguards appropriate to the nature of the information and risk, including access controls, authentication, secure hosting, monitoring and confidentiality requirements.

Where a qualifying security compromise occurs, we will investigate and make notifications required by law.

14. Your rights

Ask whether we hold personal information about you and request access.

Request correction, updating or deletion where legally available.

Object to certain processing or withdraw consent.

Request information about recipients or categories of recipients.

Write to SoWhereTo>Access or the organisation, Atlegile Marketing Solutions (Pty) Ltd administrators.

15. Automated tools

We may use rules, analytics or automated tools to support screening, verification, recommendations and platform administration. Where a decision has a legally significant or similarly substantial effect, applicable rights and safeguards will be respected.

16. External links

The platform may contain links to external services. Their privacy practices are controlled by those providers, and users should review the applicable notices.

17. Policy updates

We may update this Policy to reflect legal, operational or technology changes. Material updates will be communicated through the website, app or registered contact details.

18. Contact and complaints

Privacy contact: admin@sowheretoaccess.com

Registered-office details are available upon lawful or reasonable request.

You may also lodge with the Information Regulator of South Africa through its official channels.