Privacy Policy

This privacy notice for SOLDT ("Company," "we," "us," or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at www.soldt.co.za, or any website of ours that links to this privacy notice
• Use or access our platform to create, manage, or operate an online storefront
• Create an account or register as a merchant on our platform
• Configure your store, including products, pricing, pages, menus, and content
• Process orders or transactions through integrated third-party payment providers
• Upload, store, or manage content, including product images, descriptions, and branding assets
• Communicate with us, including contacting support or responding to messages
• Subscribe to a paid plan, trial, or promotional offer
• Integrate third-party services or tools connected to your store
• Use analytics, dashboards, or reporting features provided by the platform
• Visit our website, landing pages, or dashboards, including when we collect usage or device data

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@soldt.co.za.

1. How Do We Process Your Information?

We process your personal information in a manner that is lawful, reasonable, and necessary to operate and improve the Service, in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and other applicable South African laws.

1. To Provide and Operate the Service

We process information to:

• Create and manage user accounts
• Authenticate users and secure access
• Enable merchants to create and manage storefronts
• Display store content, products, and configurations
• Maintain platform functionality and performance

2. To Process Subscriptions and Billing

We process information to:

• Manage subscriptions, trials, and plan changes
• Facilitate payments through third-party payment providers
• Maintain billing records and transaction history

We do not store or process payment card details directly.

3. To Process Merchant Customer Data

If you are a merchant, we process customer information solely on your behalf to:

• Display orders and customer details in your dashboard
• Enable order management and reporting
• Support merchant operations and customer communication

Merchants remain responsible for ensuring that customer data is collected and processed lawfully.

4. To Communicate With Users

We process information to:

• Send service-related communications
• Respond to support requests
• Notify users of important updates, changes, or issues
• Provide onboarding, guidance, and account-related messages

5. To Improve, Secure, and Maintain the Platform

We process information to:

• Monitor usage and performance
• Diagnose errors and technical issues
• Prevent fraud, abuse, and unauthorized access
• Maintain security and platform integrity
• Develop and improve features

6. To Comply With Legal and Regulatory Obligations

We process information where necessary to:

• Comply with applicable South African laws and regulations
• Respond to lawful requests from authorities
• Enforce our Terms of Service and platform policies

7. For Analytics and Business Insights

We process aggregated and anonymised data to:

• Understand how the platform is used
• Improve user experience and functionality
• Make informed product and business decisions

Where possible, data used for analytics does not identify individual users.

8. Marketing and Communications (Where Applicable)

Where permitted by law and subject to your preferences, we may process information to:

• Send product updates or announcements
• Share information about new features or services

You may opt out of marketing communications at any time.

2. What Legal Bases Do We Rely On to Process Your Information?

We process personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and other applicable South African laws.

1. Performance of a Contract

We process personal information where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes processing information to:

• Create and manage user accounts
• Provide access to the platform and its features
• Process subscriptions and billing
• Provide customer support and communicate with you
• Maintain and operate the Service

2. Consent

Where required by law, we process personal information based on your consent. This may include:

• Marketing communications
• Optional features or integrations
• Use of certain cookies or tracking technologies

You may withdraw your consent at any time, subject to legal or contractual restrictions.

3. Legitimate Interests

We may process personal information where it is necessary for our legitimate business interests, provided such interests do not override your rights and freedoms. This includes processing information to:

• Improve, maintain, and secure the Service
• Prevent fraud, abuse, and unauthorized access
• Monitor usage and performance
• Conduct analytics and internal reporting
• Develop new features and functionality

4. Compliance with Legal Obligations

We process personal information where it is necessary to comply with legal or regulatory obligations under South African law. This includes:

• Record-keeping requirements
• Responding to lawful requests from authorities
• Compliance with tax, financial, or regulatory obligations
• Enforcing our Terms of Service

5. Protection of Legitimate Interests of Data Subjects or Third Parties

In limited circumstances, we may process personal information where it is necessary to protect the legitimate interests of users, customers, or third parties. This includes:

• Investigating security incidents
• Protecting users from fraud or harm
• Enforcing platform policies

3. When and With Whom Do We Share Your Personal Information?

We only share personal information where it is necessary to provide and operate the Service, comply with legal obligations, or protect the integrity of the platform.

1. Service Providers and Infrastructure Partners

We may share information with trusted third-party service providers who assist us in operating the Service, including:

• Hosting and cloud infrastructure providers
• Payment processors
• Email and communication services
• Analytics and monitoring tools
• Security and fraud-prevention services

These service providers process information only on our instructions and are required to implement appropriate security measures.

2. Payment Processing

Subscription payments are processed by third-party payment providers. We do not receive or store full payment card details. Payment providers process information in accordance with their own privacy policies and legal obligations.

3. Merchant-Directed Sharing

If you are a merchant, information may be shared as directed by you, including:

• Displaying customer and order information in your merchant dashboard
• Integrations you choose to enable

You are responsible for ensuring that such sharing is lawful.

4. Legal and Regulatory Requirements

We may disclose personal information where required to:

• Comply with applicable laws or regulations
• Respond to lawful requests from courts, regulators, or authorities
• Enforce our Terms of Service or platform policies
• Protect our rights, users, or the public

5. Business Transfers

If we are involved in a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable data protection laws.

We do not sell personal information.

4. How Long Do We Keep Your Information?

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may vary depending on:

• The nature of the information
• The purpose for which it was collected
• Legal, regulatory, or contractual requirements

In general:

• Account information is retained for the duration of your account
• Billing and transaction records are retained as required by law
• Merchant customer data is retained in accordance with merchant instructions and legal obligations

When information is no longer required, it is securely deleted or anonymised.

5. How Do We Keep Your Information Safe?

We implement reasonable technical and organisational security measures to protect personal information against loss, unauthorised access, disclosure, alteration, or destruction, in line with POPIA requirements.

These measures include:

• Secure hosting and infrastructure
• Access controls and authentication
• Encryption where appropriate
• Monitoring for suspicious activity
• Regular security reviews and updates

Despite these measures, no system is completely secure, and we cannot guarantee absolute security. Users are responsible for safeguarding their account credentials and access details.

6. Do We Make Updates to This Notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws. We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.