Privacy Policy

5-BOB (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we handle personal information when you interact with our community loyalty ecosystem, including Spaza shop participation, consumer rewards, mobile data benefits, and our digital platforms.

We process personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) and other applicable laws in South Africa.

1. Who We Are

5-BOB operates Africa’s first community-based loyalty ecosystem, connecting Spaza shop owners and township consumers across South Africa. For privacy-related enquiries, you may contact us via WhatsApp at +27 69 063 1256 or through the contact form on our website.

2. Information We Collect

Depending on how you use 5-BOB, we may collect the following categories of personal information:

• Identity and contact details — such as your name, phone number, email address, and physical address.
• Account and profile information — including your 5-BOB membership details, preferences, and communication history.
• Transaction and loyalty data — such as tap activity, points earned or redeemed, participating Spaza locations, and reward history.
• Device and technical information — including device type, operating system, app version, IP address, and usage logs.
• NFC card information — linked card identifiers and activity associated with your loyalty profile.
• Communications — messages you send to us, support requests, and feedback.
• Website form data — information submitted through our contact or registration forms.

Where permitted by law, we may also receive information from participating Spaza partners, service providers, or publicly available sources to verify accounts and support programme integrity.

3. How We Use Your Information

We use personal information for purposes including:

• Creating and managing your 5-BOB account and loyalty profile;
• Processing taps, rewards, points, mobile data, and other programme benefits;
• Connecting consumers with participating Spaza shops and community offers;
• Providing customer support and responding to enquiries;
• Improving our app, website, services, security, and user experience;
• Sending service notices, programme updates, and marketing communications where you have consented or where permitted by law;
• Detecting fraud, abuse, or unauthorised activity;
• Complying with legal, regulatory, and reporting obligations.

4. Legal Basis for Processing

Under POPIA, we process personal information where one or more of the following applies:

• You have given consent;
• Processing is necessary to perform a contract with you or take steps at your request before entering a contract;
• Processing is required to comply with a legal obligation;
• Processing protects a legitimate interest of ours or a third party, provided your rights do not override those interests.

5. Sharing of Information

We do not sell your personal information. We may share information with:

• Participating Spaza merchants, solely as needed to operate the loyalty programme;
• Technology, payment, telecommunications, hosting, and analytics service providers acting on our instructions;
• Professional advisers, auditors, and insurers where reasonably required;
• Law enforcement, regulators, courts, or other authorities when required by law or to protect rights, safety, and security.

Where information is transferred across borders, we take reasonable steps to ensure appropriate safeguards are in place as required by POPIA.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we will delete, anonymise, or securely archive it.

7. Security

We implement appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to POPIA, you may have the right to:

• Request access to the personal information we hold about you;
• Request correction or deletion of inaccurate or outdated information;
• Object to certain processing or request restriction of processing;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with the Information Regulator of South Africa.

To exercise your rights, contact us using the details in Section 1. We may need to verify your identity before responding.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to remember preferences, analyse traffic, and improve performance. You can manage cookie settings through your browser. Some site features may not function properly if cookies are disabled.

10. Children

Our services are not directed at children under the age of 18 without appropriate parental or guardian involvement. If you believe we have collected information from a child unlawfully, please contact us so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the latest version. Material changes may also be communicated through our app, website, or other appropriate channels.

12. Contact Us

For privacy questions, requests, or complaints, contact 5-BOB via WhatsApp at +27 69 063 1256 or through our contact page.