Privacy Policy

This Policy replaces the current short-form web policy and applies to customers, Brand Owners, Brand Marketing Agents, website visitors and other platform users.

1. Who we are

SoWhereTo Access (Pty) Ltd, trading as SoWhereTo>Access (SA>App), is responsible for the personal information it determines how and why to process. Our registration number is 2026/224849/07 and our registered-office details are available upon lawful or reasonable request.

Privacy enquiries may be sent to support@sowheretoaccess.com.

2. Information we collect

Identity and contact information, including name, email address, telephone number, delivery address and account identifiers.

Account and verification information supplied by Brand Owners and Brand Marketing Agents, including identity, business-registration, tax, banking and compliance documents where required.

Transaction information, including orders, sales, refunds, payouts, commissions, payment status and delivery records.

Technical and usage information, including device, browser, IP address, login activity, cookies, analytics and interaction data.

Communications, support requests, complaints, reviews, survey responses and consent records.

Information from payment providers, couriers, verification partners, referrals and other service providers.

3. Why we process information

Create and administer accounts.

Verify Brand Owners and Brand Marketing Agents.

Display products, process orders and facilitate payments, settlements, commissions and refunds.

Provide delivery information and customer support.

Insure security measures are in place to protect all users.

Improve the platform, analytics, reporting and user experience.

Send service messages and, where permitted, marketing communications.

Comply with tax, accounting, consumer-protection, data-protection and other legal obligations.

Establish, exercise or defend legal claims.

4. Lawful grounds

Depending on the activity, we process personal information to perform a contract, comply with law, pursue legitimate business interests, protect a legitimate interest of a person, or with consent.

Where consent is relied on, it may be withdrawn, but withdrawal does not affect processing already lawfully initiated or completed.

5. Marketplace sharing

A supplying Brand Owner receives only the information reasonably required to prepare, dispatch and resolve the relevant order. This may include the customer’s name, delivery address, approved contact details, order details and delivery instructions.

Brand Owners may use this information only for fulfilment and active-order communication. They may not add customers to marketing databases; contact them for unrelated promotions; share websites, online stores, social-media accounts, direct sales contacts, QR codes or payment details; place such information in customer packages; or encourage customers introduced through SoWhereTo>Access to transact outside the platform.

Brand Marketing Agents receive only information required for approved brand onboarding and support activities.

6. Service providers and third parties

Payment processors, including international gateways where enabled.

Courier, logistics and fulfilment providers.

Identity, business, banking, security and compliance-verification providers.

Hosting, cloud, cybersecurity, analytics, communications, customer-support and professional advisers.

Regulators, law-enforcement bodies, courts or other parties where required or permitted by law.

Support organisations and partners, funders/sponsors directly contributing to SA>App.

7. Payment information

Payments are handled by approved payment providers. SoWhereTo>Access does not ordinarily receive or store complete card credentials. Payment providers process information under their own privacy and security terms.

8. Direct marketing

We send electronic marketing only where permitted by law. Marketing messages will identify the sender and provide a reasonable way to opt out.

Withdrawing marketing consent does not stop necessary service, security, order, payout or legal communications.

9. Children and younger BMAs

The platform may permit Brand Marketing Agents or Sellers aged 15 to 17 to participate subject to age-appropriate safeguards and parent or guardian consent where required.

We limit collection and use of children’s information to what is necessary for lawful onboarding, safety, participation, payment and compliance. We do not knowingly use children’s information for unrelated profiling or marketing.

10. Cookies and analytics

We may use essential cookies for security, login, preferences and checkout, and optional analytics or marketing technologies where permitted.

Users may control non-essential cookies through the available consent tool or browser settings. Blocking essential cookies may affect platform functions.

11. International transfers

Some service providers may process information outside South Africa. Where this occurs, we take reasonable steps to ensure an appropriate legal basis and safeguards for the transfer.

12. Retention

We retain information only for as long as reasonably necessary for the stated purpose, legal obligations, security measures, dispute resolution, tax and accounting records, and enforcement of agreements.

Information is deleted, de-identified or securely archived when no longer in use, subject to lawful retention duties.

13. Security and incidents

We use reasonable organisational and technical safeguards appropriate to the nature of the information and risk, including access controls, authentication, secure hosting, monitoring and confidentiality requirements.

Where a qualifying security compromise occurs, we will investigate and make notifications required by law.

14. Your rights

Ask whether we hold personal information about you and request access.

Request correction, updating or deletion where legally available.

Object to certain processing or withdraw consent.

Request information about recipients or categories of recipients.

Write to SoWhereTo>Access or the organisation, Atlegile Marketing Solutions (Pty) Ltd administrators.

15. Automated tools

We may use rules, analytics or automated tools to support screening, verification, recommendations and platform administration. Where a decision has a legally significant or similarly substantial effect, applicable rights and safeguards will be respected.

16. External links

The platform may contain links to external services. Their privacy practices are controlled by those providers, and users should review the applicable notices.

17. Policy updates

We may update this Policy to reflect legal, operational or technology changes. Material updates will be communicated through the website, app or registered contact details.

18. Contact and complaints

Privacy contact: admin@sowheretoaccess.com

Registered-office details are available upon lawful or reasonable request.

You may also lodge with the Information Regulator of South Africa through its official channels.