Zatami (Pty) Ltd Privacy Policy

1. Introduction

Zatami (Pty) Ltd ("Zatami", "we", "our", or "us") operates Zatami, a South African peer-to-peer vehicle bidding marketplace.

Zatami provides the digital platform that allows vehicle owners to list eligible vehicles and allows registered users to participate in timed bidding events.

We respect the privacy of our users and are committed to handling personal information responsibly and in accordance with the Protection of Personal Information Act, 2013 ("POPIA") and other applicable South African laws.

This Privacy Policy explains what personal information we collect, how we use it, when we may share it, and the measures we take to protect it when you use Zatami.

2. Personal Information We Collect

Depending on how you use Zatami, we may collect the following information.

2.1 Account and Contact Information

When you create an account or use our services, we may collect:

• First and last name;
• Email address;
• Mobile phone number;
• Account and verification status; and
• Other information reasonably required to create and manage your account.

Passwords are handled using appropriate security mechanisms and are not stored by Zatami in plain text.

2.2 Onboarding Information

During registration and onboarding, we may collect information you voluntarily provide about your intended use of Zatami, vehicle interests, buying or selling preferences, and your experience or expectations of the marketplace.

Some onboarding questions may be used to better understand our users and improve the platform.

2.3 Identity and Verification Information

To help maintain a trusted marketplace and reduce fraudulent activity, Zatami may request information reasonably necessary to verify a user's identity or eligibility.

Depending on the circumstances, this may include:

• Identification information;
• Identity documents;
• Proof of address;
• Selfie or other verification information;
• Business information where applicable; and
• Other information reasonably required for verification or platform security.

Where third-party verification services are used, relevant information may be shared with those service providers for the purpose of performing the required verification.

2.4 Vehicle and Listing Information

When a seller creates a vehicle listing, we may collect information such as:

• Vehicle make and model;
• Year;
• Mileage;
• Vehicle Identification Number (VIN), where required;
• Registration-related information;
• Vehicle description;
• Service and maintenance information;
• Information about known damage, defects, modifications, or other relevant vehicle characteristics;
• Photographs;
• Videos;
• Ownership or vehicle documentation; and
• Other information submitted by the seller as part of the listing process.

2.5 Bidding and Deposit Information

When you participate in a bidding event, we may collect and retain information such as:

• Bids submitted;
• Bid amounts;
• Bidding history;
• Date and time of bids;
• Bidding event participation;
• Winning and unsuccessful bids;
• R500 bidding deposit records;
• Deposit verification information;
• EFT payment references or proof of payment where applicable; and
• Related transaction or administrative records.

This information is used to operate bidding events, verify eligibility to bid, maintain accurate bidding records, and protect the integrity of the marketplace.

2.6 Communications

We may collect information contained in communications you have with Zatami, including:

• Customer support enquiries;
• Verification enquiries;
• Feedback;
• Reports of suspicious activity;
• Dispute-related communications; and
• Other communications sent to us.

2.7 Technical and Security Information

When you use Zatami, we may automatically collect certain technical information, including:

• IP address;
• Browser and device information;
• Operating system;
• Login and session information;
• Date and time of access;
• Platform activity;
• Security and authentication logs; and
• Other information reasonably necessary to operate and secure the platform.

3. How We Use Personal Information

We use personal information for purposes reasonably necessary to operate and protect Zatami, including to:

• Create and manage user accounts;
• Verify users and maintain marketplace trust;
• Enable users to list vehicles;
• Review and administer vehicle listings;
• Operate timed bidding events;
• Verify R500 bidding deposits;
• Maintain accurate bidding and platform records;
• Facilitate communication between buyers and sellers following a successful bidding event;
• Prevent and investigate fraud, manipulation, abuse, and other misuse of the platform;
• Protect the security and integrity of Zatami;
• Provide customer support;
• Send account, bidding, security, and service-related communications;
• Improve the functionality and user experience of the platform;
• Understand how users interact with the platform and improve our services;
• Comply with applicable legal obligations; and
• Enforce our Terms & Conditions and other applicable Zatami policies.

We aim to collect and use personal information only to the extent reasonably necessary for these purposes.

4. Sharing Information Between Buyers and Sellers

Zatami is designed so that users' personal contact details are not publicly displayed on vehicle listings or active bidding events.

During an active bidding event, users may be represented through their platform account or other non-public identifiers rather than having their personal contact information displayed to other bidders.

Where a bidding event successfully concludes, Zatami may share the relevant contact details of the winning buyer and seller with one another so that they can communicate directly regarding the vehicle, including arrangements for inspection, payment, collection, and transfer.

This exchange of contact information is intended to facilitate the transaction between the relevant buyer and seller.

Zatami's facilitation of this contact does not mean that Zatami guarantees the vehicle, the accuracy of information supplied by either party, the conduct of either party, or the successful completion of the underlying transaction.

5. Who We May Share Personal Information With

We do not sell or rent your personal information.

We may share personal information where reasonably necessary for the operation, security, and administration of Zatami, including with:

• The buyer or seller involved in a successfully completed bidding event, where contact details need to be exchanged;
• Identity verification providers;
• Payment or payment-verification service providers, where applicable;
• Cloud hosting, database, communications, and other technology service providers;
• Professional advisers who require the information to provide services to Zatami;
• Government, regulatory, law enforcement, or other authorised bodies where disclosure is required or permitted by law; and
• Other parties where you have authorised or lawfully permitted us to share the information.

We take reasonable steps to ensure that third parties processing personal information on our behalf are subject to appropriate confidentiality and security obligations.

6. Payment and Banking Information

For the current Zatami MVP, certain deposits may be verified using electronic funds transfer (EFT) information or other payment-related records.

Where third-party payment services are used, the relevant payment provider may process payment information in accordance with its own privacy and security practices.

Zatami does not intend to store complete payment card details on its own platform.

We may retain payment confirmations, references, deposit records, and other information reasonably necessary to verify and administer transactions and bidding participation.

The specific rules governing refunds, cancellations, and the treatment of the R500 bidding deposit are dealt with separately in our Refund & Cancellation Policy.

7. Cookies and Similar Technologies

Zatami may use cookies and similar technologies to help:

• Keep users signed into their accounts;
• Maintain essential platform functionality;
• Remember certain preferences;
• Improve platform performance;
• Understand how the platform is used; and
• Support security and fraud-prevention measures.

You can manage certain cookie settings through your web browser. Disabling some cookies may affect the functionality of certain parts of the platform.

8. How We Protect Personal Information

Zatami takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Depending on the information and system involved, these measures may include:

• Access controls;
• Database security controls;
• Server-side validation of sensitive platform operations;
• Authentication and account-security measures;
• Restricted access to sensitive information;
• Security and administrative logs; and
• Appropriate safeguards for information stored or processed by service providers.

No online platform can guarantee that information transmitted or stored electronically will be completely secure. However, we take reasonable steps to protect the information entrusted to us and to respond appropriately if a security incident occurs.

9. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• Provide and administer Zatami's services;
• Maintain account, bidding, and transaction records;
• Resolve disputes or enquiries;
• Investigate fraud or misuse;
• Protect the security and integrity of the platform;
• Comply with legal, regulatory, tax, accounting, or other record-keeping requirements; and
• Enforce our agreements and policies.

When personal information is no longer reasonably required and there is no legal reason to retain it, we will take reasonable steps to securely delete, destroy, or anonymise it.

10. Your Rights

Subject to POPIA and other applicable laws, you may have the right to:

• Request access to personal information that Zatami holds about you;
• Request correction or updating of inaccurate, incomplete, or outdated information;
• Request deletion or destruction of personal information where legally permissible;
• Object to certain forms of processing;
• Withdraw consent where processing is based on consent, subject to any legal or contractual limitations; and
• Lodge a complaint with the Information Regulator of South Africa.

To exercise your rights or ask questions about how your information is handled, contact our Information Officer using the details in Section 13.

11. Information About Children

Zatami is intended for individuals who are at least 18 years old and legally capable of entering into binding agreements.

We do not knowingly seek to collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Zatami, our services, our information practices, or applicable legal requirements.

When material changes are made, we will publish the updated policy on the platform and update the "Last updated" date. Where appropriate, we may also notify affected users through reasonable means.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us.

Zatami (Pty) Ltd

Information Officer: Michael Sibeko

Email: support@zatami.co.za

Website: zatami.co.za

If you believe that your personal information has been handled in a manner that does not comply with POPIA, you may also contact the Information Regulator of South Africa.

Information Regulator (South Africa)

Email: enquiries@inforegulator.org.za / POPIAComplaints@inforegulator.org.za

Website: inforegulator.org.za