Privacy policy (POPIA)

Last updated: 30 September 2026

Chaza (“we”, “us”) is a trading name of Exquitique, Heidelberg, Gauteng, 1441. Email support@exquitique.co.za, phone +27 78 271 1670, website https://www.chaza.online.

We respect your privacy and process personal information in line with the Protection of Personal Information Act, 2013 (POPIA).

What we collect

• Account details: your name, email address, password (stored only in scrambled form) and, if you give it, your cellphone number.
• Purchase details: the phone or meter numbers you buy for, amounts, references, tokens and receipts.
• Payment details: Yoco tells us whether a payment succeeded and its reference. We never receive or store your card number.
• Technical details: basic security logs (such as IP address and sign-in times) to protect your account.

Why we use it

• To deliver what you buy, send receipts and tokens, and give support.
• To prevent fraud and keep accounts safe.
• To keep financial records as the law requires.
• To send SMS updates about your purchases — only if you switched this on. We do not send marketing unless you agree to it.

Who we share it with

Only with those who help us deliver the service: Yoco (payments), our airtime/data/electricity provider and the relevant network or municipality (only the number or meter and amount needed), our hosting provider (Render, servers in the European Union), and email/SMS providers. We never sell your information.

How we protect it

Phone numbers, meter numbers, emails and tokens are encrypted when stored; connections use HTTPS; staff access is limited, logged and protected with two-step sign-in.

How long we keep it

Account details are kept while your account is open. Records of purchases and payments are kept for as long as tax and financial laws require (usually 5–7 years), after which they are deleted or anonymised.

Your rights

You may ask to see, correct or delete your personal information, object to its use, or withdraw consent. In the app, go to Account to download your data or delete your account, or contact us. You may also complain to the Information Regulator (South Africa): inforegulator.org.za.

Cookies

We only use cookies needed to keep you signed in and secure. We do not use advertising or tracking cookies.