Legal

Privacy Policy

Last Updated: August 2026

1Introduction

Plate2Peer ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform, website, mobile applications, and associated services (collectively, the "Service").

We comply with the Protection of Personal Information Act (POPIA), 2013, and all applicable South African privacy and data protection laws. Please read this Privacy Policy carefully. If you do not agree with our practices, please do not use the Service.

2Information We Collect

2.1Information You Provide Directly

When you register, use, or interact with the Service, we may collect:

  • Full name, email address, and phone number;
  • University/institution name and student verification details;
  • Home address and delivery address(es);
  • Payment information (processed securely by YOCO);
  • Account password and security questions;
  • Profile information and preferences;
  • Product listings, descriptions, and images (for sellers);
  • Customer reviews and ratings;
  • Communication history (support tickets, messages).

2.2Information Collected Automatically

We automatically collect certain information about your device and usage:

  • IP address and device identifier;
  • Browser type and operating system;
  • Pages visited, links clicked, and time spent on the Platform;
  • Transaction history and order details;
  • Cookies and similar tracking technologies;
  • Location data (if you grant permission);
  • Referral source and marketing attribution.

2.3Information from Third Parties

We may receive information from:

  • Payment processors (YOCO) regarding transactions;
  • University/institution registrar systems (for student verification);
  • Third-party analytics providers;
  • Marketing and advertising partners;
  • Other users (e.g., reviews, complaints, or reports).

3How We Use Your Information

We use your personal information for the following purposes:

  • Account creation, registration, and authentication;
  • Processing and fulfilling transactions;
  • Dispute resolution and customer support;
  • Payment processing and fraud detection;
  • Sending transactional emails and notifications;
  • Verifying student status and eligibility;
  • Analytics, research, and platform improvement;
  • Marketing and promotional communications (with your consent);
  • Legal compliance and law enforcement cooperation;
  • Risk assessment and platform security;
  • Enforcing these Terms and our legal rights.

We will not use your information for purposes outside the scope above without your express consent.

4How We Share Your Information

4.1With Other Users

To facilitate transactions, the Platform shares:

  • Seller's name, contact details, and delivery address with buyers (for delivery purposes);
  • Buyer's name and payment confirmation details with sellers (for order fulfillment);
  • Ratings, reviews, and user feedback (publicly displayed on profiles).

4.2With Third-Party Service Providers

We share your information with trusted service providers who assist us in operating the Platform:

  • YOCO (payment processing and escrow management);
  • Cloud hosting providers (Supabase);
  • Email and communication platforms;
  • Analytics providers;
  • Student verification services.

These providers are contractually obligated to maintain confidentiality and use your data only for the purposes specified.

4.3For Legal Reasons

We may disclose your information if required by law or if we believe in good faith that disclosure is necessary to:

  • Comply with legal obligations or court orders;
  • Enforce our Terms and other agreements;
  • Protect the rights, privacy, safety, or property of Plate2Peer, users, or the public;
  • Detect, prevent, or address fraud or security issues.

4.4Business Transfers

If Plate2Peer is acquired, merged, or undergoes asset sale, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

5Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

  • Account information is retained while your account is active.
  • Transaction records are retained for a minimum of 3 years for accounting and dispute resolution purposes, as required by South African law.
  • Marketing information is retained until you unsubscribe.
  • Support communications are retained for 2 years.

You may request deletion of your data, subject to legal and contractual obligations.

6Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption in transit (SSL/TLS);
  • Encrypted storage in secure databases;
  • Access controls and authentication;
  • Regular security audits and updates;
  • Firewalls and intrusion detection systems;
  • Employee confidentiality agreements.

However, no system is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You assume the risk of unauthorized access.

7Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to:

  • Maintain your session and remember login information;
  • Understand usage patterns and improve the Service;
  • Deliver targeted advertising and marketing;
  • Detect and prevent fraud.

You can disable cookies through your browser settings, though this may affect functionality. We do not currently respond to "Do Not Track" signals.

8Your Rights Under POPIA

Under the Protection of Personal Information Act (POPIA), you have the following rights:

  • Right of Access: You may request a copy of your personal information.
  • Right to Correct: You may request correction of inaccurate information.
  • Right to Deletion: You may request deletion of your information, subject to legal obligations.
  • Right to Object: You may object to processing for specific purposes (e.g., marketing).
  • Right to Data Portability: You may request your data in a structured, portable format.
  • Right to Lodge Complaints: You may lodge a complaint with the Information Regulator if you believe your rights have been violated.

To exercise these rights, contact us at admin@plate2peer.com with sufficient detail to identify your request.

9Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected information from a minor, we will delete it promptly. Parents or guardians who believe their child's information has been collected should contact us immediately.

10Third-Party Links and Services

The Service may contain links to third-party websites and services. We are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any third-party services before providing your information.

11Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: admin@plate2peer.com

We will respond to all privacy inquiries within 15 business days.

12Amendments to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on the Service. Your continued use of the Service following any updates constitutes your acceptance of the revised Privacy Policy.