POPIA Notice

This notice explains the main data protection commitments Lethela applies under the Protection of Personal Information Act (POPIA).

Last updated: 18 June 2026. Use this page as the platform-facing POPIA summary for customers, vendors and riders.

How we process information

We process personal information for specific platform purposes, including account management, orders, delivery, vendor approval, rider onboarding, support, safety and payment reconciliation.
We collect only information reasonably needed to run accounts, orders, onboarding, support, fraud prevention and platform operations.
We aim to keep information accurate, relevant and secure.
We limit access to personal information to authorised staff, providers and operating partners who need it.
We take reasonable steps to investigate and respond to privacy incidents and security compromises.
We keep records only for as long as lawful and operationally necessary.

Accountability: we assign privacy responsibility and keep practical records of platform data use.
Processing limitation and purpose specification: we avoid collecting unnecessary data and explain why information is needed.
Further processing limitation: we do not reuse personal information for unrelated purposes without a lawful reason.
Information quality and openness: we aim to keep account, vendor, rider and order records accurate and understandable.
Security safeguards and data subject participation: we protect records and give users a way to ask for access, correction or deletion where the law allows.

You may request access to personal information held about you.
You may ask for incorrect information to be corrected.
You may object to certain processing where POPIA allows it.
You may request deletion where retention is no longer justified or where the law permits it.
You may complain to the Information Regulator if you believe your information was processed unlawfully.

Information Officer / privacy contact: Lethela Support Team