Legal
Privacy notice
This notice explains what personal information the LekkaPay website collects (very little), why we collect it, how long we keep it, and the rights POPIA gives you. It covers this website only - information gathered when merchants apply for and use our services is collected in our back office under its own notices.
This document is a working draft prepared for launch and is subject to final legal review.
Who we are
African Payment Solutions (Pty) Ltd, the company that operates LekkaPay, is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA) for personal information collected through this website, lekkapay.com. Our information officer can be contacted at «to be inserted: information officer name and contact details».
This notice covers this website only. If your business applies for or uses LekkaPay's payment services, the information gathered during onboarding and operation is collected in our back office under its own privacy notices, provided to you there.
What we collect on this site
This site collects only what you choose to submit through its forms: typically your name, email address, company name and the message you write to us.
We also keep minimal technical logs - the kind every web server produces - and, where enabled, privacy-respecting analytics that measure aggregate page usage without building a profile of any individual visitor.
Why we collect it
We use form submissions to respond to your enquiry - that is the whole purpose. Our lawful basis is our legitimate interest in answering the people who contact us, together with the consent you give by choosing to send the form. Technical logs are used to keep the site secure, available and performing properly.
What we do not do
- We do not sell personal information - to anyone, for any purpose.
- We do not build advertising profiles or share your details with advertising networks.
- We do not send you marketing because you asked a question. You will only receive marketing from us if you have expressly consented to it, and you can withdraw that consent at any time.
How long we keep it
Form submissions are kept only as long as needed to handle your enquiry and any follow-up that flows naturally from it, after which they are deleted. Technical logs are retained briefly for security and operational purposes and then discarded.
Your rights under POPIA
POPIA gives you the right to:
- ask whether we hold personal information about you, and request access to it;
- request correction of information that is inaccurate or out of date;
- request deletion of information we no longer have grounds to keep;
- object to processing, including any direct marketing;
- lodge a complaint with the Information Regulator (South Africa) if you believe your information has been mishandled.
Security of processing
Connections to this website are encrypted in transit. We store the minimum information necessary, and access to it is restricted to the people who need it to answer you. LekkaPay is operated by a PCI DSS Level 1 compliant service provider, and the discipline that standard demands of our payment systems shapes how we treat website data too.
Where your information is processed
Our infrastructure is hosted with cloud providers whose services may process data outside South Africa. Where personal information crosses a border, it does so under the safeguards POPIA requires - recipients bound by law, binding corporate rules or agreements that uphold protection comparable to POPIA's conditions for lawful processing.
How to exercise your rights
To exercise any of these rights, reach us through our contact page or contact our information officer at «to be inserted: information officer contact details». We will respond within a reasonable time and, where the law sets a deadline, within that deadline.
Last updated: