Privacy Policy

Last updated: 29 August 2026

1. Introduction

MyRIZO respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you use the MyRIZO client application, our website and related services.

MyRIZO is a digital marketplace that enables clients to discover, compare, contact and engage independent professionals and service businesses.

For purposes of this Privacy Policy:

Legal entity: Helping Everyone Rise Pty Ltd
Registration number: 2024/491226/07

Trading name: RIZO / MyRIZO
Registered/physical address: Baillie Park, Potchefstroom, 2526
Email: geraldine@helpingrise.co.za
Telephone: 083 798 1785
Website: www.myrizo.app

In this Privacy Policy, “MyRIZO”, “RIZO”, “we”, “our” and “us” refer to the legal entity identified above.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African law.

This Privacy Policy should be read together with the MyRIZO Terms and Conditions.

2. Who This Privacy Policy Applies To

This Privacy Policy applies primarily to individuals who:

·       create a MyRIZO client account;

·       browse Providers through MyRIZO;

·       submit Service Requests;

·       book or engage Providers;

·       communicate with Providers through MyRIZO;

·       rate or review Providers;

·       communicate with RIZO customer support;

·       use the MyRIZO website or application; or

·       otherwise interact with MyRIZO.

The RIZO Provider application may be governed by an additional or separate Provider Privacy Policy where appropriate.

3. Our Role Under POPIA

For personal information that RIZO determines the purpose and means of processing, RIZO acts as the Responsible Party as contemplated in POPIA.

We may also use third-party service providers to process information on our behalf.

Where those service providers process personal information on our instructions, they act as operators or service providers and are required to handle the information in accordance with applicable law and appropriate contractual and security requirements.

Providers using the RIZO marketplace may also process personal information that you provide to them for purposes of delivering their Services.

Depending on the circumstances, a Provider may have independent legal responsibilities regarding the personal information it receives and processes.

4. Personal Information We May Collect

The information we collect depends on how you use MyRIZO and which features you use.

We aim to collect only information that is reasonably necessary for legitimate Platform purposes.

4.1 Account and identification information

When you create or manage a MyRIZO account, we may collect:

·       first name;

·       surname;

·       username or profile name;

·       mobile telephone number;

·       email address;

·       password or authentication credentials in protected form;

·       profile photograph, if provided;

·       account identifier;

·       account creation date; and

·       account status.

We may use mobile number or email verification mechanisms to help confirm access to an account.

5. Location and Service Address Information

Location is an important component of MyRIZO because the Platform is designed to connect Clients with Providers operating in relevant geographic areas.

Depending on the permissions you give us and the functionality you use, we may process:

·       approximate location;

·       precise device location;

·       suburb;

·       town or city;

·       province;

·       postal code;

·       addresses entered by you;

·       location of a requested Service; and

·       location information associated with a Service Request.

Where the app requests access to your device location, you may generally manage this permission through your device settings.

Disabling location permissions may limit location-dependent MyRIZO features.

You may also be able to manually enter a Service address or location instead of relying on device location, depending on the functionality available.

6. Service Request and Booking Information

When you search for or request a Service, we may collect information such as:

·       the type of Service requested;

·       Service category;

·       description of the work required;

·       preferred date or time;

·       Service location;

·       Provider selected;

·       status of the Service Request;

·       Booking information;

·       cancellations;

·       Service completion information;

·       information about previous Service Requests; and

·       other information you choose to include with your request.

If the Platform allows you to upload photographs, documents or other attachments relating to a Service Request, those files may also be processed.

For example, a Client requesting a repair may choose to upload a photograph showing the item or area requiring attention.

You should avoid including unnecessary personal, confidential or sensitive information in photographs, descriptions or attachments.

7. Communication Information

If MyRIZO enables communications between Clients and Providers, we may process information associated with those communications.

This may include:

·       messages sent through the Platform;

·       date and time of communications;

·       participants in a conversation;

·       attachments;

·       communication status;

·       reports of inappropriate messages; and

·       technical records associated with the communication.

Communications may be retained where reasonably necessary for:

·       facilitating the Service;

·       maintaining a record of agreements between Clients and Providers;

·       customer support;

·       resolving complaints;

·       safety;

·       fraud prevention;

·       enforcing our Terms and Conditions;

·       investigating alleged misconduct; or

·       complying with legal obligations.

You should not use MyRIZO messaging to transmit unnecessary sensitive information such as banking passwords, PINs, card security codes or one-time passwords.

8. Ratings and Reviews

If you rate or review a Provider, we may collect and process:

·       your rating;

·       your written review;

·       the Provider reviewed;

·       the Service associated with the review;

·       the date of the review;

·       information submitted in response to the review; and

·       information used to investigate potentially fraudulent or inappropriate reviews.

Your rating or review may be visible to Providers and other MyRIZO users.

Depending on the way the Platform displays reviews, your profile name, first name, profile photograph or other limited account information may appear with your review.

You should not include another person’s private or sensitive personal information in a review.

9. Customer Support and Complaint Information

If you contact RIZO for assistance or submit a complaint, we may collect:

·       your contact details;

·       account information;

·       the nature of your query or complaint;

·       communications with our support team;

·       relevant Service Request information;

·       information concerning a Provider or HandyMan;

·       photographs, documents or evidence you choose to submit; and

·       information generated through our investigation or response.

This information may be used to investigate issues, protect Users, enforce Platform rules and resolve complaints.

10. Device, Technical and Usage Information

When you access the MyRIZO website or use the MyRIZO application, technical information may be generated or collected automatically by MyRIZO and the technology services used to operate the Platform.

Depending on the device, operating system and features used, this information may include:

·       IP address;

·       device type;

·       operating system;

·       browser type;

·       application version;

·       device or application identifiers;

·       app-instance identifiers;

·       language and regional settings;

·       dates and times of access;

·       login and authentication activity;

·       pages, screens or features viewed;

·       search and interaction activity;

·       session information;

·       approximate geographic location;

·       location information where permission has been granted;

·       error, diagnostic or security information; and

·       other technical information necessary to operate, secure and improve MyRIZO.

MyRIZO uses third-party technology services as described below to provide parts of this functionality.

11. App Permissions

MyRIZO may request permission to access certain functions on your mobile device where those functions are necessary for a feature you choose to use.

Depending on the available features, permissions may include:

Location

To identify Providers and Services relevant to your location or to assist with specifying a Service location.

Camera or photographs

To allow you to upload photographs relating to a Service Request, profile or complaint.

Notifications

To send Service Request updates, Booking information, messages, security alerts and other relevant notifications.

Permissions can generally be managed through your mobile device settings.

Declining a permission may prevent the related feature from functioning, but we will not intentionally require access to unrelated device functionality merely as a condition of using MyRIZO.

12. Information We Receive From Other People

Most personal information is collected directly from you.

However, we may also receive information about you from other legitimate sources, including:

·       Providers;

·       Handymen;

·       other MyRIZO Users;

·       customer-support interactions;

·       fraud or safety reports;

·       service providers acting on our behalf;

·       authentication services;

·       publicly available sources where permitted by law; and

·       law-enforcement or regulatory authorities where appropriate.

For example, a Provider may submit information about a dispute, cancellation, safety incident or Service Request involving you.

Where required by law, we will take reasonable steps to ensure that you are appropriately informed about personal information collected from another source.

13. Information We Do Not Require for Service Payments

MyRIZO does not process payments for Services performed by Providers.

Clients pay Providers directly according to the payment arrangements agreed between them, including cash on delivery/completion or another mutually agreed payment method.

Accordingly, MyRIZO does not require your payment-card information or online banking credentials for payment of Provider Services.

You should never provide through MyRIZO:

·       your banking password;

·       card PIN;

·       one-time banking password or OTP;

·       card security code unless an authorised future payment feature expressly requires it; or

·       other secret authentication credentials.

If you voluntarily disclose payment information to a Provider through Platform communications, that information may form part of the communication record. You should therefore disclose only the information reasonably necessary to arrange payment.

If RIZO introduces an in-app payment service in future, this Privacy Policy and the applicable Terms will be updated before that functionality is implemented where required by law.

14. Why We Process Your Personal Information

We process personal information only where there is a lawful basis and legitimate purpose for doing so.

Depending on the circumstances, we may process information to:

14.1 Create and administer your account

This includes:

·       registration;

·       authentication;

·       account recovery;

·       account security;

·       profile management; and

·       communicating important account information.

14.2 Provide the MyRIZO Platform

This includes enabling you to:

·       find Providers;

·       search for Services;

·       submit Service Requests;

·       make Bookings;

·       communicate with Providers;

·       receive Service updates;

·       manage previous requests; and

·       rate and review Providers.

14.3 Enable location-based discovery

We may use location information to identify Providers who operate in or near the area in which you require a Service.

14.4 Facilitate Client–Provider interactions

Relevant Client information may be made available to a Provider so that the Provider can assess, accept and perform a Service Request.

14.5 Provide support and resolve complaints

We use information to respond to queries, investigate complaints and help resolve issues involving the Platform.

14.6 Protect Users and the Platform

We may process information to:

·       detect fraud;

·       investigate suspicious activity;

·       prevent misuse;

·       protect accounts;

·       investigate safety incidents;

·       enforce Platform rules;

·       defend legal claims; and

·       protect RIZO, Clients, Providers and other persons.

14.7 Improve MyRIZO

We may analyse Platform usage to:

·       identify technical problems;

·       improve usability;

·       understand which features are useful;

·       improve Provider discovery;

·       improve Service categories;

·       develop new features; and

·       assess Platform performance.

Where reasonably possible, aggregated or de-identified information may be used for analytics and research purposes.

14.8 Comply with legal obligations

We may process or retain information where required to comply with applicable law, a lawful regulatory requirement, court order or other legally binding obligation.

15. Lawful Grounds for Processing

Depending on the activity and applicable law, our processing may be justified because:

·       you have consented to the processing;

·       processing is necessary to perform an agreement with you or take steps requested by you before entering into an agreement;

·       processing complies with an obligation imposed by law;

·       processing protects your legitimate interests;

·       processing protects the legitimate interests of another person; or

·       processing is necessary for the legitimate interests pursued by RIZO or a third party, provided that those interests do not unjustifiably prejudice your rights.

Where processing depends on your consent, you may withdraw that consent, subject to applicable law.

Withdrawal of consent does not automatically invalidate processing that was lawful before consent was withdrawn.

Certain information is necessary for us to provide core MyRIZO functionality. If you do not provide that information, we may be unable to create your account or provide the requested functionality.

16. Who We May Share Your Information With

We do not disclose personal information indiscriminately.

We may share information where reasonably necessary with the following categories of recipients.

16.1 Providers

When you submit a Service Request or engage a Provider, we may share information necessary for the Provider to consider and fulfil the request.

Depending on the Service, this may include:

·       your name or profile name;

·       Service category;

·       Service description;

·       Service location;

·       preferred timing;

·       relevant photographs or attachments;

·       contact information where required;

·       communications relating to the Service; and

·       other information reasonably necessary to provide the Service.

A Provider should use information received through MyRIZO only for legitimate purposes relating to the Service and applicable legal obligations.

17. HandyMan Information Sharing

Where a Provider uses the RIZO HandyMan functionality to assign a Service to a HandyMan or field worker, information reasonably necessary to carry out the Service may be made available to that person.

This may include information such as:

·       Service location;

·       nature of the requested Service;

·       Client name;

·       contact information where necessary;

·       scheduled time; and

·       instructions relevant to the Service.

Providers are responsible for ensuring that persons to whom they assign Client information handle it appropriately and lawfully.

18. Technology Providers and Service Partners

MyRIZO relies on third-party technology providers to host, operate, authenticate, analyse and provide features of the Platform.

These providers may process certain personal information on our behalf or, in limited circumstances, in accordance with their own legal obligations and privacy policies.

Our principal technology providers currently include the following.

18.1 Hostinger

The primary MyRIZO website and associated web infrastructure are hosted using Hostinger services.

Information processed or stored through our Hostinger-hosted infrastructure may include, depending on our technical configuration:

·       account information;

·       Service Request information;

·       communications or content stored by MyRIZO;

·       IP addresses;

·       website access information;

·       server logs;

·       database records; and

·       other information required to operate the MyRIZO website and supporting systems.

Hostinger provides the hosting infrastructure, while RIZO remains responsible for determining how personal information collected through MyRIZO is used.

Hostinger may use subprocessors and infrastructure located in different jurisdictions when providing hosting services.

18.2 Google Firebase Authentication

MyRIZO uses Google Firebase Authentication to provide account authentication and related security functionality.

Depending on the authentication method used, Firebase Authentication may process information including:

·       mobile telephone numbers;

·       email addresses;

·       authentication credentials;

·       IP addresses;

·       device or browser user-agent information;

·       authentication identifiers; and

·       information necessary to prevent abuse and unauthorised account access.

Google may process this information on RIZO’s behalf for authentication, account management, security and abuse-prevention purposes.

18.3 OTP Authentication

MyRIZO uses Firebase-supported authentication services to send or verify one-time passwords (“OTPs”) where OTP verification is required.

For example, where mobile-number authentication is used, your mobile number may be transmitted to Google or relevant telecommunications infrastructure for the purpose of:

·       sending an OTP;

·       confirming control of the mobile number;

·       authenticating your account;

·       preventing fraudulent registrations; and

·       protecting account security.

You should never disclose an OTP sent to you to another person.

RIZO employees, Providers and Handymen should never require you to provide an authentication OTP issued for access to your MyRIZO account.

18.4 Google Maps Platform

MyRIZO uses Google Maps Platform to provide mapping, location and geographic functionality.

Google Maps functionality may be used to:

·       display maps;

·       identify your approximate or selected location;

·       identify the location at which a Service is required;

·       assist you in entering or confirming an address;

·       identify Providers operating near a requested Service location; and

·       support geographic search and Service discovery.

Where Google Maps functionality is used, information transmitted to Google may include:

·       IP address;

·       device or application information;

·       map requests;

·       coordinates or location queries;

·       addresses or geographic search information; and

·       technical identifiers associated with the MyRIZO application.

Precise device location will only be requested where required for a MyRIZO feature and subject to the permissions available through your device.

You may manage location permissions through your device settings.

Disabling location access may reduce the functionality of location-based MyRIZO features.

18.5 Google Analytics and Firebase Analytics

MyRIZO uses Google Analytics, including analytics functionality associated with Firebase, to understand how Users interact with the application and website.

Analytics information may include:

·       application-instance identifiers;

·       number of Users;

·       sessions;

·       pages or screens viewed;

·       features used;

·       events occurring within the application;

·       approximate geographic information;

·       device information;

·       operating-system information;

·       browser information; and

·       application performance and usage information.

We use analytics information for purposes including:

·       understanding Platform usage;

·       identifying technical problems;

·       assessing which features are useful;

·       improving MyRIZO;

·       measuring application performance;

·       developing new features; and

·       improving the Client experience.

We do not use Google Analytics merely to determine whether an individual Provider is skilled or trustworthy.

Where reasonably practicable, analytics are reviewed at aggregated or statistical level.

MyRIZO does not currently use Google Analytics information for personalised advertising unless such functionality is introduced in future and appropriately disclosed.

18.6 Google App and Developer Services

The Android version of MyRIZO uses Google technology and may be distributed through Google Play.

Google may process certain information independently when providing Google Play, Android, device, security or other Google platform services.

Information processed directly by Google in connection with a User’s Google account, Google Play account, Android device or other independent Google service is governed by Google’s applicable terms and privacy policies.

This is separate from information that Google processes on behalf of RIZO through services such as Firebase.

18.7 Apple Developer and App Store Services

The iOS version of MyRIZO uses Apple developer and platform services and may be distributed through the Apple App Store.

Apple may independently process certain information when providing:

·       App Store distribution;

·       Apple ID functionality;

·       device and operating-system services;

·       application installation and updates;

·       fraud and security controls; and

·       other Apple platform functionality.

This may include technical identifiers, device information, IP addresses and information connected with a User’s Apple services.

Information that Apple independently collects through the App Store, Apple ID, iOS or other Apple services is processed in accordance with Apple’s applicable privacy policies and terms.

RIZO does not control information independently collected by Apple as part of Apple’s own relationship with an Apple user.

19. How We Manage Technology Providers

Where a third-party technology provider processes personal information on behalf of RIZO, we take reasonable steps to ensure that appropriate contractual, organisational and technical safeguards apply.

We require service providers, where applicable, to process personal information:

·       for authorised purposes;

·       according to applicable contractual requirements;

·       using appropriate security safeguards;

·       consistently with applicable data-protection law; and

·       only for as long as reasonably necessary for the relevant service or lawful purpose.

The use of a third-party technology provider does not remove RIZO’s responsibility for personal information for which RIZO is the Responsible Party under POPIA.

19. Legal and Regulatory Disclosures

We may disclose information where reasonably necessary or legally required to:

·       comply with applicable law;

·       respond to a valid court order;

·       comply with a lawful regulatory request;

·       cooperate with the South African Police Service or another competent authority;

·       investigate suspected criminal conduct;

·       protect a person from serious harm;

·       establish, exercise or defend legal rights; or

·       protect the security and integrity of MyRIZO.

We will not voluntarily disclose personal information to authorities merely because information is requested where we are not legally permitted or appropriately justified in doing so.

20. Corporate Transactions

If RIZO or the business operating MyRIZO is involved in a lawful merger, acquisition, restructuring, investment, financing, sale of assets or similar corporate transaction, personal information may be disclosed to relevant professional advisers, potential counterparties or successor organisations where reasonably necessary.

Any processing remains subject to POPIA and applicable law.

Where required, affected Users will be informed of a material change in the Responsible Party or manner in which their information will be processed.

21. We Do Not Sell Personal Information

RIZO does not sell your personal information to third parties for their independent direct-marketing purposes.

We also do not permit third parties to purchase access to your private Service Requests, precise Service location or private communications for unrelated advertising purposes.

Any future change to this practice would require an appropriate update to this Privacy Policy and compliance with applicable law.

22. Marketing Communications

We may send promotional or marketing communications only where permitted by applicable law.

Where consent is required for electronic direct marketing, we will request that consent in the manner required by law.

You may withdraw your consent or opt out of marketing communications.

Marketing communications will provide an appropriate means to unsubscribe or request that the communications stop.

Opting out of marketing does not prevent us from sending communications necessary to operate your account or provide Services you have requested, such as:

·       account security notices;

·       Service Request notifications;

·       Provider messages;

·       Booking updates;

·       changes to important legal terms; or

·       safety information.

We will not sell your contact information to unrelated businesses for their own direct marketing.

23. Personalised Search and Provider Ranking

MyRIZO may organise or rank Provider results to make Service discovery more useful.

Factors may include:

·       Service category;

·       location;

·       Provider availability;

·       relevance to the search;

·       Provider activity;

·       ratings or reviews;

·       previous Platform activity; and

·       other legitimate Platform criteria.

Such ranking is designed to support discovery and does not constitute a determination or guarantee by RIZO that a Provider is skilled, trustworthy or appropriate for a particular Client.

The Client remains responsible for selecting the Provider they wish to engage.

Where we implement automated processing that produces a legal effect or substantially affects a User, we will apply the protections required by applicable law.

24. Analytics and Similar Technologies

The MyRIZO website and mobile applications may use cookies, software development kits (“SDKs”), application identifiers and similar technologies.

These technologies may be provided by RIZO or by approved technology providers, including Google.

They may be used for:

·       authentication;

·       fraud prevention;

·       security;

·       maintaining login sessions;

·       remembering preferences;

·       analytics;

·       measuring Platform usage;

·       application performance;

·       identifying software errors;

·       mapping and location functionality; and

·       improving the Platform.

The mobile application may use an application-instance identifier or similar identifier generated by analytics technology to distinguish application installations and measure usage.

Where required by law or platform rules, MyRIZO will provide appropriate notices, permissions or consent mechanisms.

Users may also have privacy and analytics controls available through:

·       their mobile-device settings;

·       Android settings;

·       iOS settings;

·       browser settings; or

·       settings provided within MyRIZO.

25. How Long We Keep Personal Information

We do not intend to retain identifiable personal information indefinitely.

We retain information only for as long as reasonably necessary for the purpose for which it was collected or subsequently lawfully processed, unless a longer period is required or permitted by law.

Factors we may consider when determining retention periods include:

·       whether your account remains active;

·       the nature of the information;

·       why the information was collected;

·       ongoing Service Requests;

·       disputes or complaints;

·       fraud prevention;

·       safety incidents;

·       statutory recordkeeping requirements;

·       contractual obligations;

·       limitation periods for legal claims; and

·       whether the information can instead be securely de-identified.

When information is no longer lawfully required, we will take reasonable steps to delete, destroy or de-identify it.

Deleting your MyRIZO account does not necessarily result in immediate deletion of every record where retention remains lawfully necessary.

For example, certain records may need to be retained for fraud prevention, dispute resolution, legal compliance or the establishment, exercise or defence of legal claims.

26. Security of Your Personal Information

We take reasonable and appropriate technical and organisational measures designed to protect personal information under our control against:

·       loss;

·       unauthorised access;

·       unlawful processing;

·       destruction;

·       alteration;

·       disclosure; and

·       misuse.

Depending on the nature of the systems and information involved, safeguards may include:

·       access controls;

·       authentication controls;

·       secure software-development practices;

·       encryption where appropriate;

·       network and infrastructure safeguards;

·       monitoring;

·       backups;

·       vulnerability management;

·       staff confidentiality obligations;

·       access restrictions;

·       incident-response procedures; and

·       requirements imposed on service providers that process information on our behalf.

No online system can be guaranteed to be completely secure.

You also have an important role in protecting your account and should:

·       choose a secure password where applicable;

·       keep authentication credentials confidential;

·       protect access to your device;

·       avoid sharing OTPs;

·       log out of shared devices; and

·       notify us promptly if you suspect unauthorised access to your account.

27. Security Compromises and Data Breaches

If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will investigate and respond in accordance with applicable law.

Where required by POPIA, we will notify the Information Regulator and affected data subjects as soon as reasonably practicable, subject to any lawful restrictions on notification.

Notifications may include information about:

·       the nature of the security compromise;

·       information potentially affected;

·       possible consequences;

·       measures taken by RIZO; and

·       steps affected persons may take to protect themselves.

Our response may also include steps to contain the incident, mitigate harm and improve relevant safeguards.

28. International and Cross-Border Processing

MyRIZO is operated for users in South Africa, but some of the technology used to provide the Platform operates internationally.

Personal information may therefore be stored or processed outside the Republic of South Africa.

Our current technology infrastructure includes services provided by:

·       Hostinger;

·       Google;

·       Firebase;

·       Google Maps Platform;

·       Google Analytics; and

·       Apple.

In particular, certain Firebase services, including Firebase Authentication, may process information outside South Africa.

Other Google, Hostinger and Apple infrastructure may also process information in jurisdictions in which those organisations or their authorised service providers maintain infrastructure.

Where RIZO transfers or permits personal information to be processed outside South Africa, we will take reasonable steps to ensure that the transfer complies with section 72 of POPIA.

Depending on the circumstances, this may include ensuring that:

·       the recipient is subject to a law providing an adequate level of protection;

·       appropriate contractual protections apply;

·       binding corporate rules provide adequate protection;

·       the transfer is necessary for the performance of an agreement;

·       the transfer is otherwise permitted by POPIA; or

·       appropriate consent has been obtained where legally required.

The fact that information is processed outside South Africa does not remove RIZO’s obligations under POPIA in respect of personal information for which RIZO remains the Responsible Party.

29. Special Personal Information

MyRIZO is not designed primarily to collect special personal information such as information concerning:

·       health or sex life;

·       religious or philosophical beliefs;

·       political persuasion;

·       race or ethnic origin;

·       trade union membership;

·       criminal behaviour; or

·       biometric information.

However, information of this nature could sometimes be voluntarily disclosed in a Service Request, communication, attachment, complaint or safety report.

You should avoid providing special personal information unless it is genuinely relevant and necessary.

Where RIZO must process special personal information, we will do so only where permitted by POPIA.

30. Children’s Personal Information

MyRIZO client accounts are intended for persons who are at least 18 years old and have legal capacity to enter into the applicable agreement.

We do not knowingly permit children to independently create MyRIZO Client accounts.

A parent or guardian arranging a Service that concerns a child should avoid providing more information about that child than is reasonably necessary for the Service.

Users must not unnecessarily disclose children’s:

·       identification numbers;

·       school information;

·       photographs;

·       health information;

·       precise routine or movement information; or

·       other sensitive personal information.

Where we discover that children’s personal information has been collected unlawfully or unnecessarily, we may take appropriate steps to restrict or delete it.

31. No Payment-Card Processing by These Services on Behalf of MyRIZO

The use of Google, Apple, Firebase or Hostinger technology does not mean that MyRIZO processes payment for Services requested from Providers.

Payments for Provider Services remain direct transactions between the Client and Provider.

MyRIZO does not currently use:

·       Google Pay;

·       Apple Pay;

·       Firebase payment processing;

·       Hostinger payment processing; or

·       any other in-app payment gateway

to collect payment for Services performed by Providers.

If MyRIZO introduces an in-app payment facility in future, the Privacy Policy and Terms and Conditions will be updated where necessary before such functionality is introduced.

32. Changes to Technology Providers

The technology services used by MyRIZO may change as the Platform develops.

We may replace, add or remove infrastructure, analytics, authentication, mapping, communication or other service providers.

Where a change materially affects the categories of personal information collected, the purposes for which information is processed, where information is transferred or Users’ privacy rights, we will update this Privacy Policy and provide additional notice where required by law.

33. Your Rights Under POPIA

Subject to applicable law and appropriate verification of your identity, you may have the right to:

33.1 Be informed

You have the right to know when and why your personal information is being collected and processed.

33.2 Ask whether we hold your personal information

You may request confirmation of whether RIZO holds personal information about you.

33.3 Request access

You may request access to personal information that we hold about you, subject to applicable legal limitations.

33.4 Request correction

You may ask us to correct information that is inaccurate, incomplete, misleading or out of date.

33.5 Request deletion or destruction

You may request deletion or destruction of information that RIZO is no longer authorised to retain.

This right is subject to lawful retention requirements.

33.6 Object to processing

Where POPIA gives you the right to object to particular processing, you may submit an objection in the prescribed manner.

33.7 Withdraw consent

Where processing is based on consent, you may withdraw that consent.

Withdrawal does not affect processing that was lawfully conducted before withdrawal.

33.8 Object to direct marketing

You may object to processing of your information for direct-marketing purposes and may unsubscribe from electronic marketing communications.

33.9 Complain

You may complain to RIZO about our processing of your information.

You also have the right to submit a complaint to the Information Regulator of South Africa where you believe that your rights under POPIA have been infringed.

34. Exercising Your Privacy Rights

To exercise a privacy right or submit a privacy query, contact:

Information Officer: [FULL NAME / DESIGNATION]
Email: [PRIVACY / INFORMATION OFFICER EMAIL]
Telephone: [NUMBER]
Address: [ADDRESS]

Please state clearly what you are requesting.

We may require reasonable proof of identity before granting access to, correcting or deleting personal information.

This is intended to protect your information against unauthorised disclosure or alteration.

We will respond to valid requests within the periods required by applicable law.

Where a request cannot legally be granted in full, we will explain the applicable basis to the extent required by law.

35. Account Deletion

Where MyRIZO provides an account deletion facility, you may request deletion through the available account settings or by contacting us.

Following a valid deletion request:

·       your account may be deactivated;

·       information that is no longer required may be deleted, destroyed or de-identified;

·       information that must lawfully be retained may be restricted and retained for the applicable purpose; and

·       information forming part of another person’s legitimate record may not necessarily be completely removed where applicable law permits its retention.

For example, a Provider may retain records that the Provider is independently required by law to keep.

Public ratings or reviews associated with a deleted account may be removed, de-identified or retained in a form that does not unnecessarily identify the former User, depending on the circumstances and applicable law.

36. Information Controlled by Providers

When you engage a Provider, that Provider may receive personal information necessary to deliver the Service.

Providers are independent persons or businesses and may have their own legal obligations regarding information they independently collect or retain.

For example, a Provider may independently create:

·       an invoice;

·       receipt;

·       quotation;

·       customer record;

·       Service report; or

·       other business record.

Where information is held independently by a Provider rather than by RIZO, a privacy request concerning that independent record may need to be directed to the Provider.

RIZO remains responsible for personal information for which RIZO is the Responsible Party.

37. Direct Payments and Provider Records

Because payment for Provider Services takes place directly between the Client and Provider, RIZO does not ordinarily receive or control the Provider’s independent payment records.

A Provider may collect information necessary to record or evidence payment.

The Provider is responsible for handling any personal information it independently collects for that purpose in accordance with applicable law.

MyRIZO’s role in facilitating the Service does not make RIZO responsible for every independent record created by a Provider.

38. Third-Party Links and Services

MyRIZO may contain links to third-party websites, services or applications.

Once you leave MyRIZO or interact directly with an independent third-party service, that organisation’s own terms and privacy practices may apply.

We encourage Users to review relevant third-party privacy information.

This does not remove any responsibility RIZO may have where a third party processes personal information on RIZO’s instructions.

39. Changes to This Privacy Policy

We may update this Privacy Policy from time to time because of:

·       changes to MyRIZO functionality;

·       new technologies;

·       changes in our processing activities;

·       changes in law;

·       regulatory guidance;

·       security developments; or

·       legitimate operational requirements.

The current version will display its effective or last-updated date.

Where a change materially affects how we process your personal information, we will take reasonable steps to bring the change to your attention and, where required by law, obtain appropriate consent before implementing the relevant processing.

We will not use a change to this Privacy Policy to retrospectively legitimise unlawful processing.

40. Relationship With the MyRIZO Terms and Conditions

This Privacy Policy explains how RIZO handles personal information.

The MyRIZO Terms and Conditions govern your use of the Platform and your contractual relationship with RIZO.

The two documents should be read together.

If a provision of either document conflicts with a mandatory requirement of POPIA or another applicable law, the mandatory legal requirement will prevail.

41. Contact RIZO About Privacy

For questions, requests or complaints concerning personal information, contact:

RIZO Information Officer

Name: VFS Mudavanhu
Designation: Chief Technology Officer
Email: fred@webcommunities.co.za
Telephone: 083 798 1785
Physical address: Baillie Park, Potchefstroom

General MyRIZO support

Email: info@myrizo.app
Telephone: [SUPPORT NUMBER]

42. Complaints to the Information Regulator

If you believe that RIZO has unlawfully processed your personal information or has failed to resolve a privacy complaint appropriately, you have the right to lodge a complaint with the Information Regulator of South Africa.

Current complaint and contact mechanisms are available through the Information Regulator’s official channels.

You are not required to surrender any right to approach the Information Regulator merely because you use MyRIZO.

43. Your Acknowledgement

By using MyRIZO, you acknowledge that this Privacy Policy has been made available to you and explains how personal information may be processed in connection with the Platform.

Where a particular processing activity requires your consent under applicable law, RIZO will request that consent separately where necessary.

Acceptance of the MyRIZO Terms and Conditions does not constitute unlimited consent for RIZO to process personal information for any purpose.

Personal information will be processed only on a lawful basis and for legitimate purposes consistent with POPIA and applicable law.

END OF MYRIZO PRIVACY POLICY