Zaka Business Payments

Privacy Policy

Effective date: 26 October 2026 · See also our Terms of Service

1. Who we are

Zaka Business Payments ("Zaka", "we") is a merchant payment product operated by K202384165 t/a Fruitbox. We are the responsible party for personal information processed through Zaka, as described in the Protection of Personal Information Act, 2013 ("POPIA").

2. Information we collect

When you register or use Zaka we collect: your full name, business name and type, business location, mobile number, email address, your account password (stored only in securely hashed form by our authentication service), records of your acceptance of our Terms and this Policy, support messages you send us, and basic technical information needed to keep the service secure.

Zaka does not ask for or store card PINs or full card numbers.

3. Why we process it

We use personal information to create and manage your merchant account, verify your identity and business where required, communicate with you, provide support, prepare and (once available) provide payment acceptance services, prevent fraud and misuse, and comply with legal obligations.

4. Sharing

We share personal information only where necessary: with service providers who host and operate Zaka on our behalf, with regulated payment service providers and acquirers once payment acceptance is offered, for verification purposes, or where required by law. We do not sell personal information.

5. Cross-border transfers

Some of our service providers may store or process information outside South Africa. Where this happens, we take reasonable steps to ensure the information receives a level of protection consistent with POPIA.

6. Retention

We keep personal information only for as long as needed for the purposes above, or as required by law (for example, financial and tax record-keeping), after which it is deleted or de-identified.

7. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections, access controls that restrict each merchant to their own data, and hashed password storage. No system is completely secure, and we will notify you and the Information Regulator of security compromises as required by POPIA.

8. Your rights

Under POPIA you may ask whether we hold your personal information, request access to it, ask us to correct or delete it, object to certain processing, and withdraw consent where processing is based on consent. You may also lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

9. Direct marketing

We will only send you direct marketing in line with POPIA, and you may opt out at any time.

10. Changes

We may update this Policy. The current version will always be published on this page with its effective date.

11. Contact us

For privacy questions or requests, contact K202384165 t/a Fruitbox:

Email: sales@fruitbox.co.za

WhatsApp: +27 62 438 8530