Privacy Policy

Last updated on Feb 07, 2026.

PRIVACY POLICY RELATING TO – CASHCARDS.IO

  • Customers
  • Employees
  • Job Applicants; And
  • Third-Party Providers

1. Definitions

1.1  “Authorised Third Parties” means all third parties who process the Personal Information of Data Subjects on behalf of CashCards.io or as part of any functions or duties they carry out for CashCards.io;

1.2  “Customer” means a customer of CashCards.io that makes use of the Services in accordance with the accepted terms and conditions;

1.3  “Customer Data” means data inputted and supporting documents provided by the Customer for the purpose of using the Services, which may include Personal Information;

1.4  “Data Subjects” means Customers, Employees, job applicants (successful or unsuccessful), and third-party service providers;

1.5  “Electronic Communication” means any message sent over an electronic communications network;

1.6  “Employees” means former and current employees of CashCards.io, including interns;

1.7  “Operator” means a person who processes Personal Information on behalf of CashCards.io;

1.8  “Personal Information” means information relating to an identifiable person, including but not limited to identity, financial, contact, biometric, and demographic data;

1.9  “POPIA” means the Protection of Personal Information Act, 4 of 2013;

1.10  “Processing” means any operation performed on Personal Information, including collection, storage, use, dissemination, or deletion;

1.11  “Regulator” means the Information Regulator;

1.12  “Responsible Party” means the entity determining the purpose and means of processing Personal Information;

1.13  “Services” means financial and payment services provided by CashCards.io, including digital cash card and money transfer services.

2. Introduction

2.1  This policy governs how CashCards.io processes Personal Information.

2.2  Where CashCards.io processes Personal Information on behalf of a Customer, the Customer remains the Responsible Party.

2.3  For Employees, job applicants, and third parties, CashCards.io acts as the Responsible Party.

2.4  CashCards.io complies with POPIA in the collection, use, and retention of Personal Information.

3. Personal Information of Data Subjects

3.1  CashCards.io collects Personal Information directly from Data Subjects when voluntarily provided.

3.2  By providing information, Data Subjects consent to its processing.

3.3  Information collected may include:

  • Customers: Name, ID/passport, date of birth, address, financial info, and identification documents
  • Employees: Personal details, employment history, banking, tax, and performance data
  • Third Parties: Company registration, contact and financial details
  • Job Applicants: Personal details, CVs, qualifications, and screening data

3.4  Additional information provided voluntarily is deemed consented for processing.

4. Lawful Processing

4.1  CashCards.io processes Personal Information only for legitimate purposes:

  • Customers: To provide financial/payment services
  • Employees: HR, payroll, compliance, and operational needs
  • Third Parties: Vetting and onboarding
  • Job Applicants: Recruitment and screening

4.2  Information will not be used for unrelated purposes without consent.

4.3  CashCards.io takes reasonable steps to ensure data accuracy.

4.4  Where necessary, additional consent will be obtained.

4.5  Authorised Third Parties must comply with this policy.

5. Rights of Data Subjects

Data Subjects have the right to:

  • Access their Personal Information
  • Request correction or deletion
  • Understand how their data is used
  • Lodge complaints with the Information Regulator

Requests must be accompanied by proof of identity.

6. Security

CashCards.io implements appropriate safeguards, including:

  • Secure cloud storage
  • Encryption and firewalls
  • Multi-factor authentication
  • Restricted access controls

7. Data Breach Notification

In case of a breach, CashCards.io will:

  • Notify affected parties as soon as possible (within 5 days where feasible)
  • Mitigate risks
  • Provide updates
  • Notify authorities where required

8. Disclosure Required by Law

Where required by law, CashCards.io may disclose Personal Information and will:

  • Notify Data Subjects where possible
  • Limit disclosure to what is necessary
  • Comply with legal obligations

This may include compliance with financial regulations and reporting obligations.

9. Cross-Border Transfers

Personal Information may only be transferred outside South Africa if:

  • Consent is obtained
  • Equivalent protection exists
  • It is necessary for service delivery

10. Retention and Destruction

Personal Information will be:

  • Retained only as long as necessary
  • Deleted securely when no longer required
  • Kept longer only where legally required or consented to

11. Direct Marketing

11.1 Data Subjects may object to direct marketing at any time

11.2 Marketing is only allowed if:

  • Consent is given; or
  • The Data Subject is an existing customer

11.3 Consent requests are limited to one initial request unless withdrawn