Privacy Policy

Vuleka Platform (Pty) Ltd (Registration Number 2017/410566/07), acting through its insurance product Vuleka Insure ("Vuleka", "we", "us"), is the responsible party for your personal information under the Protection of Personal Information Act, 2013 (POPIA).

Address: Unit 1, Wynberg Business Park, 33 Andries Street, Wynberg, Sandton. Email: info@vuleka.com. Telephone: 011 346 5233. Authorised Financial Services Provider, FSP 55203.

• Identity details: your name and a selfie taken at sign-up. We do not collect or store identity or passport numbers.
• Contact details: the WhatsApp number you message us from, and your shop address. We do not collect a separate phone number or an email address.
• Shop information: trading name, location, photographs of the inside and outside of your shop, and the type of goods you sell.
• Stock data: photographs of invoices from any cash and carry or wholesaler, which we use to work out your cover value. These invoices do not have to come from the Vuleka platform.
• Payment information: the payment method you use, references and proof of payment. We do not store full card numbers.
• Claims information: what happened, when, photographs, police case numbers and any supporting documents you send us.
• Technical information: device type, browser, IP address and pages visited on our website.

• To sign you up, verify who you are and confirm your shop exists (a legal requirement under FICA and insurance regulation).
• To calculate your cover, issue your policy and send you your policy summary.
• To collect premiums and confirm payment.
• To assess and settle claims, including issuing stock vouchers.
• To send you service messages on WhatsApp about your policy, payments and claims.
• To detect and prevent fraud.
• To meet our legal, regulatory and reporting duties.
• To improve our product and, where you have agreed, to send you marketing.

We rely on the following legal grounds: performing our contract with you, complying with the law, our legitimate interests in running and protecting the business, and your consent where consent is required.

We only share what is needed, and only with parties who are bound to keep it confidential.

• The Hollard Insurance Company Limited (FSP 17698), the insurer that underwrites your policy, and SASRIA SOC Ltd for riot and civil unrest claims.
• Reinsurers of the insurer, who share part of the insurance risk and may receive policy and claims information for that purpose.
• MMX, the insurance platform used to administer policies and claims.
• GFT T/A THRAN Consulting ("THRAN"), our product development and management partner.
• WATI, which powers our WhatsApp messaging.
• Retool, which we use internally to view and manage policy and claims data.
• Kazang and Shop2Shop, our payment partners, plus banks for EFT and cash deposits.
• Our hosting, database and email providers, which store the data that runs the service.
• Wholesalers and cash and carry partners, when we issue you a stock voucher after an approved claim.
• Regulators, the Financial Sector Conduct Authority, the Information Regulator, an Ombud, the police or a court, where the law requires it.
• Professional advisors such as auditors and attorneys, under confidentiality.

We do not sell your personal information.

We do not currently run analytics or advertising tools on our website, so no information about your visit is shared with TikTok, Google, YouTube or Meta. We are planning advertising on those platforms. Before we switch any of it on we will ask for your consent and update our cookie and tracking policy, which lists what each tool collects and how to opt out.

Some of our service providers store data on servers outside South Africa. Where that happens we make sure the transfer meets POPIA section 72, either because the country has comparable protection or because our contract with the provider imposes equivalent safeguards.

Insurance and financial services law requires us to keep records for a minimum period. We keep policy, premium, advice and claims records for at least five years after the policy ends or after the claim is finalised, and longer where another law, a dispute or an investigation requires it. Marketing preferences are kept until you opt out. After that we delete or de-identify the information.

We use encrypted connections, access controls, role based permissions for staff, and vetted service providers. No system is perfect, so if a security breach affects your personal information we will notify you and the Information Regulator as POPIA requires.

• Ask what personal information we hold about you and get a copy.
• Ask us to correct or delete information that is wrong, misleading or no longer needed.
• Object to processing based on our legitimate interests.
• Withdraw consent for marketing at any time, including by replying STOP on WhatsApp.
• Complain to us first, and then to the Information Regulator.

To exercise any of these, email info@vuleka.com or call 011 346 5233. We may ask you to verify your identity first.

Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg. Email: complaints.IR@justice.gov.za.

We may update this policy from time to time. The current version always lives on this page, and material changes will be announced on WhatsApp or on our website.