Privacy Policy

1. Scope

This Privacy Policy applies whenever you:

• Visit the LIYAD website.
• Register an account.
• Create a Store.
• Purchase from a Seller.
• Contact our support team.
• Subscribe to our services.
• Use our mobile applications.
• Use our APIs.
• Participate in promotions.
• Communicate with us electronically.

This Privacy Policy applies regardless of whether you access LIYAD from a desktop computer, mobile device, tablet or any other supported device.

2. Our Commitment

LIYAD is committed to:

• Processing Personal Information lawfully.
• Collecting only information reasonably necessary for our services.
• Being transparent about how information is used.
• Protecting Personal Information using appropriate technical and organisational safeguards.
• Respecting the rights of data subjects.
• Continuously improving our privacy practices.

Where applicable, LIYAD processes Personal Information in accordance with:

• Protection of Personal Information Act, 2013 (POPIA)
• Electronic Communications and Transactions Act (ECTA)
• Consumer Protection Act (CPA)
• Any other applicable privacy legislation

3. Definitions

For purposes of this Privacy Policy:

Personal Information

Information relating to an identifiable natural or juristic person.

Examples include:

• Name
• Email address
• Telephone number
• Identity number (where required)
• Business information
• Delivery address
• Billing address
• IP address
• Device identifiers
• Purchase history

Processing

Any operation performed on Personal Information including:

• Collection
• Recording
• Storage
• Organisation
• Updating
• Retrieval
• Analysis
• Disclosure
• Deletion
• Destruction

Data Subject

Any identifiable person whose Personal Information is processed.

Seller

A business using LIYAD to operate an online Store.

Buyer

A customer purchasing products from a Seller.

4. Information We Collect

The type of information we collect depends on how you use LIYAD.

4.1 Information You Provide

When creating an account or using our services, you may provide:

Personal Details

• First name
• Last name
• Email address
• Mobile number
• Date of birth (where required)

Business Information

For Sellers, we may collect:

• Business name
• Registration number
• VAT number
• Industry
• Trading address
• Business contact details
• Website
• Social media accounts

Billing Information

Where applicable:

• Billing address
• Subscription information
• Invoices
• Payment references

Important: LIYAD does not store your full payment card details.

Card payments are processed securely through approved third-party payment providers.

Customer Support

When you contact Support we may collect:

• Emails
• Chat messages
• Call recordings (where applicable)
• Attachments
• Screenshots
• Diagnostic information

This helps us investigate and resolve support requests.

5. Information Collected Automatically

When you use LIYAD we automatically collect certain technical information.

This may include:

Device Information

• Device type
• Operating system
• Browser type
• Screen resolution
• Language settings

Network Information

• IP address
• Approximate location
• Internet Service Provider
• Connection type

Usage Information

We may record:

• Pages visited
• Buttons clicked
• Features used
• Search queries
• Session duration
• Login times
• Logout times
• Error reports

This information helps improve the Platform and identify technical issues.

Security Information

To protect our Platform we may collect:

• Login history
• Failed login attempts
• Device fingerprints
• Authentication logs
• Security alerts
• API activity
• Audit logs

These records assist in detecting fraud, unauthorised access and other security incidents.

6. Information Collected by Sellers

LIYAD provides software that enables Sellers to collect information from their own customers.

Depending on how a Seller configures their Store, customer information may include:

• Name
• Email address
• Telephone number
• Delivery address
• Billing address
• Order history
• Wishlist
• Product preferences

Although this information is stored using the LIYAD Platform, it belongs to the Seller for the purpose of fulfilling customer orders.

Each Seller remains responsible for complying with applicable privacy laws relating to the information they collect.

LIYAD processes this information on behalf of Sellers to provide the Platform.

7. Information from Third Parties

We may receive information from trusted third parties, including:

• Payment gateway providers
• Courier partners
• Identity verification providers
• Fraud prevention services
• Analytics providers
• Marketing platforms
• Customer support software
• Social login providers

Examples include information confirming:

• Successful payments
• Failed payments
• Shipping updates
• Identity verification status
• Fraud risk indicators

We do not receive your full payment card information from payment providers.

8. Children's Privacy

LIYAD is intended for users who are legally capable of entering into binding agreements.

We do not knowingly collect Personal Information from children without appropriate legal authorisation.

If we become aware that Personal Information relating to a child has been collected unlawfully, we will take reasonable steps to delete that information.

Parents or guardians who believe that a child has submitted Personal Information to LIYAD may contact us using the details provided at the end of this Policy.

9. Why We Collect Your Information

LIYAD collects Personal Information only where it is necessary to operate, secure, improve and provide the Platform.

The information we collect enables us to:

• Create and manage user accounts.
• Process subscriptions.
• Provide customer support.
• Deliver Platform features.
• Facilitate transactions between Buyers and Sellers.
• Improve Platform performance.
• Detect fraud and abuse.
• Protect user accounts.
• Comply with legal obligations.
• Communicate important service updates.

We do not collect Personal Information for purposes unrelated to the operation of the Platform.

10. Lawful Basis for Processing

Where applicable under privacy legislation, LIYAD processes Personal Information on one or more of the following lawful bases.

10.1 Performance of a Contract

We process information because it is necessary to provide our services.

Examples include:

• Creating your account.
• Managing your subscription.
• Providing access to your Store.
• Processing support requests.
• Delivering Platform functionality.

Without this information, we may be unable to provide the requested services.

10.2 Legal Obligations

Certain information must be processed to comply with applicable laws.

Examples include:

• Tax legislation.
• Court orders.
• Law enforcement requests.
• Fraud prevention requirements.
• Financial record keeping.

10.3 Legitimate Interests

LIYAD may process Personal Information where it is reasonably necessary for legitimate business interests, provided those interests do not override your rights.

Examples include:

• Improving the Platform.
• Preventing fraud.
• Monitoring system performance.
• Responding to security incidents.
• Analysing service usage.
• Developing new features.
• Protecting the Platform against abuse.

10.4 Consent

Certain processing activities require your consent.

Examples include:

• Marketing emails.
• Optional cookies.
• Promotional communications.
• Product announcements.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing that occurred before consent was withdrawn.

11. How We Use Personal Information

LIYAD uses Personal Information for the following purposes.

Account Management

To:

• Create accounts.
• Authenticate users.
• Manage passwords.
• Verify identities.
• Recover accounts.
• Secure access.

Subscription Management

To:

• Manage billing.
• Generate invoices.
• Process subscription renewals.
• Notify users about payment issues.
• Maintain service access.

Customer Support

To:

• Respond to enquiries.
• Investigate technical issues.
• Resolve disputes.
• Improve support quality.
• Maintain support history.

Platform Improvement

We analyse Platform usage to better understand:

• Which features are most popular.
• Performance bottlenecks.
• User experience improvements.
• Software errors.
• Navigation patterns.

Where possible, analytics are aggregated or anonymised.

Fraud Prevention

We may analyse information to identify:

• Suspicious login activity.
• Unusual purchasing behaviour.
• Fake accounts.
• Identity fraud.
• Payment fraud.
• Abuse of Platform features.

This helps protect Buyers, Sellers and the Platform.

Security

Security processing includes:

• Monitoring login activity.
• Detecting malware.
• Identifying unauthorised access.
• Investigating security incidents.
• Maintaining audit logs.

12. Marketing Communications

LIYAD may send communications relating to:

• Product updates.
• New features.
• Security alerts.
• Maintenance notices.
• Educational content.
• Newsletters.
• Promotional offers.
• Industry insights.

Where required by law, marketing communications will only be sent where you have provided the necessary consent.

Every marketing email will include an option to unsubscribe.

Certain service-related communications cannot be disabled because they are necessary for operating your account.

13. Cookies

LIYAD uses cookies and similar technologies to improve your experience.

Cookies help us:

• Keep you signed in.
• Remember your preferences.
• Improve website performance.
• Analyse visitor behaviour.
• Secure user sessions.
• Personalise content.

Cookies do not typically identify you directly, but they may be linked to your account where necessary to provide Platform functionality.

Additional information is available in our Cookie Policy.

Types of Cookies

We may use:

Essential Cookies

Required for:

• Logging in.
• Security.
• Shopping carts.
• Session management.

These cookies cannot be disabled because they are necessary for the Platform to function.

Performance Cookies

Used to understand:

• Page performance.
• Loading times.
• Navigation patterns.
• Error reports.

Analytics Cookies

Used to understand how visitors interact with LIYAD.

Examples include:

• Most visited pages.
• User journeys.
• Device types.
• Geographic regions.
• Traffic sources.

Functional Cookies

Used to remember:

• Language preferences.
• Theme preferences.
• Login preferences.
• Recently viewed products.
• Dashboard settings.

14. Analytics

LIYAD may use analytics tools to improve the Platform.

Analytics information may include:

• Session duration.
• Device information.
• Browser information.
• Page views.
• Click activity.
• Conversion events.
• Navigation flows.

Where practical, analytics information is aggregated or anonymised before analysis.

Analytics help us improve usability without unnecessarily identifying individual users.

15. Artificial Intelligence

LIYAD may provide AI-powered functionality to assist users.

Examples include:

• Product description generation.
• Marketing content generation.
• Customer support suggestions.
• Business insights.
• Product recommendations.
• Search improvements.

Where AI features process user information, such processing occurs solely for the purpose of providing the requested functionality.

Users remain responsible for reviewing AI-generated content before relying upon or publishing it.

LIYAD does not guarantee the accuracy of AI-generated responses.

16. Automated Decision-Making

Certain automated systems may be used to improve security and Platform performance.

Examples include:

• Fraud detection.
• Spam detection.
• Security monitoring.
• Suspicious login detection.
• Risk scoring.

These systems assist human decision-making and do not replace human review where significant decisions affecting users are made.

17. User Preferences

Users may manage certain privacy preferences through their account settings.

Depending on Platform functionality, these preferences may include:

• Marketing emails.
• Notification preferences.
• Cookie preferences.
• Language preferences.
• Communication channels.
• Profile visibility.

Some preferences may be limited where processing is necessary to provide Platform services or comply with legal obligations.

18. Sharing Your Information

LIYAD respects your privacy and does not sell your Personal Information.

We only share information where it is necessary to operate the Platform, comply with legal obligations or provide services you have requested.

Information may be shared with the following categories of recipients.

18.1 Payment Providers

Where a Buyer makes a purchase or a Seller receives payment, certain information may be shared with approved payment providers.

Examples include:

• Customer name
• Billing information
• Transaction amount
• Order reference
• Fraud prevention information

LIYAD does not receive or store your complete payment card details.

All payment processing is governed by the privacy policies and security standards of the relevant payment provider.

18.2 Courier and Logistics Providers

Where shipping services are used, necessary delivery information may be shared with logistics providers.

Examples include:

• Recipient name
• Delivery address
• Telephone number
• Tracking reference
• Delivery instructions

Only the information required to complete delivery will be shared.

18.3 Cloud Infrastructure Providers

LIYAD uses trusted cloud infrastructure providers to host the Platform.

These providers may process data for purposes including:

• Secure hosting
• Data storage
• Backups
• Disaster recovery
• Platform availability
• Security monitoring

All service providers are expected to implement appropriate security measures.

18.4 Professional Advisors

We may disclose information where reasonably necessary to our:

• Legal advisors
• Auditors
• Accountants
• Regulatory consultants
• Insurance providers

Such disclosures are limited to what is reasonably necessary for professional services.

18.5 Regulatory Authorities

LIYAD may disclose Personal Information where required by law.

Examples include:

• Court orders
• Search warrants
• Regulatory investigations
• Tax authorities
• Law enforcement agencies

Where legally permitted, we may notify affected users before responding to such requests.

19. International Data Transfers

LIYAD primarily seeks to host customer data in jurisdictions that provide appropriate levels of privacy and security.

However, certain third-party services integrated into the Platform may process information outside South Africa.

Examples include:

• Cloud infrastructure providers
• Email delivery services
• Analytics platforms
• AI providers
• Customer support platforms

Where Personal Information is transferred internationally, LIYAD will take reasonable steps to ensure that appropriate safeguards are implemented in accordance with applicable privacy laws.

These safeguards may include:

• Contractual protections
• Industry-standard security controls
• Data processing agreements
• Compliance certifications

20. Data Retention

LIYAD retains Personal Information only for as long as reasonably necessary to:

• Provide our services.
• Comply with legal obligations.
• Resolve disputes.
• Prevent fraud.
• Enforce our agreements.
• Maintain security records.

Retention periods vary depending on the nature of the information.

Examples include:

Account Information

Retained while your account remains active and for a reasonable period thereafter where required by law.

Financial Records

Retained in accordance with applicable tax and accounting legislation.

Support Records

Support communications may be retained to improve customer service, resolve disputes and maintain service history.

Security Logs

Security records may be retained for fraud prevention, incident investigations and compliance purposes.

Where information is no longer required, LIYAD will securely delete, anonymise or de-identify it where reasonably practicable.

21. Information Security

Protecting Personal Information is one of LIYAD's highest priorities.

We implement technical, administrative and organisational safeguards designed to protect information against:

• Unauthorised access
• Accidental disclosure
• Alteration
• Destruction
• Loss
• Misuse

Examples of security measures may include:

• Encryption of data in transit
• Encryption of sensitive data at rest where appropriate
• Multi-factor authentication for administrative access
• Role-based access controls
• Audit logging
• Firewall protection
• Continuous security monitoring
• Vulnerability management
• Regular software updates
• Secure backup procedures

While we strive to maintain a highly secure environment, no internet-based service can guarantee absolute security.

Users also play an important role in protecting their accounts by maintaining strong passwords and safeguarding login credentials.

22. Data Breaches

LIYAD maintains procedures for identifying, investigating and responding to security incidents.

Where a data breach involving Personal Information occurs, we will:

• Investigate the incident promptly.
• Take reasonable steps to contain the incident.
• Assess the potential impact.
• Notify affected users where required by law.
• Notify relevant regulatory authorities where legally required.
• Implement corrective measures to reduce the likelihood of recurrence.

We encourage users to report suspected security incidents immediately.

23. Seller Responsibilities

Sellers using LIYAD collect Personal Information from their own customers.

As a Seller, you are independently responsible for complying with applicable privacy legislation relating to your business.

This includes:

• Collecting information lawfully.
• Using customer information only for legitimate business purposes.
• Protecting customer information.
• Respecting customer privacy rights.
• Providing required privacy notices where applicable.
• Reporting certain breaches where required by law.

LIYAD provides the technology platform.

Sellers remain responsible for how they use customer information collected through their Stores.

24. Your Privacy Rights

Subject to applicable law, you may have the right to:

Access

Request access to the Personal Information we hold about you.

Correction

Request correction of inaccurate or incomplete Personal Information.

Deletion

Request deletion of Personal Information where retention is no longer necessary or legally required.

Restriction

Request that processing be restricted in certain circumstances.

Objection

Object to certain types of processing, including direct marketing.

Withdrawal of Consent

Where processing is based on consent, withdraw that consent at any time.

Data Portability

Where applicable, request a copy of your Personal Information in a commonly used electronic format.

LIYAD will assess each request in accordance with applicable legislation.

Certain requests may be declined where legal obligations require continued processing or retention.

25. Exercising Your Rights

If you wish to exercise any of your privacy rights, you may contact us using the details provided at the end of this Privacy Policy.

To protect your privacy, LIYAD may require reasonable verification of your identity before processing certain requests.

We aim to respond to privacy requests within a reasonable timeframe and in accordance with applicable legal requirements.

Where a request cannot be fulfilled, we will explain the reason unless prohibited by law.

26. Third-Party Websites and Services

The LIYAD Platform may contain links to third-party websites, applications or services for your convenience.

Examples include:

• Payment gateway providers
• Courier services
• Social media platforms
• Supplier websites
• Government services
• Accounting software
• AI service providers
• Marketing platforms

These services operate independently from LIYAD.

We do not control:

• Their content
• Their privacy practices
• Their security measures
• Their availability
• Their terms and conditions

Before providing Personal Information to any third-party service, you should review that provider's Privacy Policy and Terms of Service.

LIYAD is not responsible for the privacy practices of third parties.

27. Managing Cookies

Most web browsers allow you to manage cookies through browser settings.

Depending on your browser, you may be able to:

• View stored cookies
• Delete cookies
• Block cookies
• Block third-party cookies
• Receive alerts before cookies are stored

Please note that disabling certain cookies may affect Platform functionality.

For example, disabling essential cookies may prevent you from:

• Logging in
• Completing purchases
• Maintaining shopping carts
• Saving preferences
• Accessing secure areas

Further information is available in our Cookie Policy.

28. Account Deletion

You may request deletion of your LIYAD account at any time.

Where an account deletion request is received, LIYAD will:

• Verify your identity.
• Review any outstanding legal obligations.
• Assess whether information must be retained under applicable law.
• Remove or anonymise Personal Information where appropriate.

Certain information may continue to be retained for legitimate purposes, including:

• Tax compliance
• Fraud prevention
• Security investigations
• Legal disputes
• Regulatory obligations
• Financial record keeping

Deletion of your LIYAD account does not automatically delete information that Sellers are legally required to retain regarding completed transactions.

29. Changes to this Privacy Policy

LIYAD may update this Privacy Policy from time to time to reflect:

• Changes in legislation
• New Platform features
• New technologies
• Changes to business operations
• Security improvements
• Regulatory guidance

Where material changes are made, we will take reasonable steps to notify users through one or more of the following:

• Email
• Dashboard notifications
• Platform announcements
• Trust Centre updates

The most current version of this Privacy Policy will always be available within the LIYAD Trust Centre.

Your continued use of the Platform after an updated Privacy Policy becomes effective constitutes acceptance of the revised Policy.

30. Complaints

If you believe that LIYAD has not processed your Personal Information in accordance with applicable privacy legislation, we encourage you to contact us first.

We are committed to resolving privacy concerns fairly, transparently and promptly.

Where applicable, you may also have the right to lodge a complaint with the relevant supervisory authority responsible for data protection in your jurisdiction.

31. Information Officer

LIYAD has appointed an Information Officer responsible for overseeing privacy and data protection compliance.

The Information Officer is responsible for:

• Privacy compliance
• Data protection governance
• Privacy requests
• Data breach coordination
• Regulatory engagement
• Internal privacy policies
• Privacy awareness

Privacy-related enquiries should be directed to the contact details provided below.

32. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us.

General Support

support@liyad.co.za

Privacy Enquiries

privacy@liyad.co.za

Information Officer

privacy@liyad.co.za

Legal

legal@liyad.co.za

Security

security@liyad.co.za

Website

https://www.liyad.co.za

When contacting us, please include sufficient information to help us identify your account and understand your request.

To protect your privacy, we may request additional verification before disclosing Personal Information.

33. Governing Law

This Privacy Policy shall be governed by the laws of the Republic of South Africa.

Where applicable, privacy rights will be interpreted in accordance with:

• The Protection of Personal Information Act, 2013 (POPIA)
• The Electronic Communications and Transactions Act (ECTA)
• Any other applicable data protection legislation

Nothing in this Privacy Policy limits any rights granted to individuals under applicable law.

34. Severability

If any provision of this Privacy Policy is found to be unlawful, invalid or unenforceable, that provision shall be interpreted as closely as possible to its intended purpose.

The remaining provisions shall remain valid and enforceable.

35. Entire Privacy Policy

This Privacy Policy should be read together with the following documents published within the LIYAD Trust Centre:

• Terms of Service
• Seller Agreement
• Buyer Terms
• Cookie Policy
• Acceptable Use Policy
• Community Standards
• Prohibited Products Policy
• Health Claims Policy
• Copyright Policy

Where a conflict exists between this Privacy Policy and another document regarding the processing of Personal Information, this Privacy Policy shall prevail to the extent of that conflict.

Version History

• Version 1.0 | 26 July 2026 | Initial publication of the LIYAD Privacy Policy.

36. Your Privacy Matters

At LIYAD, we believe that trust is earned through transparency, accountability and responsible handling of Personal Information.

Our goal is not only to comply with applicable privacy laws but also to build a platform where entrepreneurs, businesses and customers can confidently grow, transact and collaborate.

We continuously review our privacy practices to ensure they remain aligned with evolving technology, industry standards and legal requirements.

Thank you for placing your trust in LIYAD.