Privacy Policy

Chissa (Pty) Ltd (“Chissa”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and any applicable South African data protection laws.

By using our services or submitting your information, you acknowledge that you have read and understood this policy.

The responsible party for your personal information is:

We currently collect only the information you voluntarily provide to us. During our pre-launch phase, this is limited to:

• Email address — when you join our waitlist, so we can notify you when Chissa launches.

In future, when the platform is live, we may collect additional information such as name, profile data, payment information, and usage data — and this policy will be updated accordingly.

We process your personal information only for lawful purposes, including:

• Sending you a launch notification email when Chissa opens (the sole purpose of waitlist collection).
• Responding to enquiries you send us directly.
• Complying with legal obligations imposed on us under South African law.

We do not use your email address for marketing unrelated to Chissa, and we will not sell or rent your personal information to third parties.

Under POPIA, we process your personal information on the following grounds:

• Consent — you voluntarily submit your email to join the waitlist.
• Legitimate interest — notifying you of the service you signed up to hear about.

We do not sell, trade, or transfer your personal information to third parties without your consent, except:

• To trusted service providers who assist us in operating our platform (e.g. email delivery services), under strict confidentiality obligations.
• When required by law, regulation, or valid legal process.

We retain your email address on the waitlist until you request removal or until Chissa launches and you have been notified. After that, waitlist data will be deleted or converted to registered user data (with your further consent).

As a data subject under POPIA, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete information.
• Deletion — request that we delete your personal information.
• Objection — object to the processing of your personal information.
• Complaint — lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at privacy@chissa.co.za.

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. However, no internet transmission is completely secure and we cannot guarantee absolute security.

Chissa is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The effective date at the top of this page will reflect the most recent revision.

For any questions, requests, or concerns about this Privacy Policy or our data practices, please contact: