Privacy Policy

1. Information We Collect

Information you provide to us:

• Full name, email address and phone number when you register
• Transaction details including item descriptions and values
• Communications you send through our platform
• Dispute information and supporting evidence you submit

Information collected automatically:

• IP address and browser information when you access our site
• Transaction activity, status changes and event logs
• QR code scan records including timestamps
• Session data for authentication purposes

Information from third parties:

• Payment confirmation data from PayFast (we do not store card details)

2. How We Use Your Information

We use your personal information to:

• Create and manage your TrustParcel account
• Process and track transactions between buyers and sellers
• Facilitate secure escrow payments through PayFast
• Verify parcel handover through QR code scanning
• Investigate and resolve disputes between parties
• Send transaction notifications and status updates
• Detect and prevent fraud and scam activity
• Comply with legal and regulatory requirements
• Improve our platform and user experience

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• With transaction parties: Your name is shared with the other party in a transaction (buyer or seller) so both parties know who they are dealing with
• With PayFast: Your name, email and transaction amount are shared with PayFast to process payments securely
• With our administrators: TrustParcel staff may access transaction and account details to resolve disputes and support requests
• Legal requirements: We may disclose information if required by South African law, court order or regulatory authority

4. Payment Information

TrustParcel uses PayFast to process all payments. We do not store, process or have access to your credit card, bank account or other payment details. All payment data is handled directly by PayFast in accordance with their PCI DSS compliance standards.

Funds held in escrow are held in TrustParcel's PayFast merchant account and released to the seller only after the buyer confirms receipt of the correct item.

5. Data Storage and Security

Your data is stored on secure servers hosted in South Africa through HostingBarn. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or misuse, including:

• SSL/TLS encryption for all data transmitted to and from our platform
• Passwords stored using industry-standard bcrypt hashing — never in plain text
• Session-based authentication with automatic timeout
• Database access restricted to authorised systems only

While we take every reasonable precaution, no system is completely secure. We encourage you to use a strong, unique password and to report any suspicious activity to us immediately.

6. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter for legal, dispute resolution and audit purposes. Transaction records are retained for a minimum of 5 years in accordance with South African financial record-keeping requirements.

You may request deletion of your account and personal data by contacting us at the address below. Note that we may be required to retain certain transaction records even after account deletion.

7. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act (POPIA), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information (subject to legal retention requirements)
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us at info@oriya.co.za

8. Cookies

TrustParcel uses session cookies for authentication purposes only. These cookies are essential for the platform to function and do not track your activity across other websites. We do not use advertising or analytics cookies.

9. Third Party Links

Our platform may contain links to third-party websites such as PayFast. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email or through a notice on our platform. Continued use of TrustParcel after changes are made constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal information, please contact us: