1. Introduction (POPIA)

This Privacy Policy explains how ToneTrade processes personal information in line with South Africa’s Protection of Personal Information Act (POPIA). ToneTrade is the responsible party for marketplace account and platform data described here. TradeSafe is a separate operator for escrow / payment data processed under its own terms and privacy notices.

2. Information we collect

• Account details: name, email, phone, password hashes, seller store profile.
• Verification documents you upload for seller checks (identity / business) and buyer ID / passport on first purchase.
• Listing and order data: instruments listed, addresses for delivery, messages related to orders.
• Live listing photo metadata for fraud prevention and disputes: capture time, approximate location (GPS), and device class. Precise coordinates are visible to ToneTrade moderators only — not on the public storefront.
• Optional event-based location check-ins (not live tracking) when you land on the site, log in or out, create a listing, or start/complete a transaction — used only for safety and moderation, with timestamps linked to the activity.
• Technical data: IP address, browser/device info, cookies (see Cookie Policy).
• Rob Helpford chats when you are signed in (your messages and replies).
• Payment / escrow identifiers shared with TradeSafe to create and settle transactions (ToneTrade does not store full card numbers). Buyers choose how to pay on TradeSafe’s page (for example card, EFT, Ozow, SnapScan, or PayJustNow where available).

3. Why we process it

• To operate the marketplace and fulfil contracts between buyers and sellers.
• To enable TradeSafe escrow, payouts, refunds, and dispute handling.
• To verify sellers, prevent fraud, and enforce policies.
• To run Rob Helpford, handle support, and improve the assistant.
• To send transactional emails/SMS (order updates). Marketing only with a lawful basis / opt-out where required.
• To meet legal and regulatory obligations.

4. Sharing

We share necessary order and party details with TradeSafe to run escrow. Couriers receive delivery details from the seller/order. We use hosting, email, and analytics providers under appropriate agreements. Rob Helpford may send your message and short chat context to Google Gemini to generate a reply. We do not sell personal information.

5. Security & retention

We apply reasonable technical and organisational measures. We keep information only as long as needed for the purposes above, dispute windows, and legal retention requirements.

6. Your rights

Subject to POPIA, you may request access, correction, deletion, or objection to certain processing. Contact us via Contact. You may lodge a complaint with the Information Regulator (South Africa).