Legal

Privacy Policy

Last updated: 31 March 2026

1. Who we are

Algojungle (Pty) Ltd (registration number 2019/608881/07), trading as MetaPOS, is the responsible party for the processing of your personal information as described in this policy. We are registered in South Africa with our principal place of business at 416 Montebello, 4 Montrose Street, Newlands, Cape Town 7700.

Our Information Officer is Jason Naicker, Founder and Managing Director. You can contact us at info@metapos.co.za or +27 72 593 8957.

2. What this policy covers

This privacy policy explains how MetaPOS collects, uses, stores, shares, and protects personal information. It applies to personal information collected through our website (metapos.co.za), our mobile POS application, our consulting engagements, and any other interaction you have with us.

This policy is issued in accordance with the Protection of Personal Information Act, No. 4 of 2013 ("POPIA"). Where we use the term "personal information", we mean any information that identifies or could identify a living natural person or an existing juristic person, as defined in POPIA.

3. What personal information we collect and why

The personal information we collect depends on how you interact with us. We only collect personal information that is necessary for the specific purpose it is being collected for.

3.1 Store owners using the MetaPOS app

When you register for and use the MetaPOS mobile POS application, we collect your name, phone number, email address (if provided), store name, and store location. Through your use of the app, we also collect sales transaction data including products sold, quantities, prices, and timestamps.

We use this information to provide you with the POS service, generate sales reports and business insights for you, aggregate and anonymise sales data to produce market intelligence for our data clients, and to calculate and distribute data-sharing rewards to you.

The legal basis for this processing is the performance of our agreement with you and, in respect of aggregated data products, our legitimate interest in operating the MetaPOS data platform.

3.2 Consulting clients and business partners

When you engage MetaPOS for data consulting services, we collect the name, email address, phone number, job title, and company name of the relevant contact persons. We may also collect financial information necessary for invoicing and payment.

We use this information to deliver consulting services, manage the client relationship, issue invoices, and communicate about the engagement.

The legal basis for this processing is the performance of our consulting agreement with you.

3.3 Website visitors

When you visit metapos.co.za, we collect limited information depending on the cookie preferences you select. If you accept analytics cookies, Google Analytics 4 collects anonymised data including pages visited, time spent on the site, referral source, approximate geographic location (city level), and device and browser type. If you select "Necessary only", no analytics data is collected.

A single necessary cookie (cookie_consent) stores your cookie preference for one year. No other cookies are set unless you accept analytics cookies.

Full details of the cookies we use are available in our cookie policy.

The legal basis for analytics processing is your explicit consent, which you may give or withhold via the cookie banner.

3.4 Employees and contractors

For employees and contractors, we collect name, contact details, identity number, tax reference number, banking details, and employment or contract records as necessary for payroll, tax compliance, and the management of the working relationship.

The legal basis for this processing is the performance of the employment or contractor agreement and compliance with South African employment and tax legislation.

3.5 General enquiries

If you contact us by email, phone, WhatsApp, or through our website, we collect the information you provide in your message (typically your name and contact details). We use this to respond to your enquiry and may retain the correspondence as a record.

4. Who we share your personal information with

We do not sell personal information. We share personal information only where necessary for the purposes described in this policy, and only with the following categories of recipients:

RecipientPurposeLocation
Google LLC Google Workspace (business email, document storage, calendar), Google Analytics 4 (website usage, only with your consent), Google Cloud Platform (application infrastructure) United States / Global
Xero Limited Accounting, invoicing, and financial record-keeping New Zealand / Global
Xneelo (Pty) Ltd Website hosting South Africa
Professional advisors Legal counsel, auditors, and accountants as required South Africa
Regulatory bodies SARS and other authorities where required by law South Africa

When we provide aggregated sales data to FMCG brands and research clients, this data is anonymised and does not identify individual store owners or their customers. Where any data shared with clients could be linked to an identifiable store, we do so only under the terms of our data-sharing agreement with the relevant store owner.

5. Cross-border transfers

Some of the service providers listed above process personal information on servers located outside South Africa, including in the United States, the European Union, and other jurisdictions.

Where personal information is transferred outside South Africa, we ensure compliance with Section 72 of POPIA by confirming that the recipient is subject to laws, binding corporate rules, or binding agreements that provide an adequate level of protection substantially similar to POPIA. Google and Xero each maintain data processing agreements and security certifications that meet this standard.

If you do not wish your personal information to be transferred outside South Africa, please contact us to discuss alternative arrangements. In some cases, this may limit our ability to provide certain services.

6. How we protect your personal information

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include access controls and authentication, encryption of data in transit, use of secure cloud infrastructure with industry-standard certifications, and regular review of security practices.

No method of transmission or storage is completely secure. While we take reasonable steps to protect your personal information, we cannot guarantee absolute security.

7. How long we keep your personal information

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Specific retention periods include:

Financial and tax records are retained for the periods prescribed by the Income Tax Act and the Companies Act (generally five to seven years). Employment records are retained for the duration of the employment relationship and for the period required by applicable labour and tax legislation. Consulting client records are retained for the duration of the engagement and a reasonable period thereafter. Store owner data is retained for as long as the store owner uses the MetaPOS app and for a reasonable period after the relationship ends. Website analytics data is retained by Google in accordance with Google's data retention settings, currently set to 14 months.

When personal information is no longer required, it is destroyed, deleted, or de-identified in a manner that prevents reconstruction.

8. Your rights under POPIA

Under the Protection of Personal Information Act, you have the following rights in relation to your personal information:

Right to be informed. You have the right to know what personal information we hold about you and how it is being processed. This privacy policy serves as that notification.

Right of access. You may request a copy of the personal information we hold about you.

Right to correction. You may request that we correct or update inaccurate or incomplete personal information.

Right to deletion. You may request that we delete your personal information where it is no longer necessary for the purpose it was collected, subject to any legal retention requirements.

Right to object. You may object to the processing of your personal information on reasonable grounds, unless legislation provides for that processing.

Right to withdraw consent. Where processing is based on your consent (for example, analytics cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right not to be subject to automated decision-making. You have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significant effects concerning you.

Right to lodge a complaint. You have the right to lodge a complaint with the Information Regulator if you believe your personal information has been processed in violation of POPIA.

To exercise any of these rights, contact us at info@metapos.co.za. We will respond within a reasonable time, and in any event within 30 days of receiving your request. We may need to verify your identity before processing your request.

9. Direct marketing

We do not currently conduct direct marketing to individuals by electronic means. If this changes in the future, we will obtain your prior written consent as required by POPIA before sending you any unsolicited electronic marketing communications. You will always have the ability to opt out.

10. Children's personal information

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected personal information from a child, please contact us immediately and we will take steps to delete it.

11. Security compromises

In the event of a security compromise that results in unauthorised access to your personal information, we will notify the Information Regulator and affected data subjects as soon as reasonably possible, in accordance with Section 22 of POPIA.

12. Information Regulator

If you are not satisfied with how we have handled your personal information or responded to your request, you may lodge a complaint with the Information Regulator:

NameInformation Regulator (South Africa)
AddressJD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001
Telephone010 023 5207
Emailcomplaints.IR@justice.gov.za
Websiteinforegulator.org.za

13. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our operations or legal requirements. The "last updated" date at the top of this page reflects the most recent revision. Where changes are material, we will take reasonable steps to notify affected individuals.

14. Related documents

Cookie Policy - Details of the cookies used on this website and how to manage your preferences.

PAIA Manual - Information on how to request access to records held by MetaPOS under the Promotion of Access to Information Act.

← Back to metapos.co.za