1. Introduction (POPIA)

This Privacy Policy explains how ToneTrade processes personal information in line with South Africa’s Protection of Personal Information Act (POPIA). ToneTrade is the responsible party for marketplace account and platform data described here. TradeSafe is a separate operator for escrow / payment data processed under its own terms and privacy notices.

2. Information we collect

• Account details: name, email, phone, password hashes, seller store profile.
• Verification documents you upload for seller checks (identity / business) and buyer ID / passport on first purchase.
• Listing and order data: instruments listed, addresses for delivery, messages related to orders.
• Live listing photo metadata for fraud prevention and disputes: capture time, approximate location (GPS), and device class. Precise coordinates are visible to ToneTrade moderators only — not on the public storefront.
• Technical data: IP address, browser/device info, cookies (see Cookie Policy).
• Payment / escrow identifiers shared with TradeSafe to create and settle transactions (ToneTrade does not store full card numbers).

3. Why we process it

• To operate the marketplace and fulfil contracts between buyers and sellers.
• To enable TradeSafe escrow, payouts, refunds, and dispute handling.
• To verify sellers, prevent fraud, and enforce policies.
• To send transactional emails/SMS (order updates). Marketing only with a lawful basis / opt-out where required.
• To meet legal and regulatory obligations.

4. Sharing

We share necessary order and party details with TradeSafe to run escrow. Couriers receive delivery details from the seller/order. We use hosting, email, and analytics providers under appropriate agreements. We do not sell personal information.

5. Security & retention

We apply reasonable technical and organisational measures. We keep information only as long as needed for the purposes above, dispute windows, and legal retention requirements.

6. Your rights

Subject to POPIA, you may request access, correction, deletion, or objection to certain processing. Contact us via Contact. You may lodge a complaint with the Information Regulator (South Africa).