Legal
Privacy Policy
Important information for using VukaHustle.
Vuka Hustle Privacy Policy Draft
Version 7 · Effective 2026-10-01 12:01:58
Privacy Policy
Important information for using VukaHustle.
Vuka Hustle Privacy Policy
1. Who we are and this policy
UlulaLabs, registration number 2026/107064/07, of 1 Scraper Rd, Selby Ext 10, Johannesburg, South Africa (“VukaHustle”, “we”, “us” or “our”), operates the VukaHustle platform and related websites, applications, communications and support services (the “Platform”).
For the personal information described in this policy, VukaHustle is generally the responsible party under the Protection of Personal Information Act 4 of 2013 (“POPIA”). Our Information Officer is Mr G. Schoeman. You can contact us at hello@vukahustle.com.
This policy explains how we collect, use, share, store and protect personal information. It applies to people who visit our sites, create or use a VukaHustle account, operate a store through the Platform, buy from a store using the Platform, communicate with us, or otherwise interact with our services.
2. Merchant stores and their customers
VukaHustle enables independent merchants to run online stores. A merchant normally decides why and how it collects and uses the personal information of its own customers, including for its products, order fulfilment, customer service and marketing. That merchant is ordinarily the responsible party for that processing and should provide its own customer-facing privacy information.
VukaHustle may process customer information on a merchant’s behalf to provide, secure and support the Platform. In some circumstances, including platform security, fraud prevention, payment and legal compliance, VukaHustle may separately determine the purpose or means of processing and act as a responsible party. The applicable merchant and VukaHustle may each have obligations under POPIA.
3. Personal information we process
Depending on how you use the Platform, we may process:
Account and identity information: name, username, password hash, profile details, business or store details, and verification information where needed.
Contact information: email address, telephone number, physical, collection or delivery address, and social-media links that you choose to provide.
Order and transaction information: products, quantities, order status, customer messages, delivery selections, invoices, refunds, payment references and related records. Card details are handled by the relevant payment provider and should not be stored by VukaHustle except for limited payment tokens, status information or references where applicable.
Merchant and billing information: plan, subscription, tax and billing details, payout or payment-configuration information and records needed for accounting or legal compliance.
Device and usage information: IP address, browser and device data, log records, identifiers, pages and features used, performance and security events.
Support and communications: messages, feedback and information you provide when you contact us.
Cookie and similar-technology data: preferences, session information and analytics data, as described below.
We do not intentionally ask for special personal information unless it is necessary and permitted by law. Please do not send us special personal information, such as health, biometric, religious or political information, unless we specifically ask for it and explain why.
4. Why we use personal information and our grounds for doing so
We process personal information only where POPIA permits it, including where it is necessary to perform or enter into a contract, comply with law, pursue a legitimate interest that is not overridden by your rights, protect a legitimate interest of a data subject, or where you have consented.
We use information to:
create, administer and secure accounts and stores;
provide checkout, order, customer-account, payment, billing, delivery and support functions;
authenticate users, prevent fraud, misuse and security incidents, and maintain audit records;
communicate about orders, accounts, service changes, support requests and material operational matters;
comply with tax, accounting, consumer-protection, fraud-prevention and other legal obligations;
improve, test, troubleshoot and protect the Platform, using aggregated or de-identified data where reasonably possible; and
send direct marketing only where permitted by POPIA and other applicable law. You may opt out at any time through the message, your account settings or by contacting us.
Where consent is our basis for processing, you may withdraw it at any time. Withdrawal will not affect processing that was lawful before withdrawal, and may mean that we cannot provide a requested feature.
5. Information from other sources
We may receive personal information from payment, delivery, identity-verification, communications, analytics and security providers; from merchants and customers using the Platform; and from public sources where lawful. We use it for the purposes described in this policy and will take reasonable steps to provide the notice POPIA requires.
6. Sharing personal information
We may share personal information only as reasonably necessary with:
the relevant merchant or customer to create, process, fulfil and support an order;
payment providers, banks and billing partners to process or confirm payments;
delivery, collection and shipping providers selected for an order;
hosting, cloud, email, communications, security, analytics, customer-support and professional-service providers that process information under appropriate instructions and safeguards;
our affiliates, successors or advisers in connection with a restructuring, sale, financing or transfer of all or part of our business, subject to applicable law; and
regulators, law-enforcement bodies, courts or other parties where required by law or reasonably necessary to establish, exercise or defend legal rights, prevent fraud, or protect people and the Platform.
We do not sell personal information.
7. International transfers
Some service providers or systems may process personal information outside South Africa. Where that happens, we will take reasonable steps to ensure that the recipient is subject to a law, binding agreement or binding corporate rules that provide an adequate level of protection, or that another POPIA section 72 condition applies, such as your consent, performance of a contract, or protection of your legitimate interests.
8. Cookies and similar technologies
We use essential cookies and similar technologies to operate the Platform, maintain sessions, remember preferences, keep it secure and understand use of our services. Where non-essential analytics or marketing technologies are used, we will provide an appropriate notice and consent mechanism where required.
You can control some cookies through your browser settings. Blocking essential cookies may prevent parts of the Platform from working correctly.
9. Retention and deletion
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to meet legal, tax, accounting, dispute-resolution, security and record-keeping requirements, or as otherwise permitted by POPIA.
Retention periods should be configured and documented before launch. Subject to applicable law, we will delete, de-identify or securely destroy information once it is no longer required. We may retain limited information necessary to comply with law, resolve disputes, prevent fraud, enforce agreements or maintain reliable records.
10. Security and security compromises
We use reasonable technical and organisational measures appropriate to the nature of the information and risks involved, including access controls, authentication, encryption where appropriate, logging, backup and incident-management practices. No system can be guaranteed completely secure.
If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will manage the incident in line with POPIA, including notifying the Information Regulator and affected data subjects where required, after taking account of the steps necessary to determine the scope and integrity of the compromise.
11. Your rights
Subject to POPIA and applicable limitations, you may ask us to:
confirm whether we hold personal information about you and request access to it;
correct, update or complete inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading or unlawfully obtained information;
delete or destroy information that we are no longer authorised to retain;
object, on reasonable grounds, to processing based on legitimate interests or direct marketing;
withdraw consent where processing relies on consent; and
raise a concern or complaint about our processing.
To make a request, contact privacy@vukahustle.com and mark the request for the attention of the VukaHustle Information Officer. We may need to verify your identity and may ask for information necessary to process the request. We will respond in accordance with POPIA and applicable law.
You may also lodge a complaint with the Information Regulator:
Information Regulator (South Africa)
Website: https://inforegulator.org.za/
POPIA complaints email: popiacomplaints@inforegulator.co.za
General enquiries: enquiries@inforegulator.org.za
Telephone: 010 023 5200 or 0800 017 160
12. Children
The Platform is not designed for children. We do not knowingly process personal information of a child without the consent of a competent person or another lawful basis permitted by POPIA. If you believe that a child has provided personal information to us without appropriate authority, please contact privacy@vukahustle.com so that we can investigate and take appropriate action.
13. Automated decisions
We do not intend to make decisions based solely on automated processing that produce legal consequences for you or otherwise substantially affect you, unless permitted by law and accompanied by appropriate safeguards and notice.
14. Third-party sites and services
The Platform may link to or integrate with third-party services. Those services have their own privacy practices and policies. We are not responsible for their privacy practices; please review their notices before providing them with personal information.
15. Changes to this policy
We may update this policy when our processing practices, services or legal obligations change. We will publish the current version with its effective date and, where a change is material, provide additional notice where appropriate.
16. Contact details
Responsible party: Ulula Labs(PTY) Ltd
Registration number: 2026/107046/07
Physical address: 1 Scraper Rd, Selby Ext 10, Johannesburg, South Africa
Support email: hello@vukahustle.com
Information Officer: Mr G. Schoeman
Effective date: 01 October 2026
Important information for using VukaHustle.
Vuka Hustle Privacy Policy
1. Who we are and this policy
UlulaLabs, registration number 2026/107064/07, of 1 Scraper Rd, Selby Ext 10, Johannesburg, South Africa (“VukaHustle”, “we”, “us” or “our”), operates the VukaHustle platform and related websites, applications, communications and support services (the “Platform”).
For the personal information described in this policy, VukaHustle is generally the responsible party under the Protection of Personal Information Act 4 of 2013 (“POPIA”). Our Information Officer is Mr G. Schoeman. You can contact us at hello@vukahustle.com.
This policy explains how we collect, use, share, store and protect personal information. It applies to people who visit our sites, create or use a VukaHustle account, operate a store through the Platform, buy from a store using the Platform, communicate with us, or otherwise interact with our services.
2. Merchant stores and their customers
VukaHustle enables independent merchants to run online stores. A merchant normally decides why and how it collects and uses the personal information of its own customers, including for its products, order fulfilment, customer service and marketing. That merchant is ordinarily the responsible party for that processing and should provide its own customer-facing privacy information.
VukaHustle may process customer information on a merchant’s behalf to provide, secure and support the Platform. In some circumstances, including platform security, fraud prevention, payment and legal compliance, VukaHustle may separately determine the purpose or means of processing and act as a responsible party. The applicable merchant and VukaHustle may each have obligations under POPIA.
3. Personal information we process
Depending on how you use the Platform, we may process:
Account and identity information: name, username, password hash, profile details, business or store details, and verification information where needed.
Contact information: email address, telephone number, physical, collection or delivery address, and social-media links that you choose to provide.
Order and transaction information: products, quantities, order status, customer messages, delivery selections, invoices, refunds, payment references and related records. Card details are handled by the relevant payment provider and should not be stored by VukaHustle except for limited payment tokens, status information or references where applicable.
Merchant and billing information: plan, subscription, tax and billing details, payout or payment-configuration information and records needed for accounting or legal compliance.
Device and usage information: IP address, browser and device data, log records, identifiers, pages and features used, performance and security events.
Support and communications: messages, feedback and information you provide when you contact us.
Cookie and similar-technology data: preferences, session information and analytics data, as described below.
We do not intentionally ask for special personal information unless it is necessary and permitted by law. Please do not send us special personal information, such as health, biometric, religious or political information, unless we specifically ask for it and explain why.
4. Why we use personal information and our grounds for doing so
We process personal information only where POPIA permits it, including where it is necessary to perform or enter into a contract, comply with law, pursue a legitimate interest that is not overridden by your rights, protect a legitimate interest of a data subject, or where you have consented.
We use information to:
create, administer and secure accounts and stores;
provide checkout, order, customer-account, payment, billing, delivery and support functions;
authenticate users, prevent fraud, misuse and security incidents, and maintain audit records;
communicate about orders, accounts, service changes, support requests and material operational matters;
comply with tax, accounting, consumer-protection, fraud-prevention and other legal obligations;
improve, test, troubleshoot and protect the Platform, using aggregated or de-identified data where reasonably possible; and
send direct marketing only where permitted by POPIA and other applicable law. You may opt out at any time through the message, your account settings or by contacting us.
Where consent is our basis for processing, you may withdraw it at any time. Withdrawal will not affect processing that was lawful before withdrawal, and may mean that we cannot provide a requested feature.
5. Information from other sources
We may receive personal information from payment, delivery, identity-verification, communications, analytics and security providers; from merchants and customers using the Platform; and from public sources where lawful. We use it for the purposes described in this policy and will take reasonable steps to provide the notice POPIA requires.
6. Sharing personal information
We may share personal information only as reasonably necessary with:
the relevant merchant or customer to create, process, fulfil and support an order;
payment providers, banks and billing partners to process or confirm payments;
delivery, collection and shipping providers selected for an order;
hosting, cloud, email, communications, security, analytics, customer-support and professional-service providers that process information under appropriate instructions and safeguards;
our affiliates, successors or advisers in connection with a restructuring, sale, financing or transfer of all or part of our business, subject to applicable law; and
regulators, law-enforcement bodies, courts or other parties where required by law or reasonably necessary to establish, exercise or defend legal rights, prevent fraud, or protect people and the Platform.
We do not sell personal information.
7. International transfers
Some service providers or systems may process personal information outside South Africa. Where that happens, we will take reasonable steps to ensure that the recipient is subject to a law, binding agreement or binding corporate rules that provide an adequate level of protection, or that another POPIA section 72 condition applies, such as your consent, performance of a contract, or protection of your legitimate interests.
8. Cookies and similar technologies
We use essential cookies and similar technologies to operate the Platform, maintain sessions, remember preferences, keep it secure and understand use of our services. Where non-essential analytics or marketing technologies are used, we will provide an appropriate notice and consent mechanism where required.
You can control some cookies through your browser settings. Blocking essential cookies may prevent parts of the Platform from working correctly.
9. Retention and deletion
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to meet legal, tax, accounting, dispute-resolution, security and record-keeping requirements, or as otherwise permitted by POPIA.
Retention periods should be configured and documented before launch. Subject to applicable law, we will delete, de-identify or securely destroy information once it is no longer required. We may retain limited information necessary to comply with law, resolve disputes, prevent fraud, enforce agreements or maintain reliable records.
10. Security and security compromises
We use reasonable technical and organisational measures appropriate to the nature of the information and risks involved, including access controls, authentication, encryption where appropriate, logging, backup and incident-management practices. No system can be guaranteed completely secure.
If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will manage the incident in line with POPIA, including notifying the Information Regulator and affected data subjects where required, after taking account of the steps necessary to determine the scope and integrity of the compromise.
11. Your rights
Subject to POPIA and applicable limitations, you may ask us to:
confirm whether we hold personal information about you and request access to it;
correct, update or complete inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading or unlawfully obtained information;
delete or destroy information that we are no longer authorised to retain;
object, on reasonable grounds, to processing based on legitimate interests or direct marketing;
withdraw consent where processing relies on consent; and
raise a concern or complaint about our processing.
To make a request, contact privacy@vukahustle.com and mark the request for the attention of the VukaHustle Information Officer. We may need to verify your identity and may ask for information necessary to process the request. We will respond in accordance with POPIA and applicable law.
You may also lodge a complaint with the Information Regulator:
Information Regulator (South Africa)
Website: https://inforegulator.org.za/
POPIA complaints email: popiacomplaints@inforegulator.co.za
General enquiries: enquiries@inforegulator.org.za
Telephone: 010 023 5200 or 0800 017 160
12. Children
The Platform is not designed for children. We do not knowingly process personal information of a child without the consent of a competent person or another lawful basis permitted by POPIA. If you believe that a child has provided personal information to us without appropriate authority, please contact privacy@vukahustle.com so that we can investigate and take appropriate action.
13. Automated decisions
We do not intend to make decisions based solely on automated processing that produce legal consequences for you or otherwise substantially affect you, unless permitted by law and accompanied by appropriate safeguards and notice.
14. Third-party sites and services
The Platform may link to or integrate with third-party services. Those services have their own privacy practices and policies. We are not responsible for their privacy practices; please review their notices before providing them with personal information.
15. Changes to this policy
We may update this policy when our processing practices, services or legal obligations change. We will publish the current version with its effective date and, where a change is material, provide additional notice where appropriate.
16. Contact details
Responsible party: Ulula Labs(PTY) Ltd
Registration number: 2026/107046/07
Physical address: 1 Scraper Rd, Selby Ext 10, Johannesburg, South Africa
Support email: hello@vukahustle.com
Information Officer: Mr G. Schoeman
Effective date: 01 October 2026