Legal

Security Policy

Important information for using VukaHustle.

VukaHustle Security Policy

vukahustle.com | UlulaLabs (Pty) Ltd, Registration number 2026/107064/07 | Effective date: 09 October 2026

1. About this policy

This Security Policy explains how UlulaLabs (Pty) Ltd, trading as VukaHustle ("VukaHustle", "we", "us" or "our"), protects the VukaHustle platform (the "Platform"), the payments made to us, and the information of Merchants and their customers. It should be read with our Privacy Policy and Terms and Conditions.

2. Secure connections

All pages of vukahustle.com and of stores hosted on the Platform are served over encrypted HTTPS connections, so that information sent between your browser and the Platform is encrypted in transit. Look for the padlock in your browser's address bar.

3. Payment security

Payments to VukaHustle for subscriptions and plans are processed by an independent payment provider. We have selected Peach Payments as that provider, subject to activation of its payment service. Card details are entered on the payment provider's secure payment pages and are handled by that provider in line with the card industry's data security standard (PCI DSS).
We never see or store your full card details. We receive only limited information from the payment provider, such as payment status and reference numbers.
Payments to Merchants made in a store are processed by the Merchant's own independent payment provider, such as PayFast or Yoco. VukaHustle does not receive, hold or process those payments.
All payments to VukaHustle are processed in South African Rand (ZAR).

4. How we protect information

We use reasonable technical and organisational measures appropriate to the information we hold, including:

Access controls: access to systems and data is limited to authorised people who need it, with role-based permissions;
Authentication: account sign-in is protected, and passwords are stored only in hashed form, never in plain text;
Encryption: information is encrypted in transit and, where appropriate, at rest;
Monitoring: system access and security events are logged and monitored;
Backups: data is backed up regularly so that it can be restored after a failure;
Service providers: any service provider that processes personal information on our behalf is bound by written terms to keep it confidential and secure, as required by section 21 of the Protection of Personal Information Act 4 of 2013 ("POPIA"); and
Data minimisation: we collect only the information we need, as described in our Privacy Policy.

5. Security incidents

We have procedures for identifying, containing and investigating security incidents. If we have reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and the people affected as required by section 22 of POPIA, as soon as reasonably possible.

6. Keeping your account safe

Security is shared. Please help protect your account by:

using a strong password that you do not use anywhere else, and never sharing it;
signing out on shared or public devices;
keeping your email account secure, because it can be used to reset your password;
giving access to your store only to people you trust; and
telling us immediately at hello@vukahustle.com if you suspect that someone has accessed your account.

We will never ask for your password, one-time PIN or full card details by email, telephone, WhatsApp or SMS. If you receive such a request claiming to be from VukaHustle, do not respond, and report it to us.

7. Reporting a security concern

If you believe you have found a security vulnerability in the Platform, or you notice suspicious activity, please email hello@vukahustle.com with "Security" in the subject line and enough detail for us to investigate. Please do not access, change or delete other people's information, or disrupt the Platform, while investigating. We will acknowledge your report and keep you informed of our progress.

8. Changes to this policy

We may update this policy as our security practices develop. The current version, with its effective date, is always published on our website.

9. Contact details

Legal entity: UlulaLabs (Pty) Ltd, trading as VukaHustle
Registration number: 2026/107064/07
Physical address: Dynamic Technologies House, 2 Venus Rd, Melrose Estate, Johannesburg, South Africa
Support email: hello@vukahustle.com
Support tel: +27 010 040 1090
Support hours: Monday to Friday, 08:00 to 17:00 (South African time), excluding public holidays
Information Officer: Mr G. Schoeman (Director)
Website: vukahustle.com
Effective date: 09 October 2026