Privacy Policy

Mariba Holdings (PTY) LTD
Registration Number: 2013/191058/07
Email: hello@mariba.co.za

Last Updated: June 2026

1. Introduction

This Privacy Policy describes how Mariba Holdings (PTY) LTD ("we", "us", "our") collects, uses, processes, and protects personal information in connection with the use of our web-based application ("the Platform").

We are committed to protecting personal information in accordance with applicable data protection laws, including the Protection of Personal Information Act (POPIA) and, where applicable, international data protection regulations.

By using the Platform, you agree to the terms of this Privacy Policy.

2. Our Role

We operate primarily as a data processor.

Users of the Platform ("Users") upload, manage, and control their own data, including data relating to third parties (such as clients, customers, and suppliers).

Users remain solely responsible for:

The legality of the data they upload
Obtaining any required consent from third parties
Ensuring compliance with applicable data protection laws

We process such data only on behalf of Users and in accordance with their instructions.

3. Information We Collect

We may collect and process the following categories of information:

3.1 User Account Information

Full name
Email address
Encrypted password
User role and permissions
Login activity and timestamps
Two-factor authentication data (where applicable)

3.2 Organisation Information

Business name
Registration number
VAT number
Contact details (address, email, phone)
Account settings and preferences

3.3 Client and Contact Data (Uploaded by Users)

Names and surnames
Company names
Email addresses
Phone numbers
Addresses
Notes and related information

3.4 Financial and Transaction Data

Invoice data
Payment records
Transaction history
Bank-related information entered by Users

3.5 Documents and Files

Uploaded files (e.g., PDFs, images, documents)
Reports and associated media (including video links)

3.6 Technical and Usage Data

IP addresses
Device and session information
Activity logs and audit trails
System interaction data

3.7 Cookies

We use session-based cookies to:

Maintain user sessions
Enable secure authentication

We may implement analytics tools (such as Google Analytics) to better understand platform usage.

4. How We Use Information

We use personal information strictly for the following purposes:

To provide and operate the Platform
To authenticate users and maintain account security
To enable core functionality (jobs, invoices, documents, etc.)
To communicate with Users (including system notifications and updates)
To provide customer support
To improve and optimise platform performance
To analyse usage patterns and improve user experience
To send transactional and marketing communications (where permitted)

We do not sell personal data.

5. Third-Party Services

We may use third-party service providers to support our operations, including:

Payment processing providers
Hosting and infrastructure providers
Email delivery services
Analytics tools

Examples include:

PayFast
PayPal
Elitehost

These providers may process personal information only as necessary to perform their services and are expected to maintain appropriate security measures.

6. Data Sharing

We do not share personal information with third parties except:

As required to provide the Platform
With service providers acting on our behalf
Where required by law
To protect our legal rights

7. Data Retention

We retain personal information:

For as long as the User account remains active
As necessary to provide the Platform and services

Upon account termination, data may be deleted in accordance with our internal processes.

Users are responsible for managing and deleting their own data where functionality is provided.

8. Data Security

We implement reasonable technical and organisational safeguards to protect personal information, including:

Secure password hashing
Access control and role-based permissions
Session management controls
Audit logging and monitoring
Protection against unauthorised access

However, no system can be guaranteed to be completely secure. Users use the Platform at their own risk.

9. User Rights

Subject to applicable law, Users may have the right to:

Access their personal information
Correct or update their information
Request deletion of their data
Object to certain processing activities

Requests may be submitted to: hello@mariba.co.za

10. Third-Party Data Responsibility

Users who upload or manage personal data of third parties (such as clients or customers) are solely responsible for:

Obtaining consent where required
Ensuring lawful processing
Complying with applicable data protection laws

We accept no liability for unlawful or unauthorised data uploaded by Users.

11. International Use

The Platform may be used globally. By using the Platform, Users acknowledge that their data may be processed in jurisdictions outside their own.

12. Marketing Communications

We may send Users:

Service-related communications (mandatory)
Marketing communications (where permitted)

Users may opt out of marketing communications at any time.

13. Children

The Platform is not intended for individuals under the age of 18.

By using the Platform, Users confirm that they have the legal capacity to enter into a binding agreement.

14. Governing Law

This Privacy Policy is governed by the laws of the Republic of South Africa.

Any disputes arising in connection with this Policy shall be subject to the jurisdiction of South African courts.

15. Changes to This Policy

We may update this Privacy Policy from time to time.

Users will be notified of material changes where appropriate. Continued use of the Platform constitutes acceptance of the updated Policy.

16. Contact

For any questions regarding this Privacy Policy, please contact:

Mariba Holdings (PTY) LTD
Email: hello@mariba.co.za