STAG Privacy Policy

1. Information STAG may process

Depending on the modules enabled by a participating retailer, STAG may process account and identity information, contact details, employee or user-role information, customer or member records, transaction and payment-allocation records, product and stock information, audit logs, device or technical information, and communications sent to support.

2. Why information is processed

Information may be processed to authenticate users, provide the STAG service, perform requested retail workflows, maintain audit and security records, synchronise authorised transactions, support participating retailers, troubleshoot the service, protect accounts, meet contractual obligations, and comply with applicable law.

3. Retail clients and responsibilities

Each retailer using STAG is responsible for ensuring that it has an appropriate lawful basis and notices for the personal information it chooses to collect and use through the platform. Retail clients control which authorised staff may access their STAG environment and are responsible for the accuracy and lawfulness of data they enter.

4. Sharing and service providers

Keyemani does not sell personal information. Information may be made available to the relevant retail client, authorised users of that client, infrastructure or technology providers used to operate STAG, professional advisers where necessary, and public authorities where disclosure is lawfully required. Access is limited to what is reasonably necessary for the relevant purpose.

5. Security

Keyemani uses reasonable technical and organisational safeguards designed to protect STAG information. These may include role-based access, authentication controls, logging, restricted administrative access, encrypted network transport where supported, backups, and security updates. No system can guarantee absolute security.

6. Retention

Information is retained for as long as reasonably required to provide STAG, meet the retailer's operational and contractual requirements, maintain legitimate audit records, resolve disputes, and comply with applicable legal, tax, accounting or regulatory obligations. Retention may differ by data type and client arrangement.

7. Your privacy rights

Where South African law applies, the Protection of Personal Information Act 4 of 2013 (POPIA) provides rights relating to personal information. Depending on the circumstances, a person may request access to, correction of, or deletion of information, or object to certain processing. Requests concerning information controlled by a participating retailer may need to be directed to that retailer.

8. Children and special personal information

STAG is not intended to encourage unnecessary collection of children's or special personal information. A retailer enabling processing of such information is responsible for ensuring that the processing is lawful and that any additional approvals, consents or safeguards required by applicable law are in place.

9. International processing

Technology providers may process or store information in jurisdictions outside South Africa. Where cross-border processing occurs, Keyemani and participating retailers should use appropriate contractual, organisational and legal safeguards required by applicable law.

10. Changes to this policy

This policy may be updated as STAG develops, legal requirements change, or platform features are added. The current version will be published on this page with its effective date.

11. Contact

Privacy enquiries relating to STAG may be sent to george@keyemani.co.za. For information held primarily on behalf of a retail client, Keyemani may refer the request to that client for handling.