ZONKE TECHNOLOGIES (PTY) LTD

PAIA MANUAL

Prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA), as amended.

Last updated: 8 November 2026

This manual describes the kinds of records maintained by Zonke Technologies (Pty) Ltd (“Zonke”), how to seek access to them and the categories of personal information processed by Zonke. It is prepared under section 51 of PAIA, read with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

Zonke operates a mobile-enabled ordering and delivery service for township and informal-sector retailers in South Africa. The business works with customers, wholesalers, payment service providers, logistics partners and technology service providers.

The inclusion of a record category does not establish that every record listed exists or that access will be granted. PAIA and other applicable legislation regulate disclosure.

Registered entity: Zonke Technologies (Pty) Ltd

Company registration number: 2025/211491/07

Trading name: Zonke

Website: https://zonke.online

Registered office: 15 Steenbras Street, Gallo Manor, Sandton, Gauteng, 2052, South Africa

Information Officer: Kishan Bhana

Information Officer registration: Confirmed by Information Regulator certificate issued 17 June 2026; organisation registration reference 2026-030758

PAIA and privacy enquiries: help@zonke.online

Telephone / WhatsApp: +27 78 327 8417

Physical inspection: Available on request during normal business hours; please contact the Information Officer to arrange an inspection time and location.

Postal address: 15 Steenbras Street, Gallo Manor, Sandton, Gauteng, 2052, South Africa

Deputy Information Officer: Pieter De Waal

A requester should direct PAIA requests to the Information Officer at the email address above.

The Information Regulator makes a Guide available under section 10 of PAIA describing how to exercise access-to-information rights, forms, fees and remedies. It is available at https://inforegulator.org.za/paia/.

The Information Officer can assist requesters with obtaining the Guide from the Information Regulator.

Subject to their actual availability, customers and members of the public may access the following through Zonke’s website, app or normal service channels:

• Public description of Zonke’s services and contact details.
• Published customer terms, privacy notices and other policies.
• A customer’s own accessible order status, order history, confirmations and receipts, subject to account verification.
• This manual, available to download from Zonke’s website.

No formal section 52 notice listing voluntary-disclosure categories is asserted by this manual. Other records may require a prescribed request.

To the extent applicable to its activities and registrations, Zonke may maintain records under:

• Companies Act 71 of 2008 — corporate registration, statutory records, governance and accounting.
• Income Tax Act 58 of 1962 and Tax Administration Act 28 of 2011 — tax and supporting finance records.
• Promotion of Access to Information Act 2 of 2000 — this manual and access requests.
• Protection of Personal Information Act 4 of 2013 — personal information and applicable processing records.
• Consumer Protection Act 68 of 2008 — customer complaints, transactions, refunds and product quality matters.
• Electronic Communications and Transactions Act 25 of 2002 — relevant electronic transactions and communications.
• Labour, VAT and other applicable laws — only where obligations arise.

Statutory retention does not mean records must be disclosed to every requester.

• Corporate and governance: incorporation documents, director/shareholder records, resolutions and commercial contracts.
• Finance and tax: invoices, bank and accounting records, payment reconciliations, tax documents and supplier settlements.
• Customer and shop accounts: registration and account information, contact details, shop information and support messages.
• Orders and deliveries: baskets, orders, payments, refunds, delivery addresses and statuses, delivery instructions and proof of delivery.
• Suppliers and logistics: contracts, product/stock/price feeds, delivery manifests, settlement records and operational communications.
• Technology and security: application administration records, service-provider agreements and technical or security-related records.
• People: employment, contractor and director records, where held.

Certain categories may be protected by privacy, privilege, contractual confidentiality, commercial sensitivity or security considerations.

Zonke may process personal information for customer onboarding, account authentication, order and payment processing, stock and delivery coordination, customer communications and support, service reliability, product safety/recalls, fraud prevention, business management, lawful marketing and legal compliance.

• Customers, shop owners and authorised users: names, mobile numbers, account and OTP records, shop details, delivery locations, purchase history, device and usage data.
• Delivery recipients: contact details, location, delivery instructions and proof-of-delivery information where collected.
• Supplier, logistics and professional counterparties: business contact information, contracts and correspondence.
• Directors, staff, contractors and applicants (where applicable): identity, role, contractual, payment and employment-related data.
• Website/app visitors and support contacts: supplied contact information, device, IP, technical and communication information where collected.

Payment providers process payment-card information. Zonke does not store full payment-card numbers or CVVs, although limited payment references, statuses, tokens or masked identifiers may be retained.

Relevant categories include wholesalers, couriers, payment processors and financial institutions, cloud hosting and app providers, messaging/OTP providers, analytics and support services, professional advisers and lawful public authorities. Information is shared only for lawful operational or compliance reasons.

Zonke may use service providers whose systems are located or supported outside South Africa for cloud infrastructure, authentication, payment processing, communications, customer support or analytics. Such processing may involve customer account information, contact details, transaction references, delivery details or technical usage information, as relevant to each provider. Any transfer of personal information outside South Africa is subject to the applicable requirements of section 72 of POPIA.

Zonke seeks to protect the confidentiality, integrity and availability of personal information through appropriate organisational and technical safeguards. Depending on the system, these may include authentication, restricted access permissions, encryption, logging, backups, appropriate payment-provider protections and incident-response processes. Safeguards are reviewed as the business and its systems evolve.

A person requesting access to records under PAIA should:

1. Obtain and complete prescribed Form 2 (Request for Access to Record) from https://inforegulator.org.za/paia/.
2. Send it to help@zonke.online, marked for the attention of the Information Officer. Contact the Information Officer to arrange physical submission if required.
3. Identify the requested record sufficiently and provide identity and authority information when required.
4. Explain the right to be exercised or protected and why the record is required for that right, as required for private-body requests under PAIA.
5. Specify the preferred form of access and pay applicable fees when lawfully requested.

The Information Officer will consider the request in accordance with PAIA and POPIA, including protections for third-party privacy, confidential commercial information, legally privileged records and security-sensitive information.

Data subjects may also exercise their rights under POPIA. A request by a data subject for access to their own personal information (section 23 of POPIA) is dealt with under the PAIA access procedure above, as provided for in section 25 of POPIA; Zonke will notify you of any applicable prescribed fee. An objection to the processing of personal information (section 11(3) of POPIA) should be submitted on Form 1 of the POPIA Regulations, and a request for correction or deletion of personal information (section 24 of POPIA) on Form 2 of the POPIA Regulations, to help@zonke.online. Both forms are available from the Information Regulator at https://inforegulator.org.za.

Any applicable request fees, reproduction charges, search/preparation fees and exemptions are governed by the current PAIA Regulations and published fee schedule. The Information Officer will give notice of fees where required. Requesters should check https://inforegulator.org.za/paia/ for current forms and fees rather than relying on a potentially outdated amount in this manual.

A decision on a valid request must ordinarily be communicated within 30 days, subject to a lawful extension. A dissatisfied requester (or affected third party) may lodge a complaint with the Information Regulator on Form 5 of the PAIA Regulations within 180 days of receiving Zonke's decision. In terms of section 78 of PAIA, a requester or third party may only apply to a court for relief after exhausting this complaints procedure under section 77A. Ordinary private bodies do not have an internal PAIA appeal procedure.

This manual is available free of charge from https://zonke.online. Requests for an electronic copy may be sent to help@zonke.online.

Physical inspection during normal business hours can be arranged by contacting the Information Officer at help@zonke.online. The time and venue of inspection will be communicated to the requester. The manual is also made available on request in accordance with section 51(3) of PAIA.

Zonke will make the manual available to the Information Regulator on request. Reasonable prescribed charges may apply for reproduction where legally allowed.

Zonke will review and update this manual as required by PAIA and when its operations, contact details, record categories or processing practices change.

Information Officer: Kishan Bhana