Privacy Policy

This Privacy Policy explains how Vuzo Consultants (Pty) Ltd (to be renamed Zula SA (Pty) Ltd) ("Zula", "we", "us", "our") collects, uses, stores, shares, and protects your personal information when you use the Zula platform — including our mobile application, website, and related services.

We are committed to protecting your privacy in accordance with the Protection of Personal Information Act, 2013 (POPIA) and all applicable South African data protection legislation.

By using the Zula platform, you consent to the collection and processing of your personal information as described in this policy.

The responsible party for the processing of your personal information is:

Vuzo Consultants (Pty) Ltd
Republic of South Africa

Email: support@gozula.com

Our designated Information Officer can be contacted at privacy@gozula.com .

Information You Provide

Information We Collect Automatically

Information from Third Parties

We process your personal information for the following purposes:

• Creating and managing your account
• Processing and facilitating bookings
• Processing payments (deposits, settlements, refunds)
• Sending OTP verification codes via SMS
• Sending push notifications (booking updates, driver assignments, messages)
• Sending email communications (receipts, platform updates)
• Calculating and displaying pricing estimates
• Facilitating in-app chat between guests and operators
• Maintaining guest reliability scores and ratings
• Detecting and preventing fraud, abuse, and safety incidents
• Improving and optimising the platform
• Complying with legal obligations and resolving disputes

We will not process your personal information for materially different purposes without notifying you and, where required, obtaining your consent.

We do not sell your personal information to third parties.

Operators and Drivers

When you make a booking, the assigned operator and driver receive your name, phone number, addresses, trip details, and any preferences you provided. This is necessary to fulfil the transport service.

Service Providers

Legal and Safety

We may disclose your information if required to:

• comply with a court order, subpoena, or legal process
• enforce our Terms and Conditions
• protect the safety, rights, or property of Zula, our users, or the public
• investigate suspected fraud or violations of our Terms.

Some of our service providers process data outside of South Africa. Where personal information is transferred internationally, we ensure that:

• the recipient is subject to equivalent data protection laws, or
• appropriate safeguards are in place (such as contractual obligations) to protect your information in accordance with POPIA.

When you delete your account, your personal information is removed within 30 days. Anonymised booking records and financial data are retained as required by law.

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption in transit — all data uses TLS/HTTPS encryption
• Encryption at rest — database and infrastructure data is encrypted
• Token-based authentication — API access secured with rotating tokens
• Secure payment handling — card details tokenised by Paystack (PCI DSS Level 1)
• Access controls — internal access restricted on a need-to-know basis

While we take all reasonable steps to protect your data, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

The Zula website uses essential cookies required for the site to function (such as session cookies for logged-in users). We do not use third-party advertising or tracking cookies.

The Zula mobile app does not use cookies. We collect usage data as described in Section 3 to improve the platform experience.

As a data subject, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information
• Objection — object to processing on reasonable grounds
• Restriction — request restricted processing in certain circumstances
• Data portability — request your data in a structured, commonly used format
• Withdraw consent — withdraw consent at any time

To exercise any of these rights, contact us at privacy@gozula.com . We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator (South Africa) at enquiries@inforegulator.org.za .

Zula is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via push notification or email at least 14 days before taking effect.

Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

For questions about this Privacy Policy or your personal information:

Vuzo Consultants (Pty) Ltd

General: support@gozula.com

Privacy: privacy@gozula.com

gozula.com