Privacy Notice

This Privacy Notice explains how MEEKY STORE PTY LTD and its in-country logistics and fulfillment operator MPX Global Zimbabwe (collectively, "MeekyStore", "we", "us", or "our") collect, use, store, process, share, and protect your personal information when you visit, register, shop, or utilize services on MeekyStore.co.zw (the "Platform"). We are committed to maintaining the highest standards of data privacy, confidentiality, and security in compliance with applicable cross-border data protection legislation, including: • The Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. • The Cyber and Data Protection Act [Chapter 12:07] and Statutory Instrument 155 of 2024 of Zimbabwe (regulated by POTRAZ).

• Responsible Party / Data Controller: MEEKY STORE PTY LTD (registered with the CIPC in South Africa) determines the purposes and means of processing personal data captured across the Platform, user account management, digital utility integrations, payment webhooks, and core web applications. • Data Processor / Operator: MPX Global Zimbabwe processes personal logistics data, delivery addresses, identity numbers, and consignment declarations strictly to perform customs clearance, international freight forwarding (air/sea), local warehouse storage, and last-mile door-to-door fulfillment within Zimbabwe.

• Account Registration: Full name, email address, contact phone number(s), date of birth, and account password. • KYC & Customs Declarations: National Identity Number (ID), Passport details, Tax Identification Number (TIN/BP number) where required for international freight clearance by the Zimbabwe Revenue Authority (ZIMRA) or South African Revenue Service (SARS).

• Order & Payment Details: Transaction history, items purchased, payment receipts, mobile money numbers (EcoCash, OneMoney), banking details for EFTs, and transaction IDs provided by integrated payment gateways (Pesepay). Note: MeekyStore does not store raw credit card CVV numbers or full card numbers on its servers. • Digital Utility Identifiers: ZETDC (ZESA) electricity meter numbers, DStv smartcard numbers, EcoSpot Wi-Fi account details, and mobile airtime top-up recipient numbers.

Physical delivery addresses, GPS location tags for doorstep delivery, local pickup hub preferences in Harare and across Zimbabwe, consignee details, and parcel tracking histories handled via MPX Global Zimbabwe.

IP address, browser type, device information, operating system, network connection type, referral URLs, time zone settings, and interaction cookies.

• Contractual Performance: Processing is necessary to fulfill our contract with you (e.g., delivering purchased products, generating utility tokens, or processing payments). • Legal Obligation: Compliance with statutory obligations, including customs tax filings, anti-money laundering regulations, and law enforcement requests. • Legitimate Interest: To secure our Platform, prevent cyber fraud, manage multi-vendor payout disputes, and optimize services. • Consent: Where you have explicitly opted in to receive direct marketing communications, news on global sourcing routes, or promotional discounts. You may withdraw consent at any time.

We do not sell, rent, or trade your personal data. We share your information only with authorized third parties bound by strict confidentiality and data protection obligations: • Fulfillment Partner (MPX Global Zimbabwe): Sharing shipping details, contact numbers, and customs declarations to manage air/sea cargo and local deliveries. • Payment Gateways & Utilities: Transmitting transaction totals and account identifiers to Pesepay, EcoCash, OneMoney, ZETDC, DStv, and mobile telecommunication networks to process payments and issue instant tokens. • Independent Vendors: Sharing delivery recipient names and physical delivery addresses with independent sellers operating "Booths" on MeekyStore solely for fulfilling seller-handled orders. • Cloud Infrastructure Providers: Hosting databases and web applications on secure cloud infrastructure (e.g., Cloudflare, Firebase, Supabase) with encrypted data storage. • Regulatory Authorities: Disclosing records when legally compelled by law enforcement, POTRAZ, ZIMRA, or judicial authorities in Zimbabwe or South Africa.

Because MeekyStore operates across borders (incorporation in South Africa, web infrastructure globally distributed, and physical logistics in Zimbabwe), your data may be transferred, stored, and processed internationally. We ensure all cross-border data transfers comply with Section 72 of POPIA and Section 25 of the Cyber and Data Protection Act: • Transfers occur only to jurisdictions that provide adequate levels of data protection, OR • Transfers are governed by legally binding Operator Contracts and Data Processing Agreements enforcing equivalent security standards and data subject rights.

MeekyStore uses essential, functional, and analytical cookies to maintain session states, remember shopping cart items, secure user logins, and analyze web traffic. • Essential Cookies: Required for basic platform navigation, shopping cart persistence, and checkout security. • Analytical Cookies: Help us understand user behavior, page load speeds, and feature usage to improve user experience. You can manage or disable non-essential cookies through your browser settings, though disabling essential cookies may impact checkout functionality.

We implement robust technical, physical, and organizational security measures to protect your data against unauthorized access, loss, destruction, or alteration: • TLS/SSL encryption for all data transmitted between your browser and our servers. • Encryption of stored databases and restricted access protocols for customer records. • Regular security assessments and monitoring of API webhooks.

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Notice, satisfy legal, accounting, or customs retention requirements (typically up to 7 years for financial and trade records), or resolve ongoing contractual disputes.

Under POPIA and the Cyber and Data Protection Act, you possess specific rights regarding your personal information: • Right of Access: Request confirmation of whether we hold your personal data and obtain a copy of your records. • Right to Rectification: Request correction or updating of inaccurate, incomplete, or outdated personal information. • Right to Deletion / Erasure: Request the deletion of your personal data where there is no legal obligation or compelling legitimate ground to retain it. • Right to Object: Object to the processing of your personal data for direct marketing or on grounds relating to your particular situation. • Right to Complain: Submit a complaint to the relevant regulatory authority: - South Africa: Information Regulator ([email protected]) - Zimbabwe: Postal and Telecommunications Regulatory Authority of Zimbabwe - POTRAZ ([email protected])

To exercise your data subject rights, update your preferences, or submit inquiries regarding our privacy practices: • Data Protection Officer (DPO) / Information Officer: - Email: [email protected] / [email protected] • Platform Operator: MEEKY STORE PTY LTD (South Africa) - Postal Address: Johannesburg, South Africa • Logistics & In-Country Representative: MPX Global Zimbabwe - Physical Hub: Eastgate Market, Harare, Zimbabwe • Official Customer Helpline: +263 77 886 6087