MelonBusiness Privacy Policy

1. Who we are

1.1 This Privacy Policy explains how Melon Mobile BusinessProprietary Limited (registration number 2023/952122/07) ("Melon","we", "us" or "our") collects, uses, shares andprotects personal information when businesses use Melon Business. It is writtento comply with the Protection of Personal Information Act 4 of 2013 (POPIA).

1.2 Melon is the responsible party for the personalinformation described in this policy. We may share information with othercompanies in the Melon group for the purposes set out in this policy.

1.3 Our address is South Gate Office Park, Tyger Waterfront,Pro Sano Park, Fountain Road, Carl Cronje Drive, Bellville, Western Cape, 7530.

2. Our Information Officer

2.1 Our Information Officer is registered with the InformationRegulator. You can contact our Information Officer about anything in thispolicy at legal@melonmobile.co.za.

2.2 Our PAIA manual explains how to request access to recordswe hold. It is available on request from our Information Officer.

3. Whose information this covers

3.1 This policy applies to personal information about:

  • the business that holds the Account, which POPIA alsoprotects
  • the business's directors, owners and representatives
  • Administrators who manage the Account in the MelonBusiness Portal
  • Users, such as employees, who use SIMs on the Account
  • visitors to our website
  • ‍Business information: the business's name,registration number, registration documents, address and contact details.Representative and Administrator information:
  • Representative and Administrator information:names, ID or passport numbers, contact details and Portal login details.RICA verification information:
  • RICA verification information: a copy of the IDdocument and a selfie (facial image) of each person a SIM is registered to,which RICA requires us to use to verify identity.Account and usage information:
  • Account and usage information: Plans, top-ups,balances, data use, call and SMS records, invoices and support history.Payment information:
  • Payment information: card details andtransaction history. Card information is used only to process payments andprevent fraud, and is processed by our third-party payment service provider.Device and technical information:
  • Device and technical information: device type,operating system, SIM and eSIM identifiers, IP address and app version.Location information:
  • Location information: the network location of aSIM when it connects to cell towers, which is needed to route calls and dataand is processed as the law requires.

3.2 The business that holds the Account must tell its Usersthat their information will be shared with us to provide the Service.

4. What we collect

4.1 We collect only what we need to provide the Service, meetour legal obligations and improve what we offer. This includes:

  • ‍To provide the Service: opening and managing theAccount, activating SIMs, providing Plans, billing and support.To meet our legal obligations:
  • To meet our legal obligations: RICA, tax laws,ICASA regulations and lawful requests from authorities.For our legitimate interests:
  • For our legitimate interests: preventing fraudand abuse, keeping our network and systems secure, and improving the Service.With consent:
  • With consent: where consent is needed, forexample for some marketing. Consent can be withdrawn at any time.

4.2 Special personal information: The selfie used toverify identity for RICA is biometric information, which is special personalinformation under POPIA. We process it only to verify identity, as RICArequires, and keep it secure.

5. How we collect it

  • directly from the business, its Administrators and itsUsers, when they sign up, complete RICA, manage the Account or contact us
  • automatically, when SIMs are used on our network andwhen the Portal, app or website is used
  • from third parties, such as our network partner MTN andour payment provider

5.1 We collect personal information:

6. How we use it and why

6.1 We use personal information only where POPIA allows it:

6.2 We share a business's usage and billing information withits Administrators, so they can manage the Account.

7. Marketing

7.1 We may send the business and its Administrators marketingabout similar Melon products and services. Anyone can opt out at any time usingthe opt-out or unsubscribe option in any marketing message. Opting out won'taffect service messages about the Account.

7.2 We don't sell personal information.

8. Who we share it with

8.1 We share personal information only as needed for thepurposes in this policy, with:

  • the business's Administrators
  • our network partner, MTN
  • service providers who act for us, such as cloudhosting, payment processing, identity verification, SIM delivery, customersupport and analytics providers
  • other companies in the Melon group
  • regulators, law enforcement and courts, where the lawrequires it, including under RICA
  • our professional advisers, such as auditors and lawyers
  • a buyer or investor, if all or part of our business issold or restructured

8.2 Service providers who process information for us must keepit confidential and secure under written agreements.

9. Transfers outside South Africa

9.1 Some of our service providers store or process informationoutside South Africa. We do this only where POPIA allows it, for example wherethe recipient is bound by laws or an agreement that give similar protection.

10. How long we keep it

10.1 We keep personal information only for as long as we needit for the purposes in this policy, or as the law requires. RICA informationand communication-related information are kept for the periods required by RICAand its directives, which can be up to five years after the service ends.Financial and tax records are kept for 5 years.

10.2 When we no longer need personal information, we delete itor de-identify it.

11. Security and breaches

11.1 We use appropriate technical and organisational measuresto protect personal information, including encryption, access controls andsecure storage.

11.2 If we have reasonable grounds to believe that personalinformation has been accessed or acquired without authorisation, we will notifythe Information Regulator and the people affected as soon as reasonablypossible, as POPIA requires.

12. Your rights

12.1 Under POPIA, you have the right to ask for access to yourpersonal information, have it corrected or deleted, object to its processing,withdraw consent and complain to the Information Regulator.

12.2 To use these rights, email legal@melonmobile.co.za. Wewill respond within 30 days and may need to verify your identity first. We mayhave to keep some information, such as RICA records, where the law requires usto.

13. Cookies and analytics

13.1 Our website uses cookies and Google Analytics tounderstand how the site is used. You can block or delete cookies in yourbrowser settings, but some parts of the website may not work properly.

14. Complaints

14.1 If you have a concern about how we handle personalinformation, please contact our Information Officer at legal@melonmobile.co.za first.

14.2 You also have the right to complain to the Information Regulator:

Information Regulator: inforegulator.org.za
POPIA: complaints@inforegulator.org.za

15. Changes to this policy

15.1 We may update this policy from time to time. We will tellAccount holders about material changes before they take effect.

Company information
Melon Mobile Business Proprietary Limited
Registration number:2023/952122/07

South Gate Office Park, TygerWaterfront, Pro Sano Park
Fountain Road, Carl Cronje Drive
Bellville, WesternCape, 7530

Information Officer: legal@melonmobile.co.za