Your information deserves clarity.
Last updated: 21 September 2026 · Katora Tech
Responsible party and contact
Katora Tech, registration 2025/300000/07, operates PayMart and is responsible for the personal information it processes. Contact info@katora.co.za or write to 12907 Budlelwano Street, Palm Ridge Extension 8, Alberton, 1458, South Africa. Use “Privacy request” in the subject to help us route your enquiry.
Information we process
Depending on the features you use, we process your phone number, name, profile photo, email, account and transaction records, messages, order and delivery information, and technical information such as device or request logs. Identity numbers and supporting documents may be required for verification. This public website has no registration form or advertising trackers; its hosting provider processes technical requests needed to serve and secure it.
Why we use information
We use information to create and operate accounts, authenticate users, fulfil requests and orders, provide support, prevent fraud, secure the service and meet legal obligations. Processing relies on the applicable lawful basis, such as performing an agreement, complying with law, legitimate interests or consent where required. We do not use your contact details for unsolicited marketing without a lawful basis and an appropriate opt-out.
Photos and device permissions
A profile photo is required during app registration. Camera and photo access let you capture or choose that image and upload other content you request. QR scanning uses the camera. Location may support nearby services and delivery. You can manage permissions in device settings; a feature may not work when its required permission is denied. Your profile image can be visible to people you interact with and is stored as a publicly retrievable image; do not use an identity document as your avatar.
Who receives information
We share relevant information with providers needed to deliver the feature you choose, such as Firebase/Google for authentication and hosting, payment processors, verification providers, communications providers, and participating sellers or delivery partners. Card checkout is handled through the payment provider. We may disclose information where legally required or needed to protect lawful rights. We do not sell personal information.
Cross-border processing and protection
Technology providers may process information outside South Africa. Where information is transferred internationally, we must use safeguards required by POPIA, such as adequate legal protection or appropriate contractual commitments. We use access controls, encrypted connections and other technical and organisational measures appropriate to the information. No online service can guarantee absolute security.
Retention
We retain information for as long as needed for the stated purpose, legal obligations, dispute resolution and fraud prevention. Account closure does not automatically erase transaction records that must lawfully be kept. When information is no longer needed and no lawful retention basis remains, it should be deleted, destroyed or de-identified.
Your rights
You may request access to your information, correction of inaccurate data, or deletion where legally available; object to applicable processing; or withdraw consent for processing based on consent. We may need to verify your identity securely. Withdrawing consent does not invalidate earlier lawful processing. Contact info@katora.co.za. You may complain to South Africa’s Information Regulator at inforegulator.org.za/complaints/.
Updates
We will update this page as services or processing practices change. Material changes will be communicated through an appropriate channel. Read the latest policy before using a new feature.