Privacy Policy

1. Who we are

Z-Connect (Pty) Ltd ("Z-Connect", "we", "us", "our") is a South African company, registration number pending, operated by Zetnet Mobile (Pty) Ltd, a licensed mobile virtual network operator. Our registered address is 02 Rhodesadrift Street, Bendor, Polokwane, 0699.

We are the responsible party for your personal information as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA").

You can reach our Information Officer at or +27 15 101 1336.

2. Information we collect

We collect personal information that you provide directly, that arises from your use of our services, or that we receive from authorised third parties:

2.1 Information you provide

• Full name, identity number or passport number (for RICA and KYC)
• Date of birth and gender
• South African residential address and proof of address
• Contact details: mobile number, email address
• Banking details and payment card information
• Selfie or biometric image (for remote identity verification)
• Next-of-kin and beneficiary details (for insurance products)

2.2 Information generated by your use of our services

• Call detail records, data usage records and SMS metadata
• SIM card identifiers (IMSI, ICCID) and device identifiers (IMEI)
• Location data (cell-tower level, used for network and fraud purposes)
• Website and app usage: pages visited, features used, session duration
• Customer-service interactions: call recordings, chat transcripts, tickets
• Financial transaction history: wallet movements, payments, advances

2.3 Information from third parties

• Credit bureau reports (for device finance and advance applications)
• Identity verification results from SASSA or the Department of Home Affairs
• Network data from Vodacom under our wholesale agreement
• Fraud and risk data from industry shared databases

3. How we use your information

We process your personal information only for the lawful purposes listed below. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Purpose	Legal basis (POPIA s11)
Providing mobile, internet, wallet and insurance services you have contracted for	Contractual necessity
RICA registration and regulatory compliance	Legal obligation
KYC, credit and fraud checks for financial products	Legitimate interest / Legal obligation
Billing, payment processing and debt collection	Contractual necessity
Customer service and dispute resolution	Contractual necessity
Network management and quality assurance	Legitimate interest
Marketing our own products and related offers	Legitimate interest (existing customers) / Consent (new contacts)
Product analytics and service improvement	Legitimate interest
Safety, security and fraud prevention	Legitimate interest / Legal obligation

4. Sharing your information

We do not sell your personal information. We share it only as necessary:

• Vodacom — our wholesale network partner, for call routing, data delivery and roaming
• Licensed financial partners — banks, insurers and credit providers who underwrite our money products
• Identity and credit bureaus — for RICA and credit assessments
• Payment processors — for billing and wallet transactions
• IT and cloud providers — who process data on our behalf under written operator agreements
• Law enforcement and regulators — where required by law or court order
• Church and community distribution partners — name and contact only, to the extent needed to manage your account relationship through that partner, with your consent

All operators (processors) are bound by written agreements that prohibit them from using your data for their own purposes.

5. International transfers

Some of our service providers are located outside South Africa (for example, cloud infrastructure). Where personal information is transferred internationally, we ensure adequate protection through binding contractual clauses that meet the standard required by POPIA section 72.

6. Retention

We keep your personal information only as long as necessary for the purpose for which it was collected, or as required by law. Key retention periods:

• RICA records — 5 years after the SIM is deactivated (as required by RICA)
• Financial records — 5 years after the transaction (as required by FICA)
• Customer service records — 3 years
• Call recordings — 1 year
• Website analytics — 26 months

7. Security

We implement appropriate technical and organisational measures to protect your personal information against loss, theft, unauthorised access, disclosure, copying, use or modification. These include:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and least-privilege principles
• Regular security assessments and penetration tests
• Staff training on data protection obligations

If we become aware of a personal information breach that poses a real risk of harm to you, we will notify the Information Regulator and you as soon as reasonably possible.

8. Your rights

Under POPIA you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request that we delete your information where we no longer have a lawful basis to hold it
• Object — object to processing based on legitimate interest, including direct marketing
• Withdraw consent — where processing is based on your consent
• Complain — lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email . We will respond within 30 calendar days. We may need to verify your identity before acting on a request.

Information Regulator of South Africa: inforegulator.org.za · complaints.IR​[at]​justice.gov.za

9. Cookies and tracking

Our website uses strictly necessary session cookies to operate correctly, and analytics cookies (aggregated, non-identifying) to help us improve the site. We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings; this may affect some site functionality.

10. Children

Our services are not directed at children under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their information without parental consent, please contact us immediately so we can delete it.

11. Direct marketing

We may send you promotional messages about Z-Connect products by SMS, email or WhatsApp. You may opt out at any time by replying STOP to any SMS, following the unsubscribe link in any email, or contacting us at . We will action opt-outs within 5 business days.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated effective date. For material changes, we will notify you by SMS or email before the change takes effect. Your continued use of our services after notification constitutes acceptance of the updated policy.

13. Contact us

If you have questions or concerns about this policy or the way we handle your personal information, please contact our Information Officer:

Z-Connect (Pty) Ltd
Information Officer
02 Rhodesadrift Street, Bendor, Polokwane, 0699

+27 15 101 1336