Privacy Policy

ListZar is an online marketplace operated from South Africa. The operator and responsible party for personal information under POPIA is M and M Tembe Holdings (registration number 2012/014334/07), trading as ListZar, of 156 Hendrik Street, Wierda Park, Centurion, 0157, South Africa. In this Policy, “ListZar”, “we”, and “us” refer to M and M Tembe Holdings, trading as ListZar. The Information Officer / privacy contact is M Tembe, reachable at admin@tembeholdings.co.za.

This Policy explains how ListZar handles personal information when you create an account, publish listings or business profiles, message other users, leave reviews, report concerns, or use AI-assisted features. It does not cover the practices of third-party websites or services linked from listings or messages.

The personal information ListZar processes includes:

• Account information: name, email address, and profile details you choose to add.
• Mobile number, where you provide it for phone verification.
• Phone verification records, such as verification status and timing. The number itself is kept private.
• Listing information: titles, descriptions, prices, photos, location, and attributes you publish.
• Business profile information: business name, contact details, address, and images.
• Location information you add to listings, profiles, or saved searches.
• Messages between users about listings.
• Favourites and saved searches you create.
• Reviews and reports you submit.
• AI task records created when you use AI-assisted features.
• Audit and security records generated by the platform to operate and protect the service.
• Limited technical information such as device and browser data, where collected by the platform or its analytics tools.

We collect information that you provide directly when you register, publish content, or contact us. We also collect information generated automatically when you use ListZar, such as logs, usage data, and analytics events. We do not collect information from third parties for advertising purposes.

• To create and manage your account.
• To display your listings, business profiles, reviews, and public profile to other users.
• To enable messaging between buyers and sellers.
• To verify mobile numbers as a trust and security feature.
• To provide AI-assisted suggestions when you request them.
• To review reports and moderate content.
• To operate, secure, and improve the platform.
• To meet legal obligations and respond to lawful requests.

ListZar processes personal information under POPIA on the basis of the consent you give when you register and use the platform, the legitimate interests of operating a safe marketplace, and compliance with legal obligations. Where processing depends on consent, you may withdraw it, although withdrawing consent may affect features that rely on it.

Some information is visible to other users when you choose to publish it. This includes your public profile, listings, business profiles, photos, reviews, and the location shown on a listing. Because this information is public, you should not include unnecessary sensitive personal information in a listing, profile, or review.

Your email address, password, and mobile number are private. Your mobile number is not shown publicly because you verified it. Verification status (for example, a “verified” badge) may be shown, but the underlying number is not disclosed to other users.

Messages between users exist to help buyers and sellers communicate about listings. Your private messages are not publicly visible. ListZar does not routinely read private conversations. They may be processed to operate the service and may be reviewed by authorised personnel only where required by law or to investigate serious breaches of the Terms.

ListZar may offer phone verification so that users can confirm a mobile number as a trust and security feature. If you verify a number, ListZar processes it to confirm and maintain that verification. Verification is intended as a helpful signal, not proof that a user is trustworthy or that a purchase took place.

Phone verification is a foundation feature of the platform. SMS delivery of verification codes depends on a messaging provider being configured. You should not assume that SMS verification is fully operational until it is confirmed on the platform. If you cannot receive a code, use the Help Centre for assistance.

Business profile information you publish (name, contact details, address, images) is visible to other users. Internal membership and ownership records are private. The business owner is responsible for the accuracy of the published information and for having the right to publish it.

Reviews you submit are public and linked to your display name. Reports you submit are private and are used for moderation. Reporter identity is visible to platform moderators and administrators, not to the public.

When you use AI-assisted features, ListZar sends the relevant information (such as listing text or a question) to an AI model to generate a suggestion. The information needed to produce and store the result is processed as an AI task record linked to your account. AI suggestions are support, not fact or advice. ListZar does not use AI to determine that a specific person is a scammer, and AI does not take moderation actions on its own.

ListZar takes reasonable technical and organisational measures to protect personal information, including access controls, role-based permissions, and restricting who can read private records. No system is completely secure. We cannot guarantee absolute security against all threats.

We keep personal information for as long as needed to provide the service and meet legal obligations. Listings may expire after a set period (currently 30 days) unless renewed. Account data is retained while your account is active. Some records, such as audit and moderation logs, may be kept longer where legally required or to protect legitimate interests.

You can delete or close content you control, such as listings and saved searches. Account closure is available through your account settings. Where the law requires us to keep certain records, we may retain them despite a deletion request. Removing a public listing or review does not necessarily remove related private records that must be kept for security or legal reasons.

ListZar does not sell your personal information. We share information only: with service providers who help operate the platform under appropriate agreements; when you choose to publish it; and where required by law or to protect the rights, safety, or property of ListZar and its users.

ListZar uses service providers, such as hosting, AI model providers, and analytics tools, to operate the platform. These operators process personal information on ListZar's behalf and under appropriate controls. They are required to handle the information securely and only for the purposes ListZar instructs.

Some service providers may process personal information outside South Africa. Where this happens, ListZar takes reasonable steps to ensure the information is protected in line with POPIA, including by relying on providers that offer appropriate safeguards.

Under POPIA you may have the right to:

• Know what personal information ListZar processes about you.
• Request access to that information.
• Ask for correction or update of inaccurate information.
• Ask for deletion of information where it is lawful to do so.
• Object to certain processing, including direct marketing.
• Lodge a complaint with the Information Regulator.

To make a privacy request, contact our Information Officer, M Tembe, at admin@tembeholdings.co.za or 0836074513, or use the Help Centre or Support page. We do not promise deletion where retention is legally required or legitimately necessary.

ListZar may send you service-related communications about your account, listings, and reports. We do not send direct marketing to you without your consent, and you can opt out of non-essential communications. If you receive marketing you did not agree to, please report it through the Help Centre.

ListZar uses local storage and similar technologies to keep you signed in, remember your preferences (such as a pending mobile number during registration), and operate the service. We use analytics to understand how the platform is used. We do not use cookies to build advertising profiles of you across other websites.

If we become aware of a compromise of personal information that poses a real risk of harm, we will follow applicable notification obligations under POPIA. If you suspect a security or privacy incident, please report it through the Help Centre or Support page so it can be investigated.

ListZar is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us through the Help Centre and we will take steps to remove it.

We may update this Policy from time to time. The “Last updated” date at the top shows when it was last revised. Continuing to use ListZar after a change means you accept the updated Policy.

For privacy questions or to make a data subject request, contact our Information Officer, M Tembe, at admin@tembeholdings.co.za or 0836074513, or use the Help Centre or Support page. Full operator details (M and M Tembe Holdings, trading as ListZar) are set out in the Contact Information section below.