Privacy notice · Version 2026-09-30
Your information.
Handled with care.
This notice explains how Boitumelo Banks Holdings (Pty) Ltd processes personal information collected through the Khomba early-access website.
1. Who is responsible?
Boitumelo Banks Holdings (Pty) Ltd (“BBH”, “we” or “us”) is the responsible party. Khomba is BBH’s mobility venture. Privacy enquiries may be sent to hello@khomba.co.za.
2. What we collect
We collect your name, mobile number, area, regular route or taxi-association information, whether you are a commuter or driver, age confirmation, consent choices, and the date and version of your consent.
3. Why we collect it
We use this information to manage early-access registrations, research potential pilot routes, invite suitable participants to testing, and understand commuter and driver demand. We send promotional or general launch communications only when you select the optional marketing choice.
Website analytics
We count page views by date and page to understand interest in the website. These aggregate counts do not contain names, phone numbers, routes, IP addresses, cookies or visitor identifiers. A repeat visit can be counted again. Analytics begin on 30 September 2026 and do not reconstruct earlier visits.
4. Our lawful basis
We process early-access information with your consent. You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before the withdrawal.
5. Who processes the information
Authorised BBH personnel and contracted technology providers may process information only where needed to operate the website, database and communication services. We do not sell early-access information.
6. International processing
Our technology providers may operate infrastructure outside South Africa. Where information crosses borders, BBH will seek to use providers and safeguards consistent with POPIA’s requirements for transborder information flows.
7. Retention
Early-access information that has not converted into an active Khomba relationship will ordinarily be deleted or de-identified within 12 months of collection, unless a legal obligation or documented operational need requires a different period.
8. Your choices and rights
You may ask us to confirm whether we hold your information, request access to it, correct inaccurate information, object to processing, withdraw marketing consent, or request deletion where applicable. Email hello@khomba.co.za with “Khomba privacy request” in the subject. We may take reasonable steps to verify your identity before acting.
9. Security
We apply reasonable technical and organisational safeguards, including encrypted web connections, restricted administrative access, data minimisation and controlled database access. No system is completely immune from risk.
10. Security compromises
If personal information is affected by a security compromise, BBH will investigate, contain the incident and make notifications required by POPIA.
11. Complaints
Please contact us first so we can try to resolve your concern. You may also lodge a complaint with South Africa’s Information Regulator through inforegulator.org.za.
12. Changes
We may update this notice as Khomba develops. The current version date will appear at the top of this page. Material changes affecting an existing consent will be communicated where reasonably required.
This website notice is operational guidance and should be reviewed with a qualified South African privacy professional as Khomba expands its processing activities.