Rewards infrastructure for AfricaInformation we use
Depending on the programme, this can include recipient contact details, eligibility information, reward selections, delivery status and programme activity needed to operate the service.
South Africa privacy
POPIA and RibiRewards.
A plain-language overview of how personal information is handled when RibiRewards supports reward and incentive programmes involving people in South Africa.
Personal information in reward programmes
South Africa's Protection of Personal Information Act (POPIA) governs the processing of personal information. The information and responsibilities involved in a RibiRewards programme depend on how that programme is configured and who commissions it.
Customer and RibiRewards roles
The organisation running a programme generally determines why recipient information is used. RibiRewards processes information needed to administer and fulfil the programme, subject to the applicable arrangement.
Purpose and minimisation
We aim to use programme information for defined operational purposes and avoid requesting information that is not needed for reward delivery, support, reporting or agreed programme administration.
Safeguards
We use organisational and technical measures intended to protect personal information from inappropriate access, loss or misuse, with controls reviewed according to the service and integration involved.
Requests and programme records
Privacy requests may need coordination with the organisation that commissioned the programme. We can help route and support requests relating to information processed through RibiRewards.
Questions
For a South Africa privacy or POPIA question about a RibiRewards programme, contact hello@ribirewards.com and identify the relevant organisation or programme where possible.
Need programme-specific information?
If you are a customer completing privacy, procurement or vendor review, we can discuss the data flow and operational requirements for your proposed programme.