Privacy Policy
Last updated: 04 June 2026
IMPORTANT — YOU MUST READ THIS POLICY. This document describes how Wysely uses and processes Your Personal Information, what rights You can exercise in relation to that information, and how You can contact Us. It is written to align with the Protection of Personal Information Act (POPIA) and other applicable laws.
1.1. Your privacy is of utmost importance to us. We value your trust. That means we are committed to protecting and safeguarding your personal data. We aim to act in your best interest, and we are transparent about the processing of your Personal Information.
1.2. This document is a legal document. That means it is binding on you and on us. It provides both us and you, as/and the Data Subject, with various rights. It also places certain obligations and duties on you and on us. This Policy is therefore very important and, by using the Platform, you confirm that you have read this document and consider it binding on you.
1.3. We are legally obligated to provide adequate protection for the Personal Information we hold and to stop unauthorised access and use thereof. We will, on an ongoing basis, continue to review our security controls and related processes to ensure that the Personal Information remains secure.
1.4. Generally accepted standards of technology and operational security have been implemented to protect information from loss, misuse, alteration, or destruction.
1.5. When we contract with third parties, we impose appropriate security, privacy, and confidentiality obligations on them to ensure that personal information that we remain responsible for, is kept secure.
1.6. This document (Policy) describes how we use and process the Personal Information, provided in a readable and transparent manner. It also tells you what rights can be exercised in relation to Personal Information and how you can contact us. Reference is made in this document to various other documents and, where such reference is made, you are provided with an easily accessible link to view such documents.
1.7. In line with the 8 Conditions for Lawful Procession of Personal Information as set out in POPI, we:
1.7.1. Accept joint responsibility and accountability with you to responsibly manage and protect your Personal Information when providing the Platform;
1.7.2. Undertake to collect and process only such Personal Information which is necessary given the Purpose, and consider the legitimate legal interests of everyone concerned, as required by POPI. We will at all times respect your right to withdraw your consent for the processing of the Personal Information;
1.7.3. Undertake to only use your Personal Information to achieve the Purpose;
1.7.4. Undertake not to share or further process your Personal Information with anyone or for any reason if not required for assisting you with your solutions or as required in terms of legislation or regulations;
1.7.5. Undertake to be open and transparent on the nature, extent, and reasons for processing Personal Information;
1.7.6. Undertake to safeguard and protect the Personal Information in our possession;
1.7.7. Undertake to freely confirm what Personal Information we hold, to update and rectify the Personal Information upon request and to keep it for no longer than required and agreed.
1.8.We might amend this Privacy Statement from time to time, so we recommend you visit this page occasionally to make sure you know where you stand. If we make any updates to this Privacy Statement that will impact you significantly, we'll notify you about the changes before any new activities begin.
In this Policy, the following terms are used and mean what is said directly opposite it:
2.1."Brand Partner" shall mean a brand partner, retailer, service provider, or business that has agreed with Wysely to make Deals available to Users through the Platform.
2.2."Data Subject" is the natural person to whom the Personal Information relates. They are a user who is to be registered on the Platform, using the Personal Information, and are also referred to as "you" when it is the Data Subject themselves accessing and using the Platform;
2.3."Distribution Partner" shall mean a distribution partner that offers its qualifying account holders access to Inner Circle membership as a benefit.
2.4."Wysely" shall mean: Laurasia and Gondwana Consultancy FZCO, a private company registered as such under the laws of the United Arab Emirates, with registration number: TRN 104091788000003
2.5."Platform" shall mean: The Wysely website (wysely.co.za), mobile application(s), and all related services, tools, and features operated by Wysely;
2.6."Personal Information" shall mean: information relating to any User, including but not limited to: (i) information relating to the race, gender, sex, marital status, national, ethnic or social origin, colour, age, disability, language and birth of the User; (ii) information relating to the education or the medical, financial, criminal or employment history of the User; (iii) information relating to the financial affairs of the User; (iv) credit card details and transactional data; (v) any identifying number, symbol, e-mail address, physical address, telephone number or other particular assignment to the Data Subject; (vi) correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; (vii) the views or opinions of another individual about the Data Subject; (viii) the name of the Data Subject if it appears with other personal information relating to the Data Subject if the disclosure of the name itself would reveal information about the Data Subject; and (ix) any other information which may be treated or defined as "personal information" in terms of any applicable Laws, including Data Protection Legislation.
2.7."POPI" shall mean: the Protection of Personal Information Act, 4 of 2013;
2.8."Process" shall mean: to collect, receive, record, organise, collate, store, update, modify, retrieve, alter, consult, Use, disseminate or perform any other act or action, including any other act or action which may be treated or defined as "process" or "processing" in terms of any applicable laws. The word "Processed" shall have a corresponding meaning;
2.9."Purpose" shall mean the reason for which the Personal Information is processed, in terms of item 5;
2.10."Use" shall mean: to use, copy, access, load, install, maintain, reproduce, modify, enhance, compile, customise, adapt, improve, process, store, alter, develop, update, upgrade, import, export, translate, convert, create derivative works, combine with other information and/or materials, and/or perform any other act and/or action, and the Periods "Uses" or "Using" shall have a corresponding meaning.
3.1. The Wysely Platform is intended exclusively for individuals aged 18 years and older. Wysely does not knowingly collect or process Personal Information from individuals under the age of 18. If we become aware that we have inadvertently collected Personal Information from a person under 18, we will take immediate steps to delete that information from our systems.
3.2. If you believe that we may have inadvertently collected information from a minor, please contact us immediately at privacy@wysely.co.za
4.1. If you are reading this and intending on using the Platform, you are either:
4.1.1. a user and customer of the Platform;
4.1.2. a Distribution Partner; or
4.1.3. a Brand Partner.
4.2. If you are a user as described in item 4.1.1, this document applies directly to you. All warranties given, consent provided, obligations imposed, and rights afforded, are applicable directly to you. You are the Data Subject.
4.3. If you are a Distribution Partner (as described in item 4.1.2) or a Brand Partner (as described in item 4.1.3), you warrant that this document and policy has been made available to the Data Subject; that any warranties given, consent provided, obligations imposed, and rights afforded, have been provided by the Data Subject; and that the Data Subject has familiarised themselves with this Policy. To that effect, you indemnify Wysely in the event that any consent or warranty has not been given by the Data Subject, or for any non-compliance in terms of POPI.
4.4. Further, if you are a Distribution Partner (as described in item 4.1.2) or a Brand Partner (as described in item 4.1.3), you warrant that the Data Subject has consented to Wysely collecting the Personal Information from you, and not from the Data Subject directly.
5.1. Wysely processes your Personal Information only where a lawful basis for doing so exists under POPIA. The following table sets out the purposes of our processing and the corresponding lawful basis:
| Purpose of Processing | Information Used | Lawful Basis (POPIA) |
|---|---|---|
| Account registration and management | Name, email, phone number, date of birth, student/professional status, industry information, university information | Contract performance; Consent |
| Identity verification and fraud prevention | Name, ID number, identity verification documents, date of birth, phone number. | POPIA Section 27 authorisation (establishment of legal rights, fraud prevention); Legal obligation; Explicit consent |
| Eligibility confirmation (age 18–30) | Date of birth, ID number, identity verification documents | Contract performance; Legal obligation |
| Providing access to Deals and membership benefits | Account details, membership tier, usage data | Contract performance |
| Inner Circle activation via Distribution Partner | Name, contact details, eligibility confirmation | Consent; Contract performance |
| Platform operation and technical support | Device data, log data, usage data | Legitimate interest |
| Analytics and Platform improvement | Usage data, behavioral data (aggregated where possible) | Legitimate interest |
| Marketing communications (where opted in) | Email, phone number, usage preferences | Consent |
| Legal compliance and regulatory obligations | All categories as required | Legal obligation |
| Security and fraud detection | Device data, log data, identity data | Legitimate interest; Legal obligation |
5.2.By using the Platform, you as the Data Subject, consent, agree, and warrant that Wysely may use the Personal Information as set out in item 5.1 and consent to Wysely using the Personal Information for the purposes of directly marketing Wysely's products and services to the Data Subject, if such consent has been obtained.
5.3. If the Personal Information is not collected by Wysely, for whatever reason, then the Data Subject cannot use the Platform, and cannot be registered on the Platform. The Data Subject acknowledges and warrants and understands that this is not a decision made by Wysely, but a necessary condition for the Use of the Platform.
6.1. The purpose of this section of the Policy is to notify you and/or the Data Subject of what information Wysely shall collect from the Data Subject. You, as the Data Subject, hereby warrant, agree, and acknowledge that this Policy is a proper notification of what information is collected, who is collecting it, why it is being collected, and what the consequences are of the Personal Information not being collected.
6.2. The information ordinarily collected by Wysely is the following information of the Data Subject:
6.2.1. Full legal name;
6.2.2. Email address;
6.2.3. South African mobile phone number;
6.2.4. South African identity number (collected for the purpose of identity verification and eligibility confirmation, this constitutes Special Personal Information under POPIA and is subject to heightened protection as described in Clause 7);
6.2.5. Date of birth (to confirm eligibility within the 18–30 age range); and
6.2.6. Student or working professional status;
6.2.7. Industry information if working professional; and
6.2.8. University or educational institution information, if student.
6.2.9. Identity verification documents, including a South African ID or driving licence, where required for verification purposes.
6.3.In the Use of the Platform, Wysely may have need to collect and Process Personal Information which may be categorised as "Special Personal Information". To this extent, the Data Subject consents to the Processing of such Personal Information for the achievement of the Purpose.
6.4. The following information is collected automatically:
6.4.1. Device information: device type, operating system, unique device identifiers, and mobile network information;
6.4.2. Log data: IP address, browser type and version, pages visited, time and date of access, and referring URLs;
6.4.3. Usage and behavioural data: features used, Deals browsed and redeemed, search queries, and in-app actions; and
6.4.4. Location data: general location inferred from IP address; precise location data may be collected if you grant location permission through your device settings (you may withdraw this permission at any time through your device settings).
6.5. The following information may be obtained from third parties:
6.5.1.Where you activate Inner Circle membership through a Distribution Partner (including a qualifying financial institution with which Wysely has entered into a written Data Sharing Agreement), Wysely may receive limited information from that Distribution Partner solely for the purpose of confirming your eligibility and activating your Inner Circle membership. The specific categories of information shared are governed by the executed Data Sharing Agreement in place between Wysely and the relevant Distribution Partner, are limited to what is strictly necessary for membership activation and verification purposes, and are processed in accordance with both parties' obligations under POPIA. No financial account information, transactional data, or banking credentials are shared with Wysely under any circumstance.
6.6. As for cookies and tracking technologies, you consent to the cookie policy attached hereto as Annexure A.
7.1. In achieving the Purpose, Wysely shares the Personal Information with the following third parties:
7.1.1. Operators;
7.1.2. Brand Partners;
7.1.3. Distribution Partners; and
7.1.4. Statutory and regulatory bodies for the purposes of legal and regulatory disclosures.
Operators (Service Providers):
7.2.Wysely engages third-party service providers (Operators) to assist in operating the Platform, including cloud hosting providers, analytics providers, email service providers, identity verification service providers, and customer support tools. These Operators are bound by written agreements requiring them to process your Personal Information only on Wysely's instructions, in accordance with POPIA, and not for their own independent purposes.
Distribution Partners
7.3. Where you activate Inner Circle membership through a Distribution Partner, Wysely shares only the minimum Personal Information strictly necessary to confirm your eligibility and activate your membership benefit (for example, confirming that your Wysely Account exists and that you hold a qualifying account with the Distribution Partner). All such sharing is governed by an executed written Data Sharing Agreement that imposes POPIA-compliant obligations on both parties, including purpose limitation, confidentiality, security, and data minimisation requirements. We do not share your Personal Information with Distribution Partners for marketing or lead generation purposes without your separate and explicit consent.
Brand Partners
7.4. Wysely does not share your individually identifiable Personal Information with Brand Partners. Brand Partners may receive aggregated, anonymised, or de-identified data for the purpose of understanding Deal performance and user engagement. This data does not identify you personally.
Business Transfers
7.5.In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Wysely's assets, your Personal Information may be transferred to the successor entity as part of that transaction. We will notify you of any such transfer and any material changes to how your Personal Information is processed arising from such a transaction.
Legal and Regulatory Disclosures
7.6. Wysely may disclose your Personal Information to law enforcement agencies, regulatory bodies, courts of law, or other government authorities where:
7.6.1. we are required to do so by applicable law, court order, or binding regulatory direction;
7.6.2. disclosure is necessary to protect the rights, property, or safety of Wysely, our Users, or the public; or
7.6.3. disclosure is necessary to investigate or prevent fraud or other criminal activity.
8.1. The Data Subject hereby consents to, warrants that Wysely may, and understands that Wysely must, transfer the Personal Information to third parties located outside of South Africa.
8.2. Laurasia and Gondwana Consultancy FZCO is registered in the Dubai Airport Free Zone (DAFZ), United Arab Emirates. Personal Information of South African Users is processed and stored exclusively on cloud infrastructure located within the Republic of South Africa. Laurasia and Gondwana Consultancy FZCO does not transfer Personal Information outside the Republic of South Africa for any purpose, including corporate administration, support, backup, or analytics, and accordingly does not rely on the cross-border transfer grounds set out in Section 72 of POPIA. No copy, replica, cache, or derivative of such Personal Information is retained in any jurisdiction outside the Republic. Any access by personnel of Laurasia and Gondwana Consultancy FZCO located outside the Republic is affected solely by remote access to systems hosted within South Africa, with the underlying data remaining at all times resident in-country. A record of the localisation measures and applicable technical and organisational safeguards is maintained by the Information Officer and available for review upon lawful request.
8.3.Wysely warrants to the Data Subject that these third parties are subject to standards of data protection that upholds the principles of POPI and guarantee the protection of the Personal Information to a degree that is at least as sufficient as Wysely's protection of the Personal Information.
8.4. The Data Subject and Wysely agree, understand, and warrant that the transfer outlined in this item 8 is reasonably necessary to achieve the Purpose.
9.1. To the extent that it is reasonable in achieving the Purpose, the Data Subject consents to Wysely Processing any Personal Information, furthermore, consent to Wysely sharing the Personal Information referred to in this clause in the following instances:
9.1.1.with employees of Wysely, Wysely's holding or subsidiary companies, Wysely's agents, and sub-contractors who Process information on behalf of Wysely; and
9.1.2. should Wysely be required to do so by any law, regulation, code, or treaty.
9.2.Further information relating to Wysely's associated companies and subsidiaries may be obtained upon request.
Wysely's Processing of the Personal Information shall mean to: collect, receive, record, organise, collate, store, update, modify, retrieve, alter, consult, Use, disseminate or perform any other act or action, including any other act or action which may be treated or defined as "process" or "processing" in terms of any applicable laws, the Personal Information.
Your information will be processed automatically for age and identity verification.
11.1.The Data Subject consents, acknowledges, and warrants that it is necessary and lawful, for the achievement of the Purpose, for Wysely to retain the Personal Information for the subsistence of the Data Subject's registration on the Platform.
11.2.The Data Subject consents, acknowledges, and warrants that they have perused and familiarised themselves with Wysely's data security policy as contained herein and have taken advice on it, and consider such data security policy to be sufficient for the retention of the Personal Information.
11.3. Should the Data Subject cease to be registered on the Platform, the Data Subjects consents to and agrees that Wysely may retain and Process the Personal Information for a further period of 3 years.
11.4.Nothing in this item 11 removes the Data Subject's right(s) to revoke their consent to the Processing of the Personal Information, and request that Wysely destroys and/or de-identifies the Personal Information. The Data Subject consents, acknowledges, and warrants that they have perused and familiarised themselves with Wysely's data security policy and have taken advice on it, and consider the data destruction guidelines contained therein to be sufficient and appropriate.
11.5. The following retention periods apply as a guideline:
| Category of Information | Retention Period |
|---|---|
| Account registration data (name, email, phone) | Duration of the Account plus up to 3 years after Account closure or deletion |
| Identity verification data (ID number, date of birth, Identity Verification Documents) | Duration of the Account plus up to 5 years after Account closure, or as otherwise required by applicable law |
| Deal redemption and usage records | 3 years from the date of redemption |
| Device and log data | 12 months from collection |
| Marketing consent records | Duration of consent plus up to 3 years |
| Legal compliance records | As required by applicable South African law |
11.6. Upon expiry of the applicable retention period, Personal Information will be securely deleted, anonymised, or de-identified, unless a longer retention period is required by law or for the resolution of a legal dispute.
11.7. Wysely takes the security of your Personal Information seriously and implements appropriate technical and organisational measures to protect it against loss, unauthorised access, disclosure, alteration, or destruction, in accordance with Section 19 of POPIA. These measures include:
11.7.1. Encryption of Personal Information in transit using TLS (Transport Layer Security) and at rest using AES-256 encryption or equivalent;
11.7.2. Strict access controls, including role-based access management and multi-factor authentication for systems containing Personal Information;
11.7.3. Regular security assessments, penetration testing, and vulnerability management processes;
11.7.4. Confidentiality obligations imposed on all employees, contractors, and Operators who access Personal Information; and
11.7.5. Incident response and data breach management procedures designed to detect, contain, and notify relevant parties of security incidents in accordance with Section 22 of POPIA.
11.8. In the event of a security breach that is likely to result in prejudice to Data Subjects, Wysely will:
11.8.1. notify the Information Regulator of South Africa as soon as reasonably possible;
11.8.2. notify affected Data Subjects as soon as reasonably possible after becoming aware of the breach; and
11.8.3. take all reasonable steps to mitigate the harm resulting from the breach.
11.9. While Wysely implements robust security measures, no system is entirely immune to security risks. You are also responsible for maintaining the security of your Account by using a strong password and keeping your login credentials confidential.
By using the Platform, you further specifically warrant to Wysely that the Data Subject provides the following warranties to Wysely:
12.1. The Data Subject has consented to the Processing;
12.2. The Data Subject, by using the Platform, becomes a customer of Wysely;
12.3. The Data subject considers that the Processing is done to protect a legitimate interest of the Data Subject;
12.4. The Data Subject considers that the Processing is necessary in Wysely executing its contractual obligations;
12.5. That the Processing is reasonable to achieve the Purpose;
12.6. That the Processing is the minimal amount of processing of the Personal Information that is necessary to achieve the Purpose;
12.7. The Data Subject warrants, agrees, and acknowledges that this Policy is a proper notification of what information is collected, who is collecting it, why it is being collected, and what the consequences are of the Personal Information not being collected;
12.8. The Personal Information provided to Wysely is accurate, correct, and that Wysely may rely on the information provided based on this impression;
12.9.The Data Subject warrants and guarantees that the use of the Platform is conditional on agreement to this Policy and, as such, their use of the Platform is sufficient proof of the Data Subject's consent to the Processing; and
12.10.That any reasonable non-compliance of Wysely with POPI's data notification requirements, as may happen from time-to-time, is condoned by the Data Subject.
Wysely undertakes not to share or further process Personal Information with anyone or for any reason if not required for assisting the Data Subject with solutions or as required in terms of legislation or regulations.
14.1.You may, on using the Platform for the first time, opt in or out of receiving direct marketing from Wysely. This is done by checking a box marked "Marketing Consent", which informs Wysely, and warrants that you request from Wysely, as a customer of Wysely, that Wysely may market to your directly by using the information provided to Wysely, and that such marketing is therefore solicited. At any time thereafter, you may opt out of receiving direct marketing from Wysely at the following link: (URL to be added prior to launch), alternatively, by following the "opt-out" link that appears at the bottom of promotional emails that Wysely may send to you from time-to-time.
14.2. You may, at any time, revoke your consent to the Processing by applying as such on the following link: (URL to be added prior to launch). It must be emphasised that, as soon as you revoke this consent, the Data Subject shall cease to be actively registered on the Platform, and may be subject to the consequences as outlined in item 5.3.
14.3. You may, at any time, contest the accuracy of the Personal Information by emailing (URL to be added prior to launch), following which the Processing thereof shall be restricted, until you provide Wysely with accurate and correct data. It must be emphasised that you are responsible for ensuring the accuracy of the Personal Information.
15.1. You may contact Wysely at the following address(es) to direct any queries in terms of this Policy:
15.2. For further information, please email: support@wysely.co.za
16.1.If you are not satisfied with Wysely's response to any privacy concern or data subject request, or if you believe that Wysely has processed your Personal Information in violation of POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa:
| Name | Information Regulator (South Africa) |
|---|---|
| Website | www.inforegulator.org.za |
| inforeg@justice.gov.za | |
| Physical Address | 33 Hoofd Street, Forum III, 3rd Floor Braampark, Johannesburg, 2001 |
| Postal Address | P.O. Box 31533, Braamfontein, Johannesburg, 2017 |
1. Introduction And Explanation
1.1. This document is a legal document. That means it is binding on you and on us. It provides both us and you, as/and the Data Subject, with various rights. It also places certain obligations and duties on you and on us. This Policy is therefore very important and, by using the Platform, you confirm that you have read this document and consider it binding on you.
1.2. The Wysely Privacy Policy forms part of this document and its terms also apply to this document.
1.3. Cookies are tiny data files that some websites place on your computer or other device when you visit. They are used by many web platforms, including the Platform. Cookies are linked to the machine you use to visit our site and not to you as an individual. Unless you provide personal data through your use of this website, no personal information is collected.
1.4. Cookies are commonly used by websites to remember some aspect of your current or previous visit. This could include things like the choices you have made or preferences you have chosen during your visit. Websites commonly do this in order to improve or tailor your current and future visits to that site or other related sites.
1.5. One example may be when you visit a site that you have been to before, that site may use a cookie to check what information you have looked at previously to get an idea of the topics that may be of interest to you.
1.6. The information stored in a cookie can only be read by the website that placed the cookie or other sites that it has agreed to share information with.
2. Terms Used In This Policy
The definitions of terms contained in the Wysely Privacy Policy apply to this document.
3. Our Cookie Policy
3.1. Our policy is to use cookies only to improve the Platform and improve your experience and ease of use of the Platform.
3.2. The types of activities we may use cookies for are to:
3.2.1. To find out how people use the Platform, such as how often they visit, which pages they go to, and which links they click on, so that we can improve the Platform and our product and service offering(s); and
3.2.2. To help us to provide relevant information, such as details of services and other information that you may be interested in.
3.3. Cookies may be used to collect Personal Information, and Process the Personal Information in order to achieve the Purpose.
3.4. Whenever possible, we will list the cookies used on our websites. Wysely currently uses a Session ID cookie which is primarily for collecting website performance-based metrics.
4. How To Turn Cookies Off
4.1. You can turn off cookies in your browser settings. If you do turn them off, it is important to note that you may not be able to use the Platform properly.
4.2. Alternatively, you may opt-out of cookies on your first visit of the Platform.
4.3. You can find out more about turning off cookies at the independent website allaboutcookies.org.
5. How To Contact Wysely
5.1. You may contact Wysely at the following address(es) to direct any queries in terms of this Policy:
5.2. For further information, please email: support@wysely.co.za
