Privacy Policy

This Privacy Policy (“Policy”) governs the collection, processing, storage, use, disclosure, and protection of personal information by Ranta Tech platform operating under PEAK PHOENIX VENTURES (PTY) LTD (“Ranta”, “Platform”, “we”, “our”, or “us”) in connection with the use of the Ranta mobile application, website, platform, and related products and services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

1. Definitions

For purposes of this Policy:

• “Personal Information” means any information relating to an identified or identifiable natural person.
• “Processing” means any operation performed on Personal Information, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, transfer, or deletion.
• “User” means any individual accessing or using the Services.

2. Information We Collect

The Platform may collect and process the following categories of information:

2.1 Identification Information

• Full legal name
• National identification number or passport number
• Date of birth
• Residential address
• Telephone number

2.2 Financial and Employment Information

• Employment details
• Employer information
• Income and salary information
• Banking information
• Transactional and repayment information
• Credit-related and affordability information

2.3 Verification and Compliance Information

The Platform may collect and process information required for identity verification, fraud prevention, anti-money laundering compliance, and regulatory obligations, including:

• Government-issued identification documents
• Selfie or liveness verification data
• Facial verification information
• Supporting documentation uploaded by Users

2.4 Technical and Device Information

The Platform may automatically collect certain technical information, including:

• Device identifiers
• IP address
• Device type and operating system
• Browser and application version
• Mobile network information
• Usage analytics and diagnostics
• Crash reports and performance data

2.5 Permissions and Device Access

The Services may request access to certain device capabilities where necessary for functionality, including:

• Camera access
• File or media storage access
• Notification services
• Internet connectivity

Such permissions are requested solely for legitimate operational and security purposes associated with the Services.

3. Purposes of Processing

The Platform may process Personal Information for the following purposes:

• User onboarding and account administration
• Identity verification and authentication
• Fraud detection and prevention
• Creditworthiness, affordability, and risk assessments
• Facilitation of financial products and related services
• Regulatory, legal, and compliance obligations
• Customer support and communication
• Service improvement, analytics, and operational monitoring
• Protection of the security, integrity, and functionality of the Services
• Enforcement of contractual rights and policies

4. Legal Basis for Processing

Where required under applicable law, the Platform processes Personal Information based on one or more of the following legal grounds:

• User consent
• Performance of contractual obligations
• Compliance with legal and regulatory obligations
• Legitimate business interests
• Fraud prevention, security, and risk management requirements

5. Disclosure of Information

The Platform may disclose Personal Information to third parties where reasonably necessary for the operation of the Services, including but not limited to:

• Financial institutions and lending partners
• Credit bureaus and risk assessment providers
• Identity verification and fraud prevention providers
• Banking connectivity and payment providers
• Cloud hosting, infrastructure, and analytics providers
• Regulatory authorities, governmental bodies, or law enforcement agencies where required by applicable law

All third-party disclosures are subject to applicable contractual, legal, confidentiality, and security obligations.

The Platform does not sell Personal Information to third parties.

6. Data Retention

The Platform retains Personal Information only for as long as reasonably necessary to:

• Fulfill the purposes described in this Policy
• Comply with legal and regulatory obligations
• Resolve disputes
• Enforce contractual rights
• Maintain security and audit records

Retention periods may vary depending on applicable legal and operational requirements.

7. Data Security

The Platform implements commercially reasonable administrative, technical, organizational, and physical safeguards designed to protect Personal Information against:

• Unauthorized access
• Accidental loss
• Destruction
• Misuse
• Alteration
• Disclosure

Notwithstanding the foregoing, no electronic transmission or storage system can be guaranteed to be completely secure, and the Platform makes no representation or warranty regarding absolute security.

8. International Transfers

Personal Information may be stored, transferred, or processed in jurisdictions outside the User’s country of residence where the Platform, its affiliates, or service providers maintain operations.

Where required by applicable law, the Platform shall implement reasonable safeguards for cross-border data transfers.

9. User Rights

Subject to applicable law, Users may have the right to:

• Request access to Personal Information
• Request correction of inaccurate information
• Request deletion of Personal Information
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent

Requests may be submitted using the contact details provided below.

The Platform reserves the right to verify the identity of any requesting party prior to fulfilling requests relating to Personal Information.

10. Third-Party Services

The Services may contain integrations, tools, or technologies operated by third parties. Such third parties may process Personal Information in accordance with their own terms, privacy policies, and legal obligations.

The Platform shall not be responsible for the privacy practices or content of third-party services not directly controlled by the Platform.

11. Children’s Privacy

The Services are not intended for individuals under the age of 18.

The Platform does not knowingly collect Personal Information from minors.

12. Cookies and Analytics

The Services may utilize cookies, analytics technologies, and similar tools to:

• Improve functionality
• Analyze usage trends
• Monitor system performance
• Enhance user experience
• Maintain operational security

Users may manage certain preferences through device or browser settings where applicable.

13. Amendments to This Policy

The Platform reserves the right to modify, amend, or update this Policy at any time at its sole discretion.

Updated versions shall become effective upon publication within the Services or through other appropriate communication channels.

Continued use of the Services following publication of revised versions constitutes acceptance of such revisions.

14. Contact Information

Questions, concerns, or requests relating to this Policy or Personal Information may be directed to:

15. Governing Law

This Policy shall be governed by and construed in accordance with the applicable laws and regulations governing the jurisdiction in which the Platform operates, without regard to conflict of law principles.

16. Acknowledgement

By accessing or using the Services, the User acknowledges and agrees that they have read, understood, and accepted the terms of this Privacy Policy.