Privacy Policy

Last updated 24 August 2026 · compliant with South Africa's POPIA and Kenya's Data Protection Act

1. Who we are

Moya is a product of MY-LO (My Life Online), a South African business. This policy explains what we collect, why, and your rights.

2. What we store

Account: your name, email, phone, chosen industry sector, and a hashed password.
Company & compliance profile: registered company name, tax / PIN number, and supplier certification numbers you enter yourself — CSD, SARS Tax Clearance PIN, B-BBEE level, CIDB grading (South Africa); KRA TCC, BRS number, AGPO certificate (Kenya).
Certificates: the numbers and expiry dates you record for bid-readiness tracking.

We store these details only to calculate your bid-readiness and pre-fill your bid packs. We do NOT query SARS, CSD, KRA, BRS or AGPO automatically — there is no public government API for that, and you remain responsible for verifying your own certificates directly with the relevant authority.

3. Legal basis & consent

We process your data on the basis of your consent (given at sign-up) and for the legitimate purpose of delivering the tender-intelligence service you requested. You may withdraw consent at any time.

4. Your rights

Access — see the data we hold on your account page.
Correction — update your profile and certificates anytime in My Compliance.
Deletion — request permanent removal of your account and all linked certificates via the "Delete my data" button in My Sectors. We action deletion within 30 days.

5. Data sharing

We do not sell your data. We use subprocessors only as needed to run the service (web hosting on host-h.net; payment processing on PayFast). Tender data is sourced from public government portals and is not personal to you.

6. Cross-border & breach

If you are a Kenyan user, your data may be processed in South Africa; we apply the same safeguards. In the event of a data breach we will notify affected users and the relevant authority within 72 hours as required by POPIA and the Kenyan DPA.

7. Contact

Questions or deletion requests: agi@mylo.co.za. Information Officer: MY-LO, Johannesburg, South Africa.