← Back to Home
Privacy Policy
Last updated: 14 July 2026
Your privacy matters. This policy explains how WRDO (Pty) Ltd collects, uses, and
protects your personal information in accordance with the Protection of Personal Information Act (POPIA) of
South Africa and the General Data Protection Regulation (GDPR) of the European Union.
1. Who We Are
WRDO (Pty) Ltd ("WRDO", "we", "us", "our") is a digital technology company registered in South Africa
(Registration: 2026/095904/07). We operate the following services:
- wrdo.co.za — Our corporate website
- WRDO on WhatsApp — Our conversational service on the WhatsApp Business Platform
(+27 72 110 4651), including ordering, payments, rides and rewards
- pay.wrdo.co.za — Secure web screens opened from the WhatsApp conversation
(payment review, wallet, profile, settings)
Contact: privacy@wrdo.co.za
2. Information We Collect
2.1 Information You Provide
- Email address — When you subscribe to our mailing lists
- Contact information — When you reach out to us
- Account data — If you create an account on our platforms
2.2 Information Collected Automatically
- Usage data — Pages visited, time on site, referral sources
- Device information — Browser type, operating system, IP address
- Cookies — See our Cookie Policy section below
2.3 Analytics Services
We use the following third-party analytics services:
- Google Analytics — Website traffic analysis (anonymized IP)
- Microsoft Clarity — User experience insights and heatmaps
2.4 WRDO on WhatsApp
When you use WRDO through WhatsApp, we collect and process:
- Your phone number and WhatsApp profile name — To identify you and reply to you
- Messages and selections you send us — Including text, menu taps, form entries in
WhatsApp Flows, and media (photos, voice notes) you choose to share
- Order, booking and payment details — What you ordered, from whom, amounts, and
payment status. We never see or store your card numbers, bank credentials or PINs — payments are
processed by licensed South African payment providers
- Language and service preferences — So the conversation arrives in your language
2.5 Data Received from Meta (Platform Data)
WRDO is built on the WhatsApp Business Platform operated by Meta Platforms, Inc. In providing the
service we receive data from Meta, including message metadata and, where you connect a business to
WRDO using Facebook Login (Embedded Signup), your public profile, business name and WhatsApp Business
Account details. We use this Platform Data solely to provide and improve the WRDO service, we process
it in accordance with Meta's Platform
Terms, and we do not sell it or use it for advertising. You can request deletion of this data at
any time — see our data deletion instructions.
3. How We Use Your Information
We process your personal information for the following purposes:
- To provide and improve our services
- To send you updates and marketing communications (with your consent)
- To respond to your inquiries and support requests
- To analyze website usage and improve user experience
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
Under GDPR, we process your data based on:
- Consent — For marketing emails and newsletter subscriptions
- Legitimate interests — For analytics and service improvement
- Contractual necessity — To fulfill services you've requested
- Legal obligation — To comply with applicable laws
5. Your Rights Under POPIA & GDPR
You have the right to:
- Access — Request a copy of your personal data
- Rectification — Correct inaccurate or incomplete data
- Erasure — Request deletion of your data ("right to be forgotten")
- Restrict processing — Limit how we use your data
- Data portability — Receive your data in a portable format
- Object — Opt out of certain processing activities
- Withdraw consent — Unsubscribe from marketing at any time
To exercise these rights, contact us at privacy@wrdo.co.za.
For step-by-step instructions on deleting your data — including data collected through WhatsApp and
Facebook Login — see our data deletion page.
6. Cookies & Tracking
We use cookies and similar technologies to:
- Remember your preferences
- Analyze website traffic and usage patterns
- Improve our services
Types of Cookies We Use
- Essential cookies — Required for basic site functionality
- Analytics cookies — Google Analytics, Microsoft Clarity
- Marketing cookies — May be used for targeted advertising in the future
You can manage cookies through your browser settings. Note that disabling cookies may affect site
functionality.
7. Data Sharing & Third Parties
We do not sell your personal information. We may share data with:
- Service providers — Who help us operate our services (hosting, analytics, email)
- Legal authorities — When required by law
- Business transfers — In case of merger, acquisition, or sale
Third-Party Services We Use
- Google (Analytics, Tag Manager)
- Microsoft (Clarity)
- Cloudflare (Hosting, Security)
- Supabase (Database)
- Meta Platforms (WhatsApp Business Platform — message delivery)
- Licensed payment providers (e.g. Paystack, Ozow) — payment processing; they receive only what is
needed to process your payment
- Merchants and service providers you transact with — they receive only what is needed to fulfil
your order or booking (e.g. your name and order details, never your full message history)
8. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
Email subscribers data is retained until you unsubscribe. Analytics data is anonymized and aggregated.
WhatsApp conversation data is retained while your WRDO profile is active and deleted on request (see
data deletion), except transaction records we must keep under South African
financial and tax legislation (retained for 5 years, then deleted).
9. Data Security
We implement industry-standard security measures including:
- TLS/SSL encryption for all data in transit
- Encrypted data storage
- Regular security audits
- Access controls and authentication
10. International Data Transfers
Your data may be processed outside South Africa, including in the European Union and United States. We ensure
appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where
applicable.
11. Children's Privacy
Our services are not directed to children under 18. We do not knowingly collect personal information from
children. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the
new policy on this page and updating the "Last updated" date.
13. Contact Us
For privacy-related inquiries or to exercise your rights:
14. Regulatory Authorities
If you have concerns about our data practices, you may contact:
- South Africa: Information Regulator — inforeg.org.za
- EU: Your local Data Protection Authority