Privacy Policy

Last updated 23 September 2026

Flashi is operated by Bazivista (Pty) Ltd (Reg. 2013/128839/07), Pretoria, South Africa ("we"). This policy explains how we process personal information under the Protection of Personal Information Act, 2013 (POPIA).

What we collect

• Account: your mobile number (verified by SMS), and optionally your name and email.
• Orders: the venue, event, seat, items, amounts and order status history.
• Payments: handled by our payment provider (Yoco). We receive a payment reference but never your card number.
• Device: a push-notification token so we can send order updates.
• Runners: an optional delivery photo as proof of hand-over.

Why we use it

To take, prepare and deliver your orders, process payments and refunds, prevent fraud, provide support, and improve the service using aggregated statistics. We only send marketing messages if you opt in, and you can opt out at any time in the app.

Who we share it with

With the vendor preparing your order and the runner delivering it (your first name, seat and order), with our payment provider, and with service providers who host our systems and send notifications, under written agreements. We do not sell personal information.

How long we keep it

Order and payment records are kept for as long as tax and accounting law requires. When you delete your account in the app, we remove your name, phone number, email and device tokens straight away. Order records that must be kept are anonymised.

Your rights

You may ask to see, correct or delete your personal information, and object to its processing, by emailing admin@bazivista.co.za. You can also complain to the Information Regulator (inforegulator.org.za).

Security

Data is encrypted in transit, access is role-restricted and logged, and payment details are tokenised by our payment provider.