Privacy Policy

Last updated: 13 May 2026

Umema is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) of South Africa.

1. Information we collect

  • Your name and email address when you register
  • Booking information including dates, property details, and rates
  • Financial information related to your bookings
  • Usage data and access logs for security purposes

2. Purpose of processing

We process your personal information to:

  • Provide and manage the Umema platform and services
  • Facilitate bookings between home members, guests, and agents
  • Send transactional emails (account confirmation, booking notifications)
  • Ensure the security and integrity of our platform
  • Comply with legal obligations

3. Lawful basis

We process your personal information on the basis of your consent (given at registration), for the performance of a contract (your use of Umema services), and to comply with legal obligations.

4. Sharing of information

We do not sell your personal information. We share your information only with:

  • Other members of a home you are associated with (limited to what is necessary)
  • Service providers who assist us in operating the platform, under appropriate data processing agreements
  • Legal authorities where required by law

5. Data retention

We retain your personal information for as long as your account is active, and for a period of 5 years thereafter for accounting and legal purposes, unless a longer period is required by law.

6. Your rights under POPIA

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information (subject to legal retention requirements)
  • Object to the processing of your personal information
  • Lodge a complaint with the Information Regulator of South Africa

To exercise your rights, contact us at: privacy@umema.co.za

7. Information Officer

Our Information Officer is responsible for ensuring compliance with POPIA. Contact: privacy@umema.co.za

8. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or destruction, including passwords hashed with Argon2 (a memory-hard algorithm) and secure HTTPS connections.