Privacy Policy

This Privacy Notice for REMOLUHLE (PTY) Ltd., trading as Omeru ("we", "us", "our"), describes how and why we collect, store, use, and share your personal information when you use our Services — omeru.io and the custom WhatsApp bot building service we provide through it, in which we design and build a WhatsApp commerce bot to a client’s brief.

Information you provide directly

We collect personal information you voluntarily provide when you place an order, send us a brief on your business, contact us, or otherwise interact with our Services:

• Full name
• Phone number or WhatsApp number
• Email address
• Business name and the details you put in your brief — what you sell, your location, trading hours and contact details
• Account credentials, where you create one
• Payment references — an Ozow transaction reference, or the blockchain transaction hash you paste into the order form

Sensitive information: We do not process sensitive personal information (race, religion, health, sexual orientation, etc.).

Information collected automatically

When you visit our website, we automatically collect:

• IP address and approximate location (country/city)
• Browser type, device, and operating system
• Referring URLs and exit pages
• Pages viewed, time spent, and actions taken
• Date and time of visits
• Crash reports and performance data

We process your personal information only when we have a valid legal basis under POPIA:

• Facilitate account creation, authentication, and account management
• Design, build and hand over the WhatsApp bot you ordered
• Process and fulfil orders, payments, and refunds
• Respond to support requests and enquiries
• Operate the bot we built for you, which carries conversations between your business and your customers
• Measure and improve our Services through analytics
• Deliver and measure the effectiveness of our advertising campaigns
• Prevent fraud, abuse, and security threats
• Comply with POPIA, SARS and other South African legal obligations

We do not sell your personal information. We share data only with the following parties, each bound by data processing agreements:

We may also share information where required by South African law, court order, or during a merger or acquisition.

What we do

We use Google Ads remarketing and Meta Pixel to advertise to people who have previously visited omeru.io. This means:

• Third-party vendors, including Google and Meta, use cookies and/or device identifiers to serve our ads on websites and apps across the internet, based on your past visits to our site.
• Google may show our ads on Google Display Network, Google Search, and YouTube.
• Meta may show our ads on Facebook, Instagram, and their partner network.
• These ads are targeted using remarketing lists (data segments) built from visitors to omeru.io.
• We do not use sensitive categories (health, race, religion, etc.) to target any ads.

Google Consent Mode v2

We have implemented Google Consent Mode v2 (Advanced Mode). Until you accept cookies via our consent banner, Google tags operate in a cookieless, privacy-safe mode — no personal identifiers are sent to Google. Full measurement activates only after your explicit consent. This applies to Google Analytics 4, Google Ads conversion tracking, and remarketing tags.

Opt out of personalised advertising

Opting out means you will no longer see personalised ads from us, but you may still see generic non-targeted advertising.

All non-essential cookies are only activated after you accept via our consent banner.

You can control cookies through your browser settings, though disabling cookies may affect site functionality. Use the opt-out links in Section 4 to disable advertising cookies specifically.

Our Services may offer registration or login via third-party social media accounts (Facebook, X/Twitter, etc.). If you use this feature, the provider may share your name, email, and profile picture with us. We use this only to create or manage your account and are not responsible for how the social media provider handles your data — please review their privacy policy separately.

We keep personal information only as long as necessary for the purposes described in this notice, or as required by South African law:

When retention periods expire, data is securely deleted or anonymised. Data in backup archives is isolated from active processing until deletion is possible.

• All data transmission is encrypted via TLS/SSL — our website runs exclusively over HTTPS
• Database encryption at rest using industry-standard encryption
• Role-based access controls — staff access only the data their role requires
• Regular security reviews and dependency audits
• No sensitive payment data (card numbers, bank details) is stored on Omeru systems — this passes directly to Stitch Money via their secure gateway

No system is 100% secure. In the event of a data breach affecting your rights, we will notify you and the Information Regulator as required by POPIA Section 22.

Our Services are not directed at persons under 18. We do not knowingly collect personal information from minors. If you believe we hold data about a minor, contact hello@omeru.io and we will immediately delete it.

Under POPIA and applicable South African law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correct — request correction of inaccurate or incomplete data
• Delete — request deletion of your data (subject to legal retention obligations)
• Object — object to processing based on legitimate interests, including direct marketing
• Withdraw consent — withdraw consent for consent-based processing at any time
• Portability — request your data in a structured, machine-readable format where feasible
• Lodge a complaint — with the Information Regulator of South Africa (see Section 12)

To exercise any of these rights, email hello@omeru.io with subject line "Data Subject Request". We will respond within 30 days and may require proof of identity.

Most browsers include a Do-Not-Track ("DNT") feature. No universal technical standard for DNT has been adopted, so we do not currently alter our data collection in response to DNT signals. If a binding standard is adopted in South Africa or internationally, we will update this notice.

South Africa's Protection of Personal Information Act 4 of 2013 (POPIA) grants you the right to request access to or correction of your personal information at any time. If you are unsatisfied with our handling of a complaint, you may escalate to:

We are a South African company and we run this business from South Africa. We do not sell your personal information, and we do not make it available to anyone outside the Republic to use for their own purposes.

Some of the service providers we rely on to run the service do, however, store and process data on servers located outside South Africa. Section 72 of POPIA requires us to tell you this plainly rather than leave it unsaid:

The basis we rely on

Section 72 permits a transfer outside the Republic on several grounds. We rely on two of them. First, the transfer is necessary for the performance of our contract with you — you cannot be given an account, an order or a WhatsApp bot without the platform that runs it. Second, each provider above operates under published data-processing terms committing it to safeguards comparable to those POPIA requires, so your information continues to be protected on a basis materially similar to South African law.

Our database is hosted in the European Union, whose data protection law (the GDPR) is widely recognised as offering protection at least equivalent to POPIA. Payment processing through Ozow stays within South Africa.

You may ask us at any time which providers hold your information and where it is stored. Write to hello@omeru.io.

We may update this Privacy Notice from time to time. The "Last updated" date at the top always reflects the most recent version. For material changes, we will notify affected users directly or via a prominent notice on our site.

To request access to, correction of, or deletion of your personal information, or to withdraw consent, submit a Data Subject Access Request by emailing hello@omeru.io with the subject line "DSAR", your full name, and a description of your request. We will acknowledge within 3 business days and respond in full within 30 days.