Privacy Policy — Alpha Build Group

Last updated: 30 July 2026

Alpha Build Group (“we,” “us,” “our”) operates the Alpha Build Group mobile app and the alphabuildgroup.co.za website (together, the “Service”). This policy explains what personal information we collect, why, how we protect it, and the rights you have over it, in line with South Africa’s Protection of Personal Information Act (POPIA).

By using the Service, you agree to the collection and use of information as described here.

1. Information We Collect

Account information

When you register, we collect your name, email address, phone number, and password (stored securely hashed — we never see or store your plain-text password).

Delivery and billing details

Physical address, city, province, and postal code, for order fulfilment and delivery. We do not access your device’s GPS location — address information is entered or selected by you.

Profile picture

If you choose to upload one, it’s stored and linked to your account.

Order and purchase history

Products purchased, order status, and related transaction records. Payment card details are handled entirely by our payment processor, Paystack — we never see or store your card number.

Stokvel identity verification (KYC)

If you join or create a Stokvel savings group, we collect your full legal name, South African ID number, date of birth, residential address, phone number, and a photo of your ID document. This is required to verify your identity and protect other group members from fraud. Your ID number is encrypted at rest using AES-256-GCM encryption and is never shown to other members — only a verified/unverified status badge is visible to them. Only authorized store administrators can view the underlying ID information, for verification purposes.

Member ratings and reports

If you participate in a Stokvel group, other verified members may rate you, like your profile, or submit a report about you (e.g. for non-payment). These are tied to your verified identity, not just your account, so reputation carries over if you ever open a new account.

Wishlist, cart, and browsing activity

Products you save, view, or add to cart, including anonymous product-view tracking used to power “customers also viewed” recommendations. This tracking uses a randomly generated device identifier, not your personal identity, and is automatically deleted after 6 months.

Search activity

Search terms you enter are logged in aggregate to power the app’s “popular searches” feature.

Push notification token

If you enable notifications, we store a device token (via Google Firebase) to deliver order updates and other notifications to your device.

WhatsApp contact

If you tap a “Contact us on WhatsApp” button, the app opens WhatsApp with a pre-filled message. We do not automatically send any data to WhatsApp — this only happens if you choose to send that message yourself.

2. How We Use Your Information

• To create and manage your account
• To process and deliver your orders
• To verify your identity for Stokvel group participation and protect other members from fraud or non-payment
• To send order updates, notifications, and respond to support requests
• To improve the app through aggregated, anonymized usage patterns
• To maintain fair, accountable Stokvel groups through member ratings and reports

We do not sell your personal information to third parties.

3. Who We Share Information With

• Paystack — processes payments on our behalf. We never receive or store your card details.
• Google Firebase — delivers push notifications to your device.
• Our hosting and IT service providers — who help us operate the Service, under confidentiality obligations.

We do not share your Stokvel KYC information (ID number, ID document) with any third party, and never with other members of your group.

4. Data Security

We take reasonable technical and organizational measures to protect your information, including:

• Encryption of ID numbers at rest (AES-256-GCM)
• Secure, hashed password storage
• Encrypted data transmission (HTTPS) between the app and our servers
• Access to sensitive verification data restricted to authorized administrators only

No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

5. Your Rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information, subject to any legal obligation we may have to retain certain records (e.g. financial/order records)
• Object to or request restriction of certain processing
• Lodge a complaint with South Africa’s Information Regulator (https://inforegulator.org.za) if you believe your information has been mishandled

To exercise any of these rights, contact us using the details below.

6. Data Retention

We retain your account and order information for as long as your account is active or as needed to comply with legal, tax, and accounting obligations. Anonymous product-view tracking data is automatically deleted after 6 months. Stokvel KYC records are retained for as long as needed for identity verification and fraud-prevention purposes, or as required by law.

7. Children’s Privacy

The Service is not directed at children under 18. Stokvel group participation specifically requires identity verification, restricting it to adults. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights over your personal information, contact us at: