Mint Mansion (Pty) Ltd — Nalete Platform · Effective 1 September 2026
This Privacy Policy explains how Mint Mansion (Pty) Ltd, trading as Nalete, collects, uses, stores and protects your personal information when you use the Nalete platform at www.nalete.com and www.nalete.co.za.
We are committed to protecting your privacy and to complying with the Protection of Personal Information Act 4 of 2013 (POPIA). This policy forms part of our Terms of Service.
If you have any questions about this policy, please contact our Information Officer at thatomoloto@gmail.com.
We collect the following categories of personal information:
Account information: Your name, email address, password (stored in encrypted form), and contact number when you register on the Platform.
Business profile information: Your brand name, business location (city and province), business description, department, profession, specialities, pricing information, working rooms, portfolio images, logo, years of experience, qualifications and institution.
Transaction information: Details of Requests you send or receive, Jobs you participate in, negotiation terms, messages exchanged in connection with Jobs, and ratings you give or receive.
Payment information: If you purchase a directory listing, we record the tier selected, the amount paid, the Paystack transaction reference, and the dates of payment and expiry. We do not store your card number or bank account details — these are processed directly by Paystack.
Student verification: If you apply for the student listing tier, we collect your student number for verification purposes.
Usage information: Log data including your IP address, browser type, pages visited, and the time and date of your visit. We use this information to maintain and improve the Platform.
Communications: Messages you send to us through the contact form or by email.
We use your personal information for the following purposes:
To provide the Platform: To create and maintain your account, display your Business Profile in the directory, enable you to send and receive Requests, manage Jobs, and process listing payments.
To communicate with you: To send service communications relating to your account, Requests and Jobs. These are not marketing and you cannot opt out of them while you hold an account.
To improve the Platform: To analyse usage patterns, diagnose technical problems, and develop new features.
Direct marketing: We will send direct marketing only to the extent permitted by section 69 of POPIA and section 45 of the ECT Act. You may opt out at any time by writing to hello@nalete.com.
Legal compliance: To comply with applicable laws, to respond to lawful requests from authorities, and to enforce our Terms of Service.
The lawful bases on which we process your personal information are: performance of our contract with you; compliance with a legal obligation; our legitimate interests in operating and improving the Platform; and, where applicable, your consent.
We share your personal information in the following circumstances:
With other Users: Your Business Profile information (including your brand name, location, department, profession, bio, pricing, working rooms, portfolio images and logo) is visible to all registered Users of the Platform. Your personal name and email address are not displayed publicly.
With service providers: We share your information with third-party service providers who help us operate the Platform, including Supabase (database and authentication), Vercel (hosting), and Paystack (payment processing). These providers process your information on our behalf under written agreements and are not permitted to use it for their own purposes.
When required by law: We may disclose your personal information where required to do so by law, by a court order, or by a regulatory authority.
Business transfers: If Nalete or its business is acquired, merged or transferred, your personal information may be transferred to the acquirer as part of that transaction.
We do not sell your personal information to third parties.
We retain your personal information for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements.
If you close your account, we will delete or anonymise your personal information within a reasonable period, except where we are required by law to retain it, or where it is necessary to retain records of Jobs and ratings for the benefit of other Users.
Job records, messages and ratings may be retained and displayed on the Platform after your account is closed, to the extent lawful and consistent with this policy.
You have the following rights in respect of your personal information:
Right of access: You have the right to request a copy of the personal information we hold about you. Requests must be made in accordance with our PAIA Manual set out below.
Right of correction: You have the right to request that we correct inaccurate or incomplete personal information. You may update most of your information directly through your account settings.
Right of deletion: You have the right to request that we delete your personal information, subject to our legal obligations to retain certain records.
Right to object: You have the right to object to the processing of your personal information for direct marketing purposes.
Right to complain: If you believe we have interfered with the protection of your personal information, you may complain to the Information Regulator of South Africa at complaints.IR@justice.gov.za.
To exercise any of these rights, please contact our Information Officer at thatomoloto@gmail.com or in terms of the request procedure set out in the PAIA Manual below.
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include encryption of data in transit and at rest, access controls, and regular security reviews.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.
Promotion of Access to Information Act, No 2 of 2000 — Section 51 Manual of Mint Mansion (Pty) Ltd
This PAIA Manual is prepared in accordance with Section 51 of the Promotion of Access to Information Act, No 2 of 2000 (PAIA). It is intended to ensure that Nalete complies with the Act and to foster a culture of transparency and accountability by giving effect to the right to information.
This PAIA Manual is available to view at the offices of Nalete: Unit 5, La Mignon, 27 Bradford Street, Highveld, Centurion, as well as on its website at www.nalete.com/paia.
Director: Refilwe Moloto
Registered address: Unit 5, La Mignon, 27 Bradford Street, Highveld, Centurion
Information Officer: Adv TM Moloto Physical address: Unit 5, La Mignon, 27 Bradford Street, Highveld, Centurion Telephone: 076 368 2651 Email: thatomoloto@gmail.com
Enquiries regarding the South African Human Rights Commission Guide may be directed to: PAIA Unit, Private Bag X2700, Houghton, 2041 Telephone: (011) 877 3803 Website: www.sahrc.org.za Email: section51.paia@sahrc.org.za
Nalete holds the following categories of records:
Personnel records: Personal records provided by personnel, conditions of employment, internal evaluation records, and correspondence relating to personnel.
Customer-related records: Records provided by customers, records generated by Nalete relating to its customers (including transactional records and Platform activity).
Private body records: Financial records, operational records, databases, information technology records, and marketing records.
Internal correspondence: Product records, statutory records, internal policies and procedures.
Other party records: Records pertaining to contractors, suppliers and service providers.
Records of a public nature — typically those disclosed on the Nalete website — may be accessed without the need to submit a formal application. Other non-confidential records may be accessed on application, subject to the provisions of PAIA.
Records are also retained in terms of the following legislation (where applicable): Basic Conditions of Employment Act; Companies Act; Compensation for Occupational Injuries and Diseases Act; Copyright Act; ECT Act; Financial Intelligence Centre Act; Occupational Health and Safety Act; POPIA; Trademarks Act; Value Added Tax Act.
To request access to a record held by Nalete, you must:
1. Complete the prescribed Form C (Request for Access to Record of Private Body) available at the end of this manual.
2. Submit the completed form, together with payment of the prescribed request fee (R50.00), to the Information Officer by: — Email to thatomoloto@gmail.com; or — Post or hand delivery to Unit 5, La Mignon, 27 Bradford Street, Highveld, Centurion.
3. The form must contain sufficient information to identify the record requested and the identity of the requester. The requester must state the nature of the right to be exercised or protected and explain why the record is necessary for that purpose.
4. If a request is made on behalf of another person, proof of authority must be submitted.
5. If an individual is unable to complete the prescribed form because of illiteracy or disability, the request may be made orally.
Nalete will process the request within 30 days of receipt, unless an extension is required. The requester will be advised in writing whether access is granted or denied.
Nalete is entitled to refuse a request for information on the following grounds:
— Mandatory protection of the privacy of a third party (section 63 of PAIA and POPIA); — Mandatory protection of the commercial information of a third party (section 64), including trade secrets and financial information whose disclosure could cause harm; — Mandatory protection of confidential information of third parties protected by agreement (section 65); — Mandatory protection of the safety of individuals and the protection of property (section 66); — Mandatory protection of records that are privileged in legal proceedings (section 67); — The commercial activities of Nalete itself, including trade secrets, financial information and computer programs (section 68); — Research information whose disclosure would place the research at a serious disadvantage (section 69); and — Requests that are clearly frivolous or vexatious, or which involve an unreasonable diversion of resources.
All requests for information will be assessed on their own merits and in accordance with the applicable legal principles and legislation.
If access is refused, the requester may, within 30 days of notification of the decision, apply to a Court for relief. Nalete does not have an internal appeal procedure — the decision of the Information Officer is final.
Request fee (payable by all requesters except personal requesters): R50.00, payable before the request is further processed.
Access fees (payable where a request is granted):
A4 photocopy or part thereof: R1.10 per page Printed copy of A4 page or part thereof: R0.75 per page Copy on computer-readable format (CD): R70.00 Transcription of visual images (A4): R40.00 Copy of visual images: R60.00 Search fee: R30.00 per hour or part thereof Transcription of audio record (A4): R20.00 Copy of audio record: R30.00
Deposits: Where the Information Officer is of the opinion that preparation of the required record will take more than 6 hours, a deposit equal to one-third of the applicable access fee is payable.
All fees are subject to change as allowed for in PAIA.