Privacy Notice

Wave's mission is to make Africa the first cashless continent by using technology to build a radically inclusive and affordable financial network. When you use Wave, you trust us with your personal data. We’re committed to keeping that trust by helping you understand our privacy practices. This Privacy Notice describes the personal data we collect when you use our applications, QR cards, features, or other services (“our services”), how it’s used and shared, and your legal rights regarding your personal data.

Who this Privacy Notice applies to

This Privacy Notice applies to all users of our services including:

Wave may also collect personal data about staff of agents and merchants, and prospective users of Wave’s services. All individuals subject to this Privacy Notice are referred to as “users” in this Privacy Notice.

Types of personal data we collect and how we collect it

Wave collects the following types of personal data from users of our services:

Data provided by users

Data created during use of our services

Data received from other parties

Cookies and other tracking technologies

Cookies are small text files that are used to store small pieces of nformation on devices and websites loaded on browsers. We do not use cookies or similar tracking technologies on our website. We do use similar tracking technologies on our mobile applications, to collect usage and device data, as described in section 3 above (see “Data created during use of our services”).

How we use personal data

Wave uses personal data in order to provide and continually improve our services, and for sales and marketing purposes.

Specifically, we use personal data for the following purposes:

Who we share personal data with

Wave’s services, operations, business transactions and legal obligations, may require that we share personal data with other users or third parties.

Wave may share personal data with the following third parties:

Wave may share a user’s personal data other than as described in this Privacy Notice if we notify the user and they consent to the sharing.

In the event of transfers of personal data to third parties, we shall require them to agree to measures necessary to protect the data, and continue to respect users legal rights pursuant to the terms of this Privacy Notice and applicable laws in the user location.

International data transfers

Wave operates, and processes personal data, in several countries. We may transfer personal data internationally, where this is permissible pursuant to applicable laws in the user’s location.

In the event of international transfers of personal data, we shall put in place measures necessary to protect the data, and we shall continue to respect the user’s rights pursuant to the terms of this Privacy Notice and applicable laws in the user’s location.

Data security

We have put in place appropriate security measures to prevent personal data from being accidentally lost, disclosed or used in an unauthorised way.

In addition, we limit access to personal data to those employees, contractors and other third parties who have a business need to know. They will only process personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify users and any applicable regulator of a breach where we are legally required to do so.

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to access, correct or erase your personal data, object to or restrict processing of your personal data, and unsubscribe from our emails and newsletters.

Users may exercise these rights at any time by writing to us at Data-Requests@Wave.com

Following an account deletion request, Wave deletes the user’s account and data, unless they must be retained due to legal or regulatory requirements, for purposes of fraud prevention, or because of an issue relating to the user’s account such as an outstanding credit or an unresolved claim or dispute.

Wave retains user data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the type of data, the category of user to whom the data relates, and the purposes for which we collected the data.

Updates to this Privacy Notice

We may occasionally update this Privacy Notice. If we make significant changes, we will notify users in advance of the changes through the Wave apps or through other means, such as email. We encourage users to periodically review this Privacy Notice for the latest information on our privacy practices. Use of our services after an update constitutes consent to the updated Privacy Notice to the extent permitted by law.

1 December 2022