Privacy Policy

This is the privacy policy and privacy notice (the “Privacy Policy”) of a web and mobile application (the “App”) belonging to and operated by 10xme Technology Inc. doing business under the name and style of GIG (the “Company,” “us,” “our,” and “we”) and/or its parent company, subsidiaries, affiliates, representatives and related persons, as applicable (collectively, the “GIG Group”). The Privacy Policy is integrated with and forms an integral part of the Terms and Conditions found at gigrewards.co.za (the “Terms”).

The App, including the website located at gigrewards.co.za and all its subdomains (collectively, the “GIG Platform”), is the intellectual property and copyrighted work of the GIG Group. The GIG Platform may include certain functions, features and other services accessible or offered through the App, a web and mobile application and platform that allows users and members to earn rewards points called “GIG Points” by accomplishing various online tasks and missions, which can be converted into various rewards and prizes (the “Program”).

This Privacy Policy applies to all personal data or information that we hold about you as well as any personal data you may provide to us in relation to your rights and obligations regarding the same, in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African data protection laws, rules and regulations. This Privacy Policy applies to personal data collected, used, stored, disclosed and/or processed by the Company and is a binding and enforceable legal contract between the Company and the end user(s) of the GIG Platform (“you,” the “Member,” or the “Members”).

By becoming a Member of the GIG Platform, you confirm that you have read, understood and agree to be bound by this Privacy Policy. The GIG Group may make changes to the Privacy Policy from time to time by posting the updated version of the policy on the GIG Platform. Your access and continued use of your account following the publication of the updated Privacy Policy will be considered as an acceptance of such changes.

A. GIG Program

The GIG Platform is a rewards and loyalty program owned and administered by the GIG Group, where Members—by performing or completing online tasks, transactions, activities, missions and the like (the “Quests”)—can earn reward points called “GIG Points” which can be converted into various rewards and prizes (the “Program”). The Members can also gain access to exclusive partner promotions or offers, from its partner brands and merchants, such as but not limited to product partners, earn and/or redemption partners, commission-based partners, point-conversion partners, and promotion partners (the “Partner” or “Partners”), and avail other privileges or opportunities in accordance with the rules and provisions set out in the Terms.

B. Account and Membership

1. Personal data is collected, used, and processed by manual, physical, electronic, or automated means that are necessary to provide the products and services of the GIG Platform. Thus, when you become a Member, interact with the GIG Platform, and by performing and completing Quests, we generally collect the following data and information:
   1. Basic personal data such as your username, mobile number and password;
   2. Details and information pertaining to your device (e.g., mobile device, laptop, personal computer, etc.) such as the unique identifier of the device and the location of the device;
   3. Access to contact list, gallery, and/or camera of your device for certain features in the GIG Platform;
   4. Certain financial information and account details as may be needed to participate in Quests or process Rewards; and
   5. Supplementary information that will help us understand your needs and preferences, such as, but not limited to the following:
      • Information related to your use of social media platforms and services, including but not limited to your username, profile information, posts, messages, connections, groups, servers, and any other data made available to the Company through the social media platform and services;
      • IP address and device information (which may include the location of the device); and
      • The content, such as messages, images, and other information you provide when you use the GIG Platform, including when you register, open, or create an account, or perform certain actions in social networking sites through the GIG Platform, and/or perform various activities in the GIG Platform. This can include information regarding the content you provide which can include its metadata, such as the location or the date the content was created.
2. The GIG Platform does not track your search engine history, emails or your browsing data on any site that is not one of its Partners' sites or where it is not related to GIG Group's offerings, products, services and features in the GIG Platform. When you are on one of our Partners' sites, GIG Group will only collect information about that site that lets us calculate and validate with the Partners the rewards due to you and such quests and missions that are applicable to you.
3. You acknowledge that you are responsible for the accuracy and correctness of any personal data that you provide to us, as well as for the consequences of providing inaccurate, incorrect, or out-of-date personal data.
4. Generally, we may collect your personal data when you browse and use our App. Please see the section on “Cookies” below for more information, when you register for, complete or participate in any of the Quests on the GIG Platform and any of the Partners' platform, and/or when you submit your personal data to us for any other reason.

C. Use of Personal Data

1. Your personal data is used only for the specific purpose(s) for which it was collected. Generally, we may collect, use and disclose your personal data for the following purposes:
   1. To create and manage your account on the GIG Platform, where enrollees or applicants shall provide a valid mobile number during membership application as unique identifiers. Successful enrollees will receive a one-time-password (OTP) via the registered number for verification. Enrollees or applicants shall provide a valid username which will form part of their account's unique identifier.
   2. To enjoy the products, services and features of GIG Platform, such as, but not limited to the following:
      • Securely earn and redeem GIG Points for Rewards from the Partners;
      • View your account's GIG Points balance and transaction history;
      • Manage and secure your personal data;
      • Use the location of your device to provide you with location-based services such as advertising, search results, and other personalized content that may be relevant to you;
      • Access other similar products, services and features that the GIG Platform may offer or make available to its Members in the future.
   3. To authenticate the legitimacy of financial transactions and carry out payments;
   4. To provide customer support, monitor quality and security, and provide services timely and efficiently;
   5. To analyze and track data to determine the effectiveness of our content and to understand the activity of the Members;
   6. To notify and update the Members (through call, text, or email) about complimentary, commercial, and promotional advertisements, loyalty and rewards offers, exclusive invites, discounts, and surveys from the GIG Group and/or its Partners;
   7. To use, analyze, act upon and share to third parties (subject to compliance with the DPA and other applicable law), any relevant data, information or activity collected from the GIG Platform to enable the GIG Group and/or its Partners to provide better offerings and services;
   8. To get user data for bug reports that may be present so that we can correct such problems;
   9. To provide ongoing information about the Program and Quests which may be of interest to you;
   10. To protect and enforce our contractual and legal rights and obligations under the applicable Terms and this Privacy Policy;
   11. To investigate, address or defend against fraud, abuse or suspicious activity linked to or associated with you;
   12. To communicate changes to this Privacy Policy, the Terms and other rules and policies and the amendments and revisions thereto;
   13. To facilitate business asset transactions (which may include any merger, acquisition or asset sale) involving the GIG Group; and
   14. To comply with any applicable rules, laws and regulations, codes of practice or guidelines or to assist in law enforcement and investigations by the relevant government regulators and authorities.
2. In addition to the specified purposes above, the GIG Group may disclose, share, transfer and/or sell your personal data or personal information, including sensitive personal information with affiliated and unaffiliated third parties, including but not limited to business partners, advertisers, data brokers, marketing companies, analytics providers, AI companies and other commercial entities, without the necessity of additional notification or compensation to the Member.
3. You may unsubscribe from receiving marketing materials at any time by following the applicable steps and processes for unsubscribing or by updating your preferences to indicate through which modes of communication and what kind of marketing communications you wish to receive.
4. In order for us to provide information about the Program and Quests which may be of interest to you, we may analyze and rely on your overall interaction with us (such as but not limited to your activities and behavior in the App, your newsletter clicks or opening results, your web surfing activities, the newsletter types you are subscribed to, and your interactions with us).

D. Protection of Personal Data

1. The Company will strictly enforce this Privacy Policy and have implemented commercially reasonable technological, organizational, and physical security measures to protect your personal data from loss, misuse, modification, unauthorized or accidental access or disclosure, alteration, or destruction. In particular, we had put in place safeguards such as the following:
   1. The Company applies security measures to keep and protect your personal data or information using a secured server behind a firewall, deploying encryption on computing devices and physical security controls.
   2. We restrict access to your personal data only to qualified and authorized personnel who hold your personal data or information with strict confidentiality.
   3. Any personal data or information that you provide to the GIG Platform is initially processed and stored using a secured connection. Only authorized personnel can access and download your personal data or information from GIG Platform.
2. You agree not to hold us responsible for any loss or damage incurred as a result of any unauthorized access or use of the information you submit to or receive from us through the Internet as neither the computer security system nor the Internet is entirely secure. It is important for you to protect against unauthorized access to your password and your mobile device. Be sure to sign off when you finish using the App on a shared mobile device.
3. In certain instances that the GIG Group discloses, shares, transfers and/or sells your personal data and personal information (including sensitive personal information) with third parties, security measures that the GIG Group undertakes include ensuring that the third party is legally and contractually bound to safeguard your privacy to the extent required under applicable law. The Member understands and agrees that once their personal data is transferred or sold to third parties, the GIG Group shall no longer have any control over or responsibility for how such third parties subsequently use, process, store, or further transfer or resell such data. The Member agrees and understands that the scope provided hereunder shall be to such extent, length and scope as may be necessary to achieve the purpose of the full transfer or sale of the personal data or personal information to a third party as discussed above.

E. Disclosure of Personal Data

1. We will not share your personal data or information with third parties unless necessary for the abovementioned purposes on how we use your data and unless you give your consent thereto if required by law. Any personal information shared with such third parties shall also be covered by appropriate agreements, if applicable, to ensure that all personal data or information shared are adequately safeguarded.
2. By becoming a Member, you authorize the GIG Group to disclose your personal data or information to accredited or affiliated third parties or independent and non-affiliated third parties, whether local or foreign, as necessary for the proper execution of the processes related to the declared purposes in this Privacy Policy, or if the use or disclosure thereof is desirable or necessary, as required by or authorized under the law. This means we may provide or disclose your personal data or information to the following:
   1. To the GIG Group and/or its parent company, affiliates, subsidiaries, program partners, organizations, or agencies (including their contractors, or subcontractors) as well as prospective business partners in relation to any purpose set out in this Privacy Policy.
   2. To third parties who provide services on our behalf. Our service providers are only given the information they need to perform their designated functions. Our agreement requires them to process your personal data or information for specified purposes and in accordance with our instructions. It also restricts them from using or disclosing your personal data or information for any purpose outside the services they provide on our behalf.
   3. Upon the request of government or law enforcement authorities, when required by law or court order, or if the disclosure is otherwise necessary or advisable such as when needed to protect our rights. This also applies when we have reason to believe that the data to be disclosed is necessary to identify, contact or bring legal action against someone who may be causing interference with our rights or properties, whether intentionally or otherwise, or when anyone else could be harmed by such activities.
3. All other third parties we deem necessary to share your personal data or information with are required to use your personal data or information in a manner that is consistent with this Privacy Policy. Moreover, these third parties may only use such personal data or information for the purpose(s) disclosed in this Privacy Policy and may not use it for any other purpose. We likewise require all third parties to respect the security of your personal data and information and to treat it in accordance with the law. In certain situations, some personal data and personal information that we disclose, share, transfer or sell to third parties, may be anonymized or aggregated to prevent such information from being used to identify you as an individual.

F. Retention of Personal Data

1. Your information may be processed on servers located outside the Philippines. Data privacy laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protection described in this Privacy Policy. The DPA and its IRR, however, may take precedence when a complaint or breach occurs.
2. We reserve the right to retain and keep the personal data and information we gathered from you in our facilities in the following instances:
   1. While you are a Member;
   2. As long as it is necessary to fulfill the purpose for which it was collected;
   3. Until we no longer need it for business, tax, or legal purposes;
   4. Until you request your personal data to be deleted in the system;
   5. When your personal data or information may be necessary to resolve disputes; and/or
   6. If such action is necessary to comply with a legal obligation and/or protect and defend the rights or property of the GIG Group.
3. If the Company is required to retain any portion of your personal data or information for such purposes, it shall use reasonable efforts to limit such data to what is necessary to accomplish a particular purpose.
4. Upon closure of your account, and subject to other grounds for retention, we will retain your personal data up to five (5) years from the date of the account closure and/or termination. After this period, the Company has the right to assume that you are no longer interested in being a member of the Program and will proceed to delete your personal data or information.
5. When we dispose of your personal data or information, we use reasonable procedures to destroy it or make it unreadable (such as shredding or by wiping electronic data). Once deleted, your personal data or information will no longer be searchable or used in the GIG Platform.

G. Third-Party Sites

For your convenience and information, we may provide access to third-party websites and services, including those of our Partners, may operate independently from us. You acknowledge that any linked services or websites you visit have different guidelines and notices provided, and that GIG Group do not own or control these external platforms, and therefore the GIG Group cannot be held responsible for: (a) the content presented on these websites or services, (b) your utilization of these platforms, and/or (c) the privacy practices implemented by these third-party websites or services.

H. Cookies

1. The GIG Platform may use “cookies” to enhance user experience. “Cookies” are files that a website or its service provider transfers to your mobile device or computer's hard drive which enable the website's or service provider's systems to recognise your device or browser and capture and remember certain information.
2. We may use cookies on websites, social media accounts, and mobile applications. Cookies enable us to offer better products and services and to understand the information we receive about you, including information about your use of other websites and apps, whether or not you are registered or logged in. We use cookies to track information such as the number of pageviews, the number of users, frequency of use, duration of use and common entry and exit points into the website.
3. If you do not agree to our use of cookies, you may disable cookies by configuring your browser or device settings. However, this may restrict your use of certain parts of the GIG Platform.

I. Rights of Data Subjects

1. As a user of the GIG Platform and a data subject, you have rights according to the DPA and its IRR that you may exercise any time you feel necessary. These are:
   1. The right to be informed – You have the right to know when your personal data or information shall be, are being, or have been processed.
   2. The right to access – You are able to compel any entity possessing any personal data or information to provide the data subject with a description of such data in its possession, as well as the purposes for which they are to be or are being processed.
   3. The right to object – You have the right to object or withhold your consent to process your personal data or information.
   4. The right to erasure or blocking – You have the right to suspend, withdraw or order the blocking, removal, or destruction of your personal data or information.
   5. The right to damages – You have the right to claim compensation if you have suffered damages due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data or information, considering any violation of your rights and freedom as a data subject.
   6. The right to file a complaint – You have the right to file a complaint with the National Privacy Commission (NPC) if you feel that we have misused, maliciously disclosed, or improperly disposed, your personal data or information or that any of your data privacy rights have been violated.
   7. The right to rectify – You have the right to dispute and correct any inaccuracy or error in the data we hold about you; and
   8. The right to data portability – You have the right to obtain and electronically move, copy, or securely transfer your data for further use.
2. These rights are designed to empower you and ensure that your personal data or information is handled in a fair, transparent, and responsible manner. In some instances, the exercise of these rights will undergo further validation and assessment and may not be granted to ensure implementation of certain services such as fraud investigation, legal proceedings, and other services related to the Program.
3. The DPA requires you to exercise your rights as described in this Privacy Policy in a reasonable and non-arbitrary manner. All requests, demands, or notices which you may make under this Policy or applicable laws must be made in writing. You may send your intent to exercise your rights by mailing us at support@gigrewards.com.
4. If you need to access, correct, modify, or request deletion of your personal data or information, you may contact the Company through email at support@gigrewards.com. We may charge you with minimal and reasonable fees for any request or concerns that will entail costs when we retrieve, review, and print copies of your personal data or information.

J. Changes to Our Privacy Policy

The Company reserves the right to make changes or updates to this Privacy Policy without need of prior notice or consent. You are responsible for keeping track of the changes made to the Privacy Policy. Your continued access or use of the GIG Platform shall constitute your agreement to be bound by any such changes to this Privacy Policy.

K. Contact Information

For inquiries regarding the processing of personal data or information stated in this Privacy Policy, as well as any concerns or complaints regarding data privacy, or the exercise of your rights as a data subject under the DPA, you may contact the representatives and administrators of the GIG Platform for further assistance through email at support@gigrewards.com. Please clearly state the material facts, specify your contact information and include any supporting evidence.