Privacy Policy

Khazu operates the vehicle marketplace at khazu.co.sz and is responsible for the personal information described in this policy. We handle personal information in line with the Eswatini Data Protection Act, 2022.

Information you give us:

• Account details — your name, email address, phone number, password (stored only in hashed form), account type, and profile photo.
• Dealership details — business name, registration details, address, and the names and emails of team members you invite.
• Listing content — vehicle details, photos, price, and your location as shown on the listing.
• Messages — enquiries, comments and other messages you send through Khazu.
• Payment details — the MTN MoMo number you pay from and the payment reference. We never see or store your MoMo PIN.

Information collected automatically:

• Usage information — pages and listings you view, searches, and clicks on contact buttons such as WhatsApp or call, which we use to show sellers how their listings are performing.
• Technical information — IP address, browser and device type, collected for security, rate-limiting and fraud prevention.
• Cookies and similar storage — see our Cookie Policy.

• To create and run your account and your listings.
• To pass enquiries between buyers and sellers.
• To process payments and send receipts and account notices.
• To verify dealerships and detect, investigate and prevent fraud and abuse.
• To give sellers statistics about how their listings perform.
• To keep Khazu secure, fix problems and improve the service.
• To meet our legal, tax and accounting obligations.

We rely on the contract with you (to provide the service you signed up for), our legitimate interests (security, fraud prevention and improving Khazu), our legal obligations, and — where required — your consent.

Your listings are public. They show the vehicle details and photos, your location, and the contact options you choose — such as your phone number or a WhatsApp button — so that buyers can reach you. Dealership profiles, including business name and stock, are also public. Your email address and payment details are never shown on your listings.

Only include in a listing what you are comfortable making public. When a buyer contacts you, they will see the details you use to reply.

We do not sell your personal information. We share it only with:

• Service providers who run parts of Khazu for us — database, authentication and file hosting (Supabase), payment processing (RazPay and MTN MoMo), and email delivery. They may only use your information to provide their service to us.
• Other users, as described in section 4.
• Authorities, where the law requires it or where it is needed to investigate fraud, theft or other unlawful activity.
• A buyer or successor, if Khazu's business is sold or restructured, under the same protections set out in this policy.

Some of our service providers store data on servers outside Eswatini. Where that happens, we take steps to make sure your information is protected to the standard this policy describes.

We keep account information for as long as your account is open. After you close your account we delete or anonymise it within a reasonable period, except for payment and transaction records, which we keep for as long as tax and accounting law requires, and records we need to deal with fraud or a legal claim.

We protect your information with encryption in transit, hashed passwords, row-level access controls so that users can only reach their own data, and rate limits on sensitive actions. No system is completely secure, so please use a strong, unique password and tell us straight away if you suspect your account has been compromised.

Subject to the law, you have the right to:

• ask for a copy of the personal information we hold about you;
• have inaccurate information corrected — most of it you can edit yourself in your dashboard profile;
• have your information deleted, or its use restricted;
• object to our use of your information for a particular purpose;
• withdraw any consent you have given, at any time.

To exercise any of these rights, contact us using the details below. If you are not satisfied with our response, you may complain to the data protection authority in Eswatini.

Khazu is not intended for anyone under 18, and we do not knowingly collect personal information from children.

If we change this policy in a way that materially affects you, we will tell you by email or on the site before the change takes effect.

Questions or requests about your personal information? Email info@khazu.co.sz, call +268 7860 8308, or write to us in Mbabane, Eswatini.