Koekiebeleid

yalla Proprietary Limited (registration number: 2026/097649/07) (“yalla”) operates a mobile-first agricultural marketplace through which Users may list, browse and buy livestock, agricultural goods, farm products, equipment, feed, fodder and Services (“Platform”). yalla respects the privacy of every User and treats the protection of Personal Information seriously. This Cookie Policy explains how yalla uses cookies and similar technologies on the Website, the App and the Platform to operate, secure and improve the Platform Services. Capitalised terms used but not defined in this Cookie Policy have the meanings given to them in yalla’s Privacy Policy and PAIA Manual (“Privacy Policy”) and the Terms.

Please read this Cookie Policy together with the Privacy Policy and the Terms. If you have any questions about our cookie practices, please contact yalla’s Information Officer using the details set out in clause 25 of the Privacy Policy, or through the support function in the App.

1WHAT IS A COOKIE?

A cookie is a small text file containing letters and numbers that is placed on your browser or device when you access the Website. In this Cookie Policy, “cookies” also includes similar technologies used on the App and the Platform, such as entries in your browser’s local storage or the App’s storage on your device (including storage used for offline chat messages and queued uploads) and device identifiers such as push notification tokens.

Cookies may be “session” cookies, which are deleted when you close your browser, or “persistent” cookies, which remain on your device for a set period. Cookies may also be “first-party” cookies set by yalla or “third-party” cookies set by another company. yalla itself sets only first-party cookies and storage items, and none of them is sent to a third party. Third-party cookies are set only on the hosted payment pages of the Escrow Provider and Paystack, as described in clause 6.

2WHO IS RESPONSIBLE AND WHAT DOES THIS POLICY COVER?

yalla is the responsible party, as contemplated in the Protection of Personal Information Act No. 4 of 2013 (“POPIA”), in respect of Personal Information Processed through cookies on the Platform. This Cookie Policy applies to all Users, including Buyers, Sellers, Field Agents, service providers and browsers, who access the Website (yallasa.co.za), the App (iOS and Android) or any other part of the Platform. The Escrow Provider performs identity verification, bank account verification, payment and Escrow functions as an independent responsible party, and any cookies set by it or by the payment gateways behind its hosted payment page are governed by their own terms and privacy notices. Cookies set by Paystack on its hosted payment page are likewise governed by Paystack’s own policy.

3LEGAL BASIS AND CONSENT

yalla Processes Personal Information collected through cookies only where a lawful justification exists under section 11 of POPIA, as set out in clause 4 of the Privacy Policy. Strictly necessary cookies are used because they are necessary to conclude or perform the Terms and to provide the Platform Services you request, and to pursue yalla’s legitimate interests in securing the Platform, preventing fraud and stock theft and maintaining the integrity of the marketplace. These cookies cannot be switched off.

yalla does not use third-party analytical or advertising cookies. The only items that are not strictly necessary are the first-party analytical and functionality items described in clause 5, which are stored only on your device or browser, are not shared with any third party and are used to pursue yalla’s legitimate interests in measuring Listing views and remembering your display choices. You may object to this Processing, or remove these items, at any time as described in clause 7. If yalla introduces any third-party or advertising cookies in future, it will first ask for your consent through a cookie preference tool and keep a record of the consents you give or withdraw.

yalla will only collect and Process Personal Information through cookies that is adequate, relevant and not excessive for the purposes described in this Cookie Policy. For a full explanation of how yalla Processes Personal Information, including retention periods, security safeguards and cross-border transfers, please refer to the Privacy Policy.

4WHAT PURPOSE DO WE USE COOKIES FOR?

yalla uses cookies to operate and secure the Platform, keep you logged in to your account, support checkout and the Escrow process, retain offline drafts and queued uploads in low-connectivity areas, remember your preferences and detect and prevent fraud, stock theft, impersonation, off-Platform circumvention and unauthorised access.

yalla measures the performance (views and opens) of paid service listings itself, without using any advertising network or advertising cookies. yalla does not sell Personal Information and will not share Personal Information collected through cookies with sponsors or partners for their own marketing without your specific consent.

yalla does not use tracking tags or pixels in email or other electronic communications. Direct Marketing is sent only in accordance with section 69 of POPIA and clause 8 of the Privacy Policy. yalla also uses usage statistics collected by the App to compile aggregated or de-identified statistics on Platform usage, categories, pricing trends and Listing performance, and will only use such insights for any external commercial purpose once de-identified so that no User can be identified.

5CATEGORIES OF COOKIES WE USE

Strictly necessary cookies. These items are required for the Platform to function and cannot be switched off. They are: the yalla_signed_in cookie on the Website (which tells the marketing pages that you are signed in, holds no token and lasts 30 days); the sign-in session token in the web App (kept until sign-out and never leaving your browser); queues of chat messages and photos written offline, and of crash and error reports, kept until sent; and a record of whether the App’s pre-launch screen has been unlocked.

Analytical/performance (first-party only). The App and the web App create a random visitor key so that a guest who views a Listing is counted only once in that Listing’s view count. It is not derived from your device, is hashed again on yalla’s server, is not used for signed-in Users, is sent to no third party and remains until storage is cleared. Usage statistics and crash reports are collected by the App itself and stored in yalla’s own database; yalla uses no third-party analytics or crash-reporting tools.

Functionality (first-party only). These persistent items remember your display choices, such as grid or list view, your last search filters, the last tab opened, remembered layout sizes (so screens do not jump while loading) and whether you dismissed the “open in the yalla app” banner.

Advertising cookies. yalla does not use advertising networks, advertising cookies or social-media SDKs. WhatsApp, Facebook and Instagram appear only as ordinary links. The marketing Website loads no third-party scripts.

6THIRD-PARTY COOKIES AND CROSS-BORDER TRANSFERS

yalla’s App and Website are built and run by yalla’s own team. The following Operators provide technology services to yalla and receive Personal Information when you use the Platform: Supabase, Inc. (database, accounts, sign-in, photo storage and server functions; hosted in Ireland) (https://supabase.com/privacy); Cloudflare, Inc. (network security and content delivery; global network) (https://www.cloudflare.com/privacypolicy/); Vercel Inc. (Website and web App hosting; United States and global) (https://vercel.com/legal/privacy-policy); Expo (650 Industries, Inc.) (App framework and push notifications, receiving your push token and notification text; United States) (https://expo.dev/privacy); Google LLC (maps, place search and geocoding; United States and global) (https://policies.google.com/privacy); Apple Inc. (maps in the iOS App; United States and global) (https://www.apple.com/legal/privacy/); and Twilio SendGrid (transactional email, replacing Resend, Inc. during October 2026; United States) (https://www.twilio.com/en-us/legal/privacy). Paystack Payments Limited (Nigeria, United States and South Africa) collects service listing fees on its own hosted page (https://paystack.com/za/terms#privacy). Google Play and the Apple App Store collect their own statistics under their own terms. Your location is read only when you tap “near me” or “share my location”, is used only for that search or message and is not kept on your profile.

Each of these providers is located or processes Personal Information outside the RSA. They Process Personal Information only on yalla’s instructions under written data processing terms that include standard contractual safeguards, and any transfer takes place only as permitted by section 72 of POPIA and clause 7 of the Privacy Policy. The Escrow Provider, Trade-Safe Holdings (Pty) Ltd and the payment gateways behind its payment page process Personal Information in the RSA.

7HOW CAN I CONTROL COOKIES?

You may remove the first-party analytical and functionality items at any time, free of charge, by clearing the App’s storage or your browser data, and you may switch off location access and push notifications in your device settings.

You may also block or delete cookies through your browser or device settings. If you block strictly necessary cookies, some parts of the Platform (such as login, checkout or offline drafts) may not work.

8YOUR RIGHTS

Subject to POPIA, the Promotion of Access to Information Act No. 2 of 2000 (“PAIA”) and other Applicable Laws, you have the right to ask whether yalla holds Personal Information about you request access to it, request its correction or deletion, object to its Processing, withdraw consent, and lodge a complaint with yalla or with the Information Regulator (enquiries@inforegulator.org.za; complaints.IR@inforegulator.org.za). Requests must be directed to the Information Officer in accordance with clause 12 of the Privacy Policy and access requests will be dealt with in accordance with the PAIA Manual.

9CHANGES TO THIS COOKIE POLICY

yalla may amend this Cookie Policy from time to time by publishing the amended version on the Platform. Where a change materially affects how cookies are used, yalla will notify you and, where required, ask for your consent again.

10GOVERNING LAW AND JURISDICTION

This Cookie Policy is governed by and construed in accordance with the laws of the Republic of South Africa, including POPIA, PAIA and the Electronic Communications and Transactions Act No. 25 of 2002. Any dispute arising from or in connection with this Cookie Policy is subject to the non-exclusive jurisdiction of the courts of the RSA, without limiting your right to lodge a complaint with the Information Regulator or to exercise any remedy available under the Consumer Protection Act No. 68 of 2008.