Privacy Notice

Altura ("Altura", "we", "us", "our") operates a payroll-embedded Buy Now, Pay Later platform that lets verified employees access pre-approved spending limits at partner retailers, with repayments deducted at source by their employer's payroll. This Privacy Notice describes how we handle personal data in connection with our website, mobile experience, and partner integrations.

Where Altura processes personal data on behalf of an employer (e.g. payroll roster data), the employer is the data controller and Altura acts as a data processor. For account, transaction, and product-usage data, Altura is the controller.

• Identity & contact: full name, work email, phone number, employer, role.
• Employment & payroll: employee ID, salary band, pay-cycle dates, deduction history (received from your employer).
• Credit & transaction: approved limit, available balance, authorisations at retailers, basket amount, repayment status.
• Device & usage: IP address, device identifiers, browser, pages viewed, in-app actions, security events.
• Communications: messages you send us via forms, email, or support channels.

• Verify your eligibility, set your spending limit, and authorise transactions at partner retailers.
• Coordinate payroll deductions with your employer and settle partner retailers on a weekly cycle.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Provide customer support, respond to enquiries, and send service notifications.
• Comply with legal obligations, regulatory requests, and AML/KYC requirements.
• Improve product features, measure performance, and develop new functionality (in aggregate where possible).

We rely on the following bases under applicable data-protection law:

• Contract: to deliver the Altura service to you and your employer.
• Legitimate interests: for fraud prevention, service security, and product improvement.
• Consent: for optional marketing communications and for processing the personal data submitted via our enquiry forms.
• Legal obligation: for tax, AML, and regulatory record-keeping.

• Your employer: aggregated and individual repayment data needed to operate payroll deduction.
• Partner retailers: only the minimum needed to authorise a purchase (e.g. unique reference, approved amount).
• Service providers: cloud hosting, identity verification, payments, and analytics vendors bound by data-processing agreements.
• Authorities: when required by law, court order, or to protect the rights and safety of users and the public.

We do not sell personal data, and we do not use your transaction history for third-party advertising.

We retain personal data for as long as you have an Altura account and for a reasonable period afterward to meet legal, audit, and dispute-resolution requirements. Transaction and KYC records are typically held for at least seven (7) years in line with financial-services regulations.

• Encryption in transit (TLS 1.2+) and at rest for all sensitive data.
• Role-based access controls, MFA for staff, and least-privilege provisioning.
• Continuous monitoring, audit logging, and regular penetration testing.
• Vendor due diligence and signed data-processing agreements with all sub-processors.

Learn more on our Security & Trust page.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention obligations).
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your national data-protection authority.

To exercise any of these rights, email us at hello@altura.africa.

We use a small number of strictly-necessary cookies to keep you signed in and protect against abuse, and privacy-respecting analytics to understand aggregate site usage. We do not use advertising cookies or cross-site tracking.

Altura is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, contact us and we will delete it.

We may update this Privacy Notice to reflect changes in our practices or legal requirements. Material changes will be communicated via the platform or by email. The "Last updated" date at the top reflects the latest revision.

Privacy queries: hello@altura.africa
Or use our contact form.