Acceptable Use Policy

**TOSHZA (Pty) Ltd** · Registration 2025/929932/07

Website: https://toshza.co.za

Version 1.0 · Effective 17 July 2026 · Last updated 17 July 2026

This Acceptable Use Policy sets the rules of conduct for customers, suppliers, and visitors using the TOSHZA multi-vendor marketplace operated by TOSHZA (Pty) Ltd (Registration Number 2025/929932/07) at https://toshza.co.za. It prohibits fraud, abuse, harassment, counterfeit or misleading listings, OTP misuse, security probing, scraping abuse, spam, and related harmful activity, and explains enforcement and reporting through support@toshza.co.za.

1. Introduction and purpose

TOSHZA (Pty) Ltd ("TOSHZA", "we", "us", or "our") provides a multi-vendor marketplace connecting customers and independent suppliers in the Republic of South Africa.

This Acceptable Use Policy ("Policy") protects the integrity, safety, and reliability of the Platform and forms part of the TOSHZA Legal Documents Package. It applies together with the Terms and Conditions, Supplier Agreement, Community Guidelines, Privacy Policy, and Refund and Return Policy.

Access to and use of https://toshza.co.za and related TOSHZA applications, APIs, messaging channels, and admin tools is conditional on compliance with this Policy.

2. Scope and who this Policy applies to

This Policy applies to:

Customers who browse, register, order, review, message, or otherwise interact with the Platform.
Suppliers and their staff who list products, fulfil orders, manage stores, or use supplier tools.
Drivers and logistics partners who accept assignments, collect or deliver orders, and use OTP or tracking features.
Visitors, developers, marketers, and any person who accesses Platform systems, content, or data.

References to "you" mean any such person or entity. Role-specific rules below are in addition to the general prohibitions.

3. General standards of acceptable use

You must use the Platform lawfully, honestly, and in good faith. You must not interfere with other users' enjoyment of the Platform or with TOSHZA's operations.

You must provide accurate registration and fulfilment information, keep credentials confidential, and promptly update details that affect orders, payouts, or safety.

You must comply with applicable South African law, including consumer, privacy, intellectual property, tax, and criminal laws relevant to your activities on the Platform.

4. Prohibited conduct — customers

Customers must not:

Commit fraud, including false non-receipt claims, fabricated damage claims, or deceptive refund requests.
Create or use fake, duplicate, or borrowed accounts to obtain promotions, evade restrictions, or mislead TOSHZA, suppliers, or drivers.
Abuse Platform features, support channels, ratings, or messaging (including harassment, threats, hate speech, or intimidation of suppliers, drivers, or TOSHZA staff).
Engage in chargeback abuse, including disputing legitimate fulfilled orders without good cause, or pursuing overlapping refund and chargeback remedies in bad faith.
Share Delivery OTPs or account access with unauthorised persons in a manner intended to facilitate theft or false delivery disputes.
Place orders with no intention to accept delivery, repeatedly cancel in bad faith, or otherwise disrupt supplier and driver operations.

5. Prohibited conduct — suppliers

Suppliers must not:

List, sell, or fulfil counterfeit, stolen, prohibited, or illegally imported goods.
Create, solicit, or publish fake reviews, manipulated ratings, or incentivised false feedback.
Publish misleading product titles, images, descriptions, pricing, stock status, or origin claims.
Create fraudulent listings, bait-and-switch offers, or listings designed to harvest personal information without a genuine offer to sell.
Fulfil orders with substituted goods materially different from the listing without customer agreement and Platform rules compliance.
Circumvent commission, payout holds, verification, or compliance controls, or misuse customer personal information obtained through orders.

6. Prohibited conduct — drivers

Drivers must not:

Abuse Collection OTP or Delivery OTP processes, including coercing disclosure, inventing confirmation, or confirming handover without actual custody transfer.
Steal, tamper with, divert, open, consume, or withhold customer goods.
Record fake deliveries, false GPS trails, or false completion statuses.
Share login credentials, driver identity, or device access with another person so that an unverified individual performs deliveries under the driver's account.
Harass customers, suppliers, or other drivers, or solicit off-platform payments in breach of Platform rules.
Use assignment information for any purpose other than completing the authorised delivery.

7. Security probing and system integrity

You must not probe, scan, penetrate, or test the vulnerability of TOSHZA systems, networks, or users without prior written authorisation from TOSHZA.

Prohibited security activity includes, without limitation:

Attempting to bypass authentication, authorisation, OTP, payment, or admin controls.
Introducing malware, ransomware, spiders designed for attack, or denial-of-service activity.
Exploiting bugs for gain rather than reporting them responsibly through support@toshza.co.za or another designated security channel.
Accessing data, accounts, or environments you are not authorised to use.

TOSHZA may investigate suspected security abuse and cooperate with law enforcement and payment providers where appropriate.

8. Scraping, data mining, and automated access

You must not scrape, crawl, harvest, or bulk-download Platform content, pricing, user data, or supplier catalogues except as expressly permitted by published APIs, robots rules, or a written agreement with TOSHZA.

Automated access that degrades performance, evades rate limits, spoofs identity, or collects personal information without lawful basis is prohibited.

Competitive intelligence gathering that involves unauthorised automated extraction of TOSHZA listings or user information is not permitted.

TOSHZA may throttle, block, or legally pursue abusive automation.

9. Spam and abusive communications

You must not use the Platform to send spam, unsolicited bulk messages, phishing content, or deceptive promotions.

This includes misuse of in-app messaging, review fields, store descriptions, support tickets, or contact details obtained through orders.

Marketing to Platform users is permitted only where you have a lawful basis, honour opt-outs, and comply with POPIA, direct-marketing rules, and TOSHZA's Community Guidelines.

10. Intellectual property and content misuse

You must not upload or distribute content that infringes copyright, trade marks, design rights, or other intellectual property.

Suppliers must have the rights needed to use product images, brand names, and marketing copy in their listings.

You must not misuse TOSHZA's name, logo, or brand to imply endorsement, partnership, or employment without written permission.

11. Illegal and harmful activities

You must not use the Platform to promote or facilitate illegal activity, including trafficking in prohibited goods, money laundering, identity theft, or exploitation of others.

Content or conduct that is violent, sexually exploitative, discriminatory in a manner prohibited by law, or that endangers minors is strictly forbidden.

TOSHZA may remove content, suspend accounts, and report matters to competent authorities without prior notice where reasonably necessary to protect users or comply with law.

12. Accounts, credentials, and multi-accounting

Each user must maintain account security and must not sell, rent, or transfer accounts except as expressly permitted by TOSHZA.

Creating multiple accounts to evade enforcement, exploit promotions, manipulate ratings, or obscure identity is prohibited.

TOSHZA may require identity verification for customers, suppliers, or drivers and may restrict unverified accounts.

13. Payments, promotions, and marketplace integrity

You must not exploit payment flows, voucher logic, referral schemes, or refund processes in a deceptive manner.

Collusion between customers, suppliers, and/or drivers to fabricate orders, inflate volume, steal promotional value, or launder funds is prohibited.

PayFast and other payment providers' acceptable-use and fraud rules also apply to payment activity initiated through the Platform.

14. Investigation and enforcement

TOSHZA may investigate suspected breaches using order records, device signals, OTP logs, messaging content on the Platform, payment metadata, and other lawful evidence.

Enforcement actions may include warnings, content removal, withholding of payouts where contractually permitted, suspension, permanent ban, refusal of future onboarding, and recovery of losses or costs.

Serious or repeated breaches may result in reporting to payment providers, regulators, or law enforcement.

Enforcement decisions are made to protect the marketplace and do not limit any legal remedies available to TOSHZA or affected users.

15. Reporting violations

If you become aware of fraud, harassment, counterfeit goods, OTP abuse, security issues, or other violations of this Policy, please report them promptly to:

Support: support@toshza.co.za
Privacy or data concerns: privacy@toshza.co.za
Website reporting channels published at https://toshza.co.za

Provide the order number, account identifiers, screenshots, and a factual description where available. Good-faith reporters help keep the marketplace safe; knowingly false reports may themselves breach this Policy.

16. Relationship with other terms

A breach of this Policy may also constitute a breach of the Terms and Conditions, Supplier Agreement, Supplier Onboarding Terms, Community Guidelines, or other applicable contracts.

If there is a conflict on a specific operational topic, the more specific marketplace document may prevail for that topic, provided that TOSHZA's right to suspend for harmful conduct remains available.

Nothing in this Policy excludes rights that cannot be limited under South African law.

17. Updates and contact

TOSHZA may update this Acceptable Use Policy from time to time. The published version and dates in the Legal Documents Package identify the current text.

Material updates will be made available on https://toshza.co.za. Continued use of the Platform after updates take effect constitutes acceptance to the extent permitted by law.

TOSHZA (Pty) Ltd, Registration Number 2025/929932/07, Florida Hills, Roodepoort, Gauteng, South Africa. Governing law: laws of the Republic of South Africa. Contact: support@toshza.co.za.

Contact: support@toshza.co.za · Privacy: privacy@toshza.co.za