Privacy Policy

This policy explains how RibiPeople handles personal information when you visit our website, contact us, receive a reward or benefit, or use an employer-sponsored RibiPeople programme. RibiPeople is the employee-experience layer powered by RibiRewards. Depending on the service, your employer may determine why employee data is processed while we operate the platform on its instructions.

We may process identity and contact details, employment identifiers, organisation and role information, programme eligibility, delivery details, reward or benefit activity, support communications, device and usage data, and information you choose to submit through forms. We do not need payroll salary data merely to provide the core platform unless a specific agreed integration requires it.

Information may come directly from you, from your employer or programme administrator, from an authorised HR or payroll integration, from a fulfilment partner when necessary to complete a transaction, or from your use of our website and services.

We use personal information to provide accounts and programme access, determine eligibility, deliver rewards, benefits and experiences, process support requests, prevent abuse, maintain security, produce employer reporting, improve the service, and meet legal or contractual obligations. We do not sell personal information to advertisers.

Where your organisation sponsors your RibiPeople access, it may control programme rules, budgets, eligibility and reporting. Your employer may receive appropriate programme-level or employee-level administration information. We do not provide employers with unnecessary sensitive information about how an employee uses a wellbeing service.

Some transactions require us to share limited information with merchants, logistics providers, experience operators, payment providers or other fulfilment partners. We limit sharing to what is reasonably needed to issue, deliver, redeem, book, support or reconcile the relevant service.

RibiPeople supports organisations across multiple African markets. Information may therefore be processed or accessed outside the country in which it was collected. Where required, we use contractual, organisational and technical safeguards appropriate to the transfer and applicable law.

We keep information only for as long as needed for the purpose for which it was collected, including account administration, transaction records, audit, dispute handling, fraud prevention and legal obligations. Retention periods vary by record type and customer arrangement.

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to certain processing, request portability, or withdraw consent. Some requests relating to an employer-managed account may need to be coordinated with that employer. We may verify identity before completing a request.

We use administrative, technical and organisational safeguards designed to protect information from unauthorised access, alteration, loss or misuse. Access is limited by role and operational need. No internet service can guarantee absolute security. See our Security & Trust page for more detail.

Our website uses technologies needed to operate the site and may use analytics to understand performance and usage. Where consent is required for non-essential technologies, we will request it before those technologies are used.

RibiPeople is designed for workplace and business use and is not directed to children. If a programme legitimately involves a dependant benefit, the employer and relevant provider remain responsible for ensuring the arrangement is appropriate and lawful.

We may update this policy as our services, partners or legal obligations change. The current version and effective date will remain available on this page.

For privacy questions, rights requests or concerns, email [email protected]. Please avoid sending unnecessary sensitive information by email.