Terms & policies.

01 · Terms & conditions

General terms and conditions of sale

1.1 Who we are

These terms are issued by TheUmbrella (Pty) Ltd, a private company registered in the Republic of South Africa under registration number 2026/771931/07, with its principal place of business in Cape Town, South Africa ("theUmbrella", "we", "us" or "our"). We operate the website www.theumbrella.co.za and the following products:

• SBS — a security review service for software businesses. Reviews are purchased online at a fixed price or on quotation, and the results are delivered electronically.
• Wilderpass — an online platform for booking hunting trips at South African game estates. Hunters pay through Wilderpass, which holds the payments and pays the estate as set out in the payment policy.

1.2 Agreement

By placing an order, making a booking or paying for any service on our website or any of our products, you agree to these terms, together with any product-specific terms shown to you before you pay. Where product-specific terms differ from these general terms, the product-specific terms apply to that purchase. If you do not agree, please do not proceed with payment.

1.3 Who may buy

You must be at least 18 years old and legally able to enter into a binding contract. If you buy on behalf of a company or other organisation, you confirm that you are authorised to bind it.

1.4 Prices and VAT

Prices are shown in South African Rand (ZAR) unless stated otherwise. Where a price is shown in another currency, the ZAR amount and the applicable exchange rate are determined by our payment provider at the time of payment. Prices include VAT where applicable, and a tax invoice or receipt is issued electronically for every payment. We may change our prices at any time, but changes do not affect orders already paid for.

1.5 Scope of services

The scope of each service is set out on the relevant order page, quotation or booking confirmation. Anything outside that scope is a separate engagement. Our services are professional services and depend on the accuracy and completeness of the information you give us; we are not responsible for shortcomings that result from inaccurate or incomplete information.

1.6 Wilderpass: our role

Wilderpass is a platform for booking hunting trips at South African game estates. In these terms, an "estate" is a landowner, game farm, outfitter or professional hunter offering hunts on Wilderpass, and a "hunter" is a person who books or pays for a hunt on Wilderpass.

Before an estate, outfitter or professional hunter can list on Wilderpass, we verify who they are: the identity of the person responsible (identity document and a matching selfie, or a document check in person by our team), the company's CIPC registration where the estate is a company, and, for outfitters and professional hunters, their registration number under the Regulations for the Registration of Professional Hunters, Hunting Outfitters and Trainers. Before an estate can receive a payout we also confirm that its bank account is held in its verified name. Verification confirms identity and registration; it is not a guarantee of an estate's conduct, and each hunt's permits remain the estate's and the hunter's responsibility.

The estate provides the hunt and holds the contract for it with the hunter; theUmbrella is not a party to that contract. Wilderpass provides the platform and the booking record, holds the payments and pays the estate as set out in the payment policy (section 2.1). The estate's own conditions, including its cancellation conditions, are shown to you before you pay. A booking is confirmed when your deposit payment succeeds.

Wilderpass does not sell firearms, ammunition, or wildlife or animal products, and does not issue hunting permits or licences.

1.7 Your consumer rights

Nothing in these terms removes any right you have under the Consumer Protection Act 68 of 2008 or the Electronic Communications and Transactions Act 25 of 2002 (ECTA), where those Acts apply to you. Where ECTA provides for it, you may cancel an electronic transaction within seven days of concluding it, unless performance of the service has already begun with your consent (see section 4.4).

1.8 Liability

To the extent permitted by law, our total liability to you in connection with any order or booking is limited to the amount you paid for it. We are not liable for indirect or consequential loss, including loss of profit, business or data. Nothing in these terms limits liability that cannot be limited by law.

1.9 Governing law

These terms are governed by the laws of the Republic of South Africa, and the South African courts have jurisdiction over any dispute, without limiting your right to approach the National Consumer Commission or any other body with statutory jurisdiction.

1.10 Changes to these terms

We may update these terms from time to time. The version in force when you pay is the version that applies to your purchase. The effective date and version number appear at the top of this page.

02 · Payment policy

How payments are processed

All online payments are processed by licensed third-party payment service providers. We do not collect, see or store your card number, CVV or banking credentials at any point.

• SBS payments are processed by Payfast (Payfast (Pty) Ltd), a South African payment gateway. Accepted methods include debit and credit cards and instant EFT, as shown at checkout.
• Wilderpass payments are processed by Turnstay (Turnstay (Pty) Ltd), a South African payment provider that accepts major debit and credit cards in ZAR and selected foreign currencies, as shown at checkout.

Both providers are PCI DSS certified. Your payment is made on the provider's secure hosted payment page, and we are notified only of the outcome. Where a card is charged in a currency other than ZAR, your card issuer or the payment provider may apply a currency conversion rate and fee, which is disclosed to you before you confirm payment.

Your order or booking is confirmed only once the payment provider confirms that payment has succeeded. If a payment fails or is reversed, no service is provided and no booking is held.

The name shown on your bank or card statement will be that of the payment provider, TheUmbrella, or the product name (SBS or Wilderpass), depending on the provider and your bank.

2.1 Wilderpass: deposit and balance

• Every payment for a hunt is made through Wilderpass, on Turnstay's secure checkout. Hunters never pay the estate directly.
• There are two payments. The deposit, shown before you pay (currently 30% of the hunt price), is paid when the estate confirms your booking; paying it confirms the booking. The balance is paid before the hunt, by the date shown on the listing: 14 days before arrival, unless the estate has chosen 30 days before arrival or payment at booking. You may pay the full amount at booking if you prefer.
• Both payments are held by Wilderpass through Turnstay. The deposit is paid to the estate when you arrive for your hunt and you or the estate confirm your arrival in the app. The balance is paid to the estate when the hunt is complete: when you and the estate confirm it, or 7 days after the hunt's end date if no dispute has been raised.
• In a group booking, each member pays their own share of both payments, and each share is held and refunded separately.
• If the balance is not paid by its due date, we remind you. From the due date the estate may cancel the booking, and if the balance is still unpaid 7 days after the due date, the booking is cancelled automatically. In both cases your deposit is treated under the cancellation conditions in section 4.3, as a cancellation by you on that date.

03 · Refund policy

When and how we refund

3.1 General

Refunds are made to the original payment method through the same payment provider used for the purchase. We do not refund in cash or to a different card or account, except where the payment provider is unable to return funds to the original method, in which case we will agree an alternative with you.

Approved refunds are submitted to the payment provider within 5 business days of approval. The provider and your bank then typically take a further 5 to 10 business days to reflect the funds, depending on your bank and card type. We will confirm by email when a refund has been submitted.

Refunds are made in the currency and amount originally charged. Where a payment was made in a foreign currency, the amount reaching your account may differ because of exchange-rate movement and any fees applied by your card issuer; these are outside our control.

3.2 SBS

• If you cancel before we begin work on your review (before the kick-off call, or before we access any of your systems, code or documents, whichever happens first), you receive a full refund.
• If you cancel after work has begun but before the report is delivered, we refund the price less a reasonable charge for the work completed, which we will set out for you in writing.
• Once the report or review results have been delivered, the service has been performed in full and no refund is due.
• If we are unable to perform the service, or we fail to deliver within the agreed timeframe for reasons within our control, you may choose a full refund.

3.3 Wilderpass

• The cancellation conditions apply to the deposit. A balance you have already paid is refunded in full if the booking is cancelled before the hunt, whoever cancels.
• If the estate cancels, or cannot provide the hunt, you receive a full refund of everything you have paid, whenever this happens.
• If you cancel, the estate's cancellation conditions, shown on the listing and before you pay, decide how much of the deposit the estate keeps (see section 4.3).
• If the person the booking was for dies or is hospitalised, no cancellation charge applies and everything paid is refunded in full (Consumer Protection Act, section 17).
• If the hunt is provided but does not materially match what was booked, report it to us within 7 days of the hunt's end date. The balance stays held while we look into it with you and the estate, and may be refunded to you in full or in part. The deposit, having been paid to the estate on arrival, is not refundable through this process.
• If we cancel a booking for suspected fraud, misuse of the platform or a breach of these terms, everything held is refunded unless a dispute is open.
• Refunds go to the card used for the payment. Despite section 3.1, a payment made in a foreign currency is refunded in rand, converted at Turnstay's rate on the day of the refund, so the amount in your currency may differ.

3.4 How to request a refund

Email hello@theumbrella.co.za with your order or booking reference, the email address used at purchase and the reason for the request. We acknowledge every request within 2 business days and give you a decision within 7 business days.

04 · Cancellation policy

Cancelling an order or booking

4.1 How to cancel

Cancel by emailing hello@theumbrella.co.za from the email address used at purchase, quoting your order or booking reference, or by using the cancellation option in your account where one is provided. A cancellation takes effect when we receive it, and we confirm it by email.

4.2 SBS

• You may cancel at any time before we begin work, at no charge (full refund, section 3.2).
• After work has begun, you may still cancel; the refund is reduced by the value of work completed to date.
• We may cancel an order if we cannot obtain the access or information needed to perform the review, if the scope turns out to be materially different from what was ordered, or if continuing would be unlawful. In those cases you receive a full refund unless we have already delivered part of the work at your request.

4.3 Wilderpass

• Each estate sets the cancellation conditions for its hunts. They apply to the deposit; a balance you have already paid is refunded in full if the booking is cancelled before the hunt (section 3.3). The conditions are shown on the listing and again before you pay, and by paying you accept them.
• If you cancel, the conditions decide how much of the deposit the estate keeps. Estates choose one of the conditions below, or set their own within the same limits. Where an estate has not chosen, Standard applies.

• If the estate cancels, or cannot provide the hunt, you receive a full refund of everything you have paid, regardless of timing.
• Wilderpass may cancel a booking where we reasonably suspect fraud, misuse of the platform or a breach of these terms, in which case everything held is refunded to the hunter unless a dispute is open.

4.4 Statutory cooling-off

Where section 44 of ECTA applies to your purchase, you may cancel within seven days of placing the order without reason and receive a full refund, unless you asked us to begin performing the service within that period and we have done so.

On Wilderpass, the ECTA seven-day cooling-off right does not apply to a hunt booked for specific dates (ECTA section 42(2)(j)). Your rights under the Consumer Protection Act still apply.

05 · Delivery policy

How our services are delivered

theUmbrella sells services only. No physical goods are shipped, and no delivery or courier charges apply. SBS services and the Wilderpass platform are delivered electronically to the email address or account you used at purchase. Wilderpass hunts are provided in person by the estate, at the place and on the dates in the booking confirmation.

5.1 SBS

• On successful payment you receive an order confirmation and a tax invoice by email, usually within minutes.
• Your review is delivered as a written report, made available in your SBS portal account and sent to your email address, within the timeframe stated on the order page or quotation. Where no timeframe is stated, we deliver within 10 business days of receiving the access and information we need from you.
• If we expect a delay, we tell you before the due date and give you a new date; if the new date is not acceptable to you, you may cancel for a full refund of any undelivered work.

5.2 Wilderpass

• When your deposit payment succeeds you receive a booking confirmation by email and in your Wilderpass account, showing the hunt, dates, estate, the deposit paid and the balance due date.
• The hunt itself is provided in person by the estate, at the place and on the dates in the confirmation. Any documents the estate needs to provide (permits, itineraries, packing lists) are shared through the platform or by email before the start date.
• Your payments are held by Wilderpass until they are due to the estate: the deposit is paid to the estate when you arrive, and the balance when the hunt is complete.

5.3 Problems with delivery

If you do not receive a confirmation within one hour of paying, check your spam folder and then contact us at hello@theumbrella.co.za with the payment reference. We will locate the payment and resend your confirmation.

06 · Privacy policy

How we handle your personal information

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). TheUmbrella (Pty) Ltd is the responsible party.

6.1 What we collect

Your name, company, email address, telephone number and the information you give us to perform the service (for SBS, details of the systems being reviewed; for Wilderpass, booking details and any information estates require). Payment card data is collected by Payfast or Turnstay on their own pages and is never stored by us.

6.2 Why we use it

To perform the service you bought, issue invoices and receipts, communicate with you about your order or booking, meet our legal and tax obligations, prevent fraud, and improve our services. We do not sell personal information and we do not send marketing without your consent.

6.3 Who we share it with

Our payment providers (Payfast, Turnstay), our hosting and email providers, Wilderpass estates to the extent needed to fulfil a booking, and professional advisers or authorities where the law requires. Service providers process information on our instructions and under contract.

6.4 Retention and security

We keep transaction records for as long as tax and company law require (generally five years), and other information only as long as needed for the purpose it was collected. Information is protected by access controls, encryption in transit and the security practices we apply to our own systems.

6.5 Your rights

You may ask what personal information we hold about you, ask us to correct or delete it, or object to its processing, by emailing hello@theumbrella.co.za. You may also lodge a complaint with the Information Regulator of South Africa.

07 · Contact & complaints

How to reach us

For orders, bookings, refunds, cancellations or anything about these terms, contact us using the details below. We aim to acknowledge every message within 2 business days.

If you are not satisfied with how we resolve a complaint, you may refer it to the National Consumer Commission (www.thencc.gov.za) or, for privacy matters, the Information Regulator (inforegulator.org.za).