Privacy Policy

This Privacy Policy explains how Save My Seet collects, uses, shares and protects your personal information when you use our website and services (the “Platform”), in line with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

1. Who is responsible for your information

The responsible party under POPIA is Sakhile Motoro, trading as Save My Seet(“we”, “us”, “our”).

• Information Officer: Sakhile Motoro
• Email: motorosakhile@gmail.com
• Phone: 068 081 3206
• Address: 54 Porges Street, Randfontein, 1759, Gauteng

2. What Save My Seet is

Save My Seet is an online booking platform that lets people find and book independent barbers, hairstylists, nail technicians and lash technicians (“Providers”). We are not a payment processor: no payment is taken on the Platform, and we never receive your card or banking details. You pay the Provider directly, in person.

3. What we collect, and whether you have to give it

For each kind of information below we explain whether giving it is required or optional, and what happens if you don’t.

If you create an account

• Name, email address and password — required. We can’t create an account or send you booking confirmations without them. Your password is stored only in encrypted (hashed) form; we can never see it.
• Phone number — optional. Without it you won’t receive SMS reminders, and the shop won’t be able to phone you about your booking.

If you book without an account (a guest booking)

• Your name and phone number — requiredto make a guest booking, so the shop knows who is coming and can reach you if something changes. If you’d rather not give them, you can phone or visit the shop instead.

When you book

• The service, shop, stylist, date and time — required; this is the booking itself.
• Notes you add to a booking — optional. Please don’t include sensitive information such as health details.

If you leave a review

• Your star rating and comment — optional. Reviews are shown publicly on the shop’s page without your name.

If you list a shop (Providers)

• Business name, category, address, area, opening hours, services and prices — required. Clients can’t find or book you without them. This information is published publicly on your shop page.
• Phone, WhatsApp, description, logo and photos of your work — optional, and shown publicly if you add them.
• Team members’ names, bios and photos — optional, and shown publicly. See section 10 for your responsibility when adding other people.

Collected automatically

• Technical information— when you visit, our hosting provider records standard server logs such as your IP address, browser type and the pages requested. This is needed to deliver the website and keep it secure, and can’t be switched off.
• A login cookie, set only after you sign in. We use no tracking, analytics or advertising cookies. See our Cookie Policy.

4. Where your information comes from

Almost everything comes directly from you. The exception is when a Providerrecords a booking on your behalf — for example a walk-in they log in their diary — in which case your name comes from that Provider.

5. Why we use it, and our legal basis

POPIA only allows processing on a lawful basis. Ours are:

• To provide the service you asked for(POPIA section 11(1)(b)) — creating your account, making and managing bookings, showing shops to you, and letting shops manage their bookings.
• To send you messages about your bookings and account(section 11(1)(b)) — confirmations, cancellations, time changes, reminders, and a request to review a completed visit.
• Our legitimate interests(section 11(1)(f)) — keeping the Platform secure, preventing fraud and abuse, fixing problems, and handling reports about reviews.
• Your consent(section 11(1)(a)) — where we ask for it. You may withdraw consent at any time; this doesn’t affect anything we did before you withdrew it.

6. Is any of this required by law?

No law specifically requires us to collect this information. We collect it because the Platform can’t work without it. We may disclose information where the law requires us to, for example to comply with a court order.

7. Who can see your information

The shop you book with

A Provider sees what they need to serve you: your name, the service, the date and time, any notes you add, and your phone number if you gave one. Providers are independent businesses and are responsible for how they handle your information once they have it.

The public

Shop pages — business details, services, prices, hours, photos and team members — are public. Reviews are public but do not show the reviewer’s name.

Our service providers (“operators”)

We use the following companies to run the Platform. Under POPIA they are “operators”: they may only process your information on our instructions, must keep it confidential, and must protect it.

“Get directions” links open Google Maps with the shop’s address. We don’t send Google any of your personal information.

We do not sell, rent or trade your personal information.

8. Sending information outside South Africa

Some of our service providers store or process information outside South Africa. Our database, where most of your information is kept, is in the United Kingdom. Our website hosting and email provider are in the United States. POPIA section 72 only allows this in limited circumstances. We rely on:

• Laws providing adequate protection(section 72(1)(a)) — the United Kingdom’s data protection law gives a level of protection substantially similar to POPIA;
• Binding agreements(section 72(1)(a)) — each provider is bound by a data processing agreement that requires a level of protection substantially similar to POPIA; and
• Necessity to provide the service(section 72(1)(c)) — the Platform is hosted and delivered through these providers, so the transfer is necessary to give you the service you asked for.

9. How we protect your information

We take reasonable technical and organisational steps to protect your information, including:

• encrypted connections (HTTPS) for everything sent to and from the website;
• passwords stored only in hashed form;
• database access rules so that each user can only reach their own records, and a shop can only reach its own bookings; and
• limiting access to personal information to what is needed to run the Platform.

No system is perfectly secure, and we can’t guarantee absolute security.

If something goes wrong

If we have reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and youas soon as reasonably possible, as required by POPIA section 22 — telling you what happened, what we’re doing about it, and what you can do to protect yourself.

10. If you add other people’s information (Providers)

When you add team members, or record a booking for a walk-in client, you are giving us personal information about someone else. You must have that person’s permission, and it must be accurate. Don’t upload a team member’s photo or bio without their agreement, and remove them when they leave.

11. How long we keep your information

We keep personal information only for as long as we need it:

• Account, booking and review information— for as long as your account exists. When you delete your account, it is permanently deleted immediately, together with your bookings and reviews.
• A shop’s information— for as long as the shop is listed. Deleting a Provider account deletes the shop, its team, services, photos and bookings.
• Guest bookings— for as long as needed for that booking and the shop’s appointment records. Because a guest has no account to delete, email us and we will delete your guest details.
• Server logs— kept briefly by our hosting provider under its own retention settings.

We may keep information longer only where the law requires it, or where it’s needed to resolve a dispute or protect our legal rights.

12. Marketing

We don’t send marketing messages. We only contact you about your bookings and your account. If that ever changes, we will ask your permission first, and every marketing message will include a simple way to opt out, as POPIA section 69 requires.

13. Your rights

Under POPIA you have the right to:

• Know what we hold about you and get a copy of it (section 23). This is free.
• Correct information that is inaccurate, out of date, incomplete or misleading (section 24). Most of it you can change yourself in your account.
• Delete your information (section 24). You can delete your account yourself at any time.
• Object to us processing your information on the basis of our legitimate interests (section 11(3)).
• Withdraw your consent where we rely on it.
• Not be subject to a decisionbased solely on automated processing that significantly affects you (section 71). We don’t make any such decisions.
• Complain to the Information Regulator (see section 14).

To use any of these rights, email our Information Officer at motorosakhile@gmail.com. We may need to confirm your identity first, so that we don’t hand someone else’s information to you. We will respond within 30 days. You can also make a formal request under our PAIA Manual.

14. Complaints to the Information Regulator

Please contact us first so we can try to fix the problem. If you’re not satisfied, you have the right to lodge a complaint with the Information Regulator:

• Information Regulator (South Africa)
• Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
• Complaints email: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za
• Phone: 010 023 5200 · Toll free: 0800 017 160
• Website: inforegulator.org.za

15. Children

Save My Seet is intended for people aged 18 and over. POPIA restricts processing the personal information of children, so if you are under 18 you may only use the Platform with the permission of a parent or guardian. If you believe a child has given us their information without that permission, contact us and we will delete it.

16. Cookies

We use a single cookie, and only to keep you signed in after you log in. We don’t use tracking, analytics or advertising cookies. Full details are in our Cookie Policy.

17. Changes to this policy

We may update this policy from time to time. We’ll post the new version here and change the “Last updated” date. If a change materially affects how we use your information, we’ll let you know by email before it takes effect.

18. Contact us

Questions about this policy or your information? Contact our Information Officer at motorosakhile@gmail.com or 068 081 3206. You can also visit our Support page.