DRAFT — placeholder content. Replace with lawyer-reviewed copy before public launch. See ADMIN-OPERATIONS-GUIDE.md §1.5.
Who we are
BeautiFind is operated by [your registered entity name], based in Cape Town, South Africa. We act as the responsible party for personal information processed via the BeautiFind Service, as defined in the Protection of Personal Information Act (POPIA, Act 4 of 2013).
Information we collect
- Profile data — name, email, phone, profile photo, service categories
- Verification documents — ID, selfie, proof of address (for Technicians only)
- Booking data — bookings you make/receive, messages exchanged in-app
- Location data — your real-time location during an active booking session (used by our safety features)
- Emergency contact — name + phone of someone you nominate to be notified in an emergency
Why we collect it
- To operate the marketplace and connect Clients with Technicians
- To verify Technician identity for Client trust + safety
- To send safety alerts during emergencies
- To send transactional emails (booking confirmations, account notifications)
- To improve the Service
Who we share it with
We share strictly the minimum necessary with the following sub-processors:
| Sub-processor | What | Where |
|---|---|---|
| Vercel | Hosts our frontend | US/EU |
| Railway | Hosts our backend + database | US |
| SendGrid | Transactional email delivery | US |
| Twilio | WhatsApp + SMS safety messaging | US |
| Google (OAuth) | Sign-in only (you control consent) | US |
We do not sell your data to third parties.
How long we keep it
- Active accounts: while your account is open
- Booking records: 5 years after the booking date (SA tax record-keeping)
- Location data during active sessions: deleted within 30 days of the session ending
- Verification documents: while your account is active + 12 months after closure
Your rights under POPIA
You have the right to:
- Access the personal information we hold about you
- Correct or update inaccurate information
- Request deletion of your account and associated data
- Object to processing in certain circumstances
- Lodge a complaint with the Information Regulator (South Africa)
To exercise any of these rights, email hello@beautifind.co.za. We aim to respond within 30 days.
Security
We use industry-standard encryption (TLS in transit, encrypted database at rest) and access controls. No system is perfectly secure; if you suspect your account has been compromised, please contact us immediately.
Cookies
We use essential cookies (authentication, session state) and a small amount of analytical data. We do not use third-party advertising cookies. By using the Service you consent to essential cookies.
Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email. The "Effective" date above reflects the current version.
Contact
Email hello@beautifind.co.za for any privacy-related queries.