POPIA Compliance

The Protection of Personal Information Act 4 of 2013 (POPIA) is South Africa's data protection law that regulates how personal information may be processed. It came into effect on 1 July 2021.

Personal information includes any information that identifies you or can be used to identify you. This includes your name, contact details, ID number, location data, financial information, and any other data that can be linked to you.

• Account registration and profile creation
• Product listings and store setup
• Communication through our platform
• Delivery address details for orders and marketplace matching
• Seller verification (ID document, proof of address, bank details)
• Payment information (processed by third parties)
• Device and usage data for platform improvement

We process your personal information based on:

• Your consent when you create an account and use our services
• Legitimate business interests in providing our platform
• Legal obligations under South African law
• Contract performance when you place or fulfil orders

• Right to be informed about how your data is used
• Right to access your personal information
• Right to correct inaccurate information
• Right to delete your data ("right to be forgotten")
• Right to object to processing in certain circumstances
• Right to data portability
• Right to lodge a complaint with the Information Regulator

• Handsy uses an automated Trust Score that affects your visibility and perks on the platform. We disclose this clearly in-app and in these terms.
• Right to transparency: You can view your Score Ledger (full history of positive and negative events) at any time in your account.
• Right to correction and objection: If you believe a negative event is wrong, you may submit an appeal with evidence (e.g. waybill, chat screenshot) via the in-app appeal flow. We will review and may reverse the event or reject with reasons.
• If we cannot resolve your concern, you may contact the Consumer Goods and Services Ombud (CGSO) or the National Consumer Commission (NCC) for independent redress.

We collect the following categories of personal information:

• Identity information: Name, surname, ID number (from verification documents)
• Contact information: Email address, phone number, physical/delivery address
• Profile information: Store details, product categories, seller verification status
• Banking information: Account details sellers submit for verification and payouts
• Location data: Town, suburb, delivery address for orders and marketplace matching
• Communication data: Messages, reviews, ratings
• Technical data: Device information, IP address, usage patterns

• To provide and maintain our platform and marketplace services
• To connect buyers with sellers and products; to facilitate orders and delivery
• To facilitate communication and order fulfilment
• To verify user identities and seller accounts
• To improve our services and develop new features
• To comply with legal obligations
• To prevent fraud and ensure platform security

We may share your information with:

• Other platform users (sellers and buyers as necessary for listings, orders, and delivery)
• Third-party service providers (hosting, analytics, payment provider)
• Law enforcement when required by law
• Professional advisors and insurers in case of disputes
• The Information Regulator for compliance purposes

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure server infrastructure
• Regular security audits and updates
• Access controls and employee training
• Incident response procedures

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Active accounts: Retained while account is active
• Inactive accounts: Retained for 3 years after last activity
• Legal requirements: Retained as required by South African law
• Backup data: Retained according to our backup policies

Your data is primarily stored in South Africa. Any international transfers comply with POPIA requirements and include appropriate safeguards.

We use cookies and similar technologies to improve your experience and analyze platform usage. You can control cookie preferences through your device settings.

Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18.

We may use automated systems for marketplace search and matching, the Trust Score, and fraud detection. You have the right to request human review of automated decisions.

By using Handsy, you consent to the collection and processing of your personal information as described in this policy. You may withdraw consent at any time.

If you have concerns about how we handle your personal information:

• Contact us at privacy@handsy.co.za
• Lodge a complaint with the Information Regulator of South Africa
• Contact details: informationregulator.org.za

We may update this POPIA compliance information periodically. We will notify you of material changes through the platform or via email.

Handsy has appointed a POPIA compliance officer responsible for ensuring compliance with the Act. Contact: compliance@handsy.co.za