WeServonline (Pty) Ltd ("we", "us", "our", "the Company"), a company registered in South Africa (Registration Number: 2025/503798/07), with registered address in Gauteng, South Africa, respects your privacy and is committed to protecting your personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA).
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use our mobile car wash application ("the App"). By downloading, accessing, or using the App, you acknowledge that you have read and understood this policy and consent to the processing of your personal information as described herein.
We collect the following categories of personal information:
Note: We do not store full card numbers. All payments are processed through PCI-DSS compliant third-party payment gateways.
We collect personal information through the following lawful means:
Under POPIA, we may only process your personal information for specified, lawful purposes. We process your information for the following purposes:
| Purpose | Lawful Basis |
|---|---|
| Process and schedule your car wash booking | Performance of Contract |
| Dispatch a technician to your location | Performance of Contract |
| Process payments and issue receipts | Performance of Contract |
| Appointment reminders, SMS, Email and Push Notifications | Legitimate Interest / Consent |
| Verify identity and prevent fraud | Legitimate Interest |
| Improve application performance, route efficiency and customer experience | Legitimate Interest |
| Comply with legal obligations, tax records and court orders | Legal Obligation |
| Promotional offers and marketing | Explicit Consent |
Marketing Opt-Out: You may opt out of marketing communications at any time by clicking "Unsubscribe" in any email or replying "STOP" to any SMS.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information in the following limited circumstances:
We share your information with third-party operators who process data on our behalf under written agreements compliant with POPIA Section 21:
Your name, vehicle details, and service address are shared with the specific technician assigned to your booking. Technicians are bound by confidentiality agreements.
We may disclose your information if required by:
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner, provided they comply with POPIA.
We may share information for any other purpose where you have given explicit consent.
We primarily store your personal information on servers located within the Republic of South Africa. However, some third-party service providers (e.g., cloud platforms, email services) may process data on servers outside South Africa.
Where we transfer your information outside South Africa, we ensure that:
You consent to such cross-border transfers by using the App.
As a data subject, you have the following rights. Requests can be submitted to our Information Officer (see Section 14 below):
| Right | Description |
|---|---|
| Right of Access | You may request a copy of all personal information we hold about you (POPIA Section 23). A reasonable fee may be charged. |
| Right to Correction | You may request that we correct or update inaccurate or outdated information (POPIA Section 24). |
| Right to Deletion | You may request deletion of personal information where it is no longer needed for the purpose collected, or where processing is unlawful (POPIA Section 24). |
| Right to Object | You may object to the processing of your information for direct marketing purposes (POPIA Section 11(3)). |
| Right to Withdraw Consent | Where processing is based on consent, you may withdraw consent at any time. |
| Right to Complain | You may lodge a complaint with the Information Regulator of South Africa. (see Section 13 below) |
We will respond to all valid requests within 30 (thirty) business days as required by POPIA.
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, plus any additional period required by South African law.
| Data Type | Retention Period |
|---|---|
| Account Information | Until you request account deletion, plus 30 days for recovery. |
| Transaction & Payment Records | 5 years (for tax and audit compliance under SARS requirements). |
| Location & Service History | 2 years (for analytics and dispute resolution). |
| Chat & Communication Logs | 12 months. |
| Marketing Opt-Out Records | Indefinitely (to ensure compliance). |
After the retention period, your personal information will be securely deleted or anonymised.
We take reasonable technical and organisational measures to protect your personal information against loss, damage, unauthorised access, or unlawful processing. These include:
Despite these measures, no internet transmission is 100% secure. You use the App at your own risk.
Security Breach Notification: If we discover a breach of your personal information that is likely to result in harm, we will notify you and the Information Regulator within 72 hours as required by POPIA Section 22.
Our App is not intended for persons under the age of 18 (eighteen) years. We do not knowingly collect personal information from children. If we discover that a person under 18 has provided us with personal information, we will delete it immediately. If you believe a child has provided us with data, please contact our Information Officer.
The App may contain links to third-party websites (e.g., payment gateways, mapping services). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
We may use your contact details to send you direct marketing communications about our services, special offers, or promotions, only if you have given your explicit consent (opt-in). You may withdraw this consent at any time:
We will never sell your contact details to third parties for their own marketing purposes.
If you believe we have violated POPIA or mishandled your personal information, you have the right to lodge a complaint with:
The Information Regulator (South Africa)
We encourage you to first contact us directly (Section 14 below) so that we may resolve your concern internally.
As required by POPIA, we have appointed an Information Officer responsible for ensuring compliance with this policy and data protection laws.
Information Officer Details:
For any privacy-related queries, data access requests, correction requests, deletion requests, or complaints, please contact our Information Officer using the above details.
We may update this Privacy Policy from time to time to reflect changes in the law, our practices, or the App features. When we make material changes, we will notify you via:
The updated policy will be posted in the App with a new "Last Updated" date. Your continued use of the App after any changes constitutes your acceptance of the revised policy.
This Privacy Policy is drafted in English. In the event of any conflict between the English version and a translated version, the English version shall prevail.
For general inquiries, privacy concerns, or to exercise your POPIA rights:
WeServonline (Pty) Ltd