Privacy Policy

1. Who we are

Slotzy (Slotzy, we, us) is a South African appointment booking platform accessible at slotzy.co.za. We are the Responsible Party for personal information processed through our platform, as defined in the Protection of Personal Information Act, 2013 (POPIA).

Questions about this policy or requests regarding your personal information may be directed to our Information Officer at slotzy.info@gmail.com.

2. Who this policy applies to

This policy covers two groups of people:

• Business owners — people who create a Slotzy account to manage their bookings
• Customers — members of the public who book appointments through a business's Slotzy page

3. What information we collect

3.1 Business owners

When you create and manage a Slotzy business account, we collect:

• Your name and SA phone number
• Your email address
• Business name, location (suburb and city), description, and profile photo
• Your SA ID or passport number, a photo of that document, and a selfie of yourself holding it (for identity verification — see Section 5)
• Proof of business (screenshot or link to your social media / Google Business page)
• Your business hours, services, and pricing
• Subscription billing details — processed by PayFast; we do not store your card number

3.2 Customers

When you make a booking through a business's Slotzy page, we collect:

• Your full name and SA phone number (required)
• Your email address (optional)
• Booking notes or any custom questions the business has added (optional)
• Your booking history with that specific business (service, date, time, status)

Your phone number is used as your identifier across bookings with the same business — no account or login is required.

3.3 Standby list

If a business is fully booked and you ask to be told when a slot opens, we collect:

• Your full name and SA phone number (required)
• Your email address (optional)
• The service you asked about, and the staff member you asked for, if any

A standby entry is not a booking and does not hold a slot. It applies only to the day you joined and lapses when the business closes that day. The business may contact you on the number you gave, by WhatsApp or phone, if a slot opens — Slotzy does not send these messages on their behalf.

Because a standby entry only ever applies to one day, we do not keep your contact details beyond it indefinitely: your name, phone number and email address are permanently removed 90 days after you join. An anonymous record remains so the business can see how many people asked about a slot, but it can no longer be linked to you.

3.4 Usage data

We collect standard technical information including IP addresses, browser type, device type, and pages visited. This is used to operate and improve the platform and is not linked to your personal identity.

4. Why we collect your information

We process personal information for the following lawful purposes:

• To provide the service — operating business accounts, processing bookings, and sending booking confirmations by email
• Identity verification — confirming that businesses are operated by real people in South Africa before they can accept bookings
• Billing — processing subscription payments via PayFast
• Communications — email notifications about bookings, account status, and billing
• Safety and compliance — fraud prevention, responding to customer reports, POPIA compliance
• Service improvement — understanding how the platform is used to make it better

We do not sell your personal information to third parties. We do not use your information for advertising.

5. Verification documents — special conditions

ID and passport numbers, document photos and selfies are special categories of personal information under POPIA. We collect them solely to verify the identity of business owners before allowing them to accept bookings from the public.

How we handle these documents:

• Stored in encrypted storage — not accessible via public URLs
• Accessible only to authorised Slotzy admin staff through a secured admin panel
• Permanently deleted 90 days after we approve or decline your verification — automatic, no manual action required
• If you start a verification and never submit it, deleted 90 days after your last change
• Never kept longer than 12 months after you submit, whatever happens
• Not shared with any third party
• Not used for any purpose other than identity verification

After deletion we keep only a one-way code made from your ID or passport number — never the number itself — so we can recognise the same document on another business and at renewal, together with our review notes and your business details.

Verification is renewed every 12 months. Your Slotzy dashboard reminds you from 30 days before it is due. You send a new document photo and selfie, which are deleted on the same schedule. If it is not renewed within 14 days after the due date, your booking page goes back to preview until it is.

6. How long we keep your information

7. Who we share your information with

We use the following third-party service providers to operate Slotzy. Each processes personal information only as necessary to deliver their service to us:

We may also disclose personal information if required by law, court order, or to protect the rights and safety of Slotzy, its users, or the public.

8. Your rights under POPIA

As a data subject under POPIA, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request that your personal information be deleted (subject to retention obligations)
• Objection — object to processing of your information for certain purposes
• Complaint — lodge a complaint with the Information Regulator of South Africa

How to request data deletion

Customers can request deletion of their personal information by emailing slotzy.info@gmail.com with your phone number and the request. We will remove your name and phone number from our system within 7 business days. Note: anonymised booking records may be retained by individual businesses for their own accounting records.

Business owners can cancel their account from billing settings. Data is exported and deleted as described in Section 6.

Information Regulator

If you believe we have violated your POPIA rights, you may contact the Information Regulator of South Africa at inforegulator.org.za or email inforeg@justice.gov.za.

9. Cookies

Slotzy uses session cookies to keep you logged in to your business dashboard. We do not use advertising cookies, tracking pixels, or cross-site tracking of any kind.

10. Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or destruction. These include encrypted storage, HTTPS-only access, restricted admin access with two-factor authentication, and audit logs of all admin actions. In the event of a data breach we will notify affected users and the Information Regulator as required by POPIA.

11. Children

Slotzy is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information about a child, please contact us immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify business account holders of material changes by email. The current version is always available at slotzy.co.za/privacy.

13. Contact

For any privacy questions or data requests, contact our Information Officer at slotzy.info@gmail.com.