Privacy Policy

1. Who we are

Slotzy (Slotzy, we, us) is a South African appointment booking platform accessible at slotzy.co.za. We are the Responsible Party for personal information processed through our platform, as defined in the Protection of Personal Information Act, 2013 (POPIA).

Questions about this policy or requests regarding your personal information may be directed to our Information Officer at slotzy.info@gmail.com.

2. Who this policy applies to

This policy covers two groups of people:

• Business owners — people who create a Slotzy account to manage their bookings
• Customers — members of the public who book appointments through a business's Slotzy page

3. What information we collect

3.1 Business owners

When you create and manage a Slotzy business account, we collect:

• Your name and SA phone number
• Your email address
• Business name, location (suburb and city), description, and profile photo
• Your SA ID number, a photo of your SA ID document, and a portrait photo of yourself (for identity verification — see Section 5)
• Proof of business (screenshot or link to your social media / Google Business page)
• Your business hours, services, and pricing
• Subscription billing details — processed by PayFast; we do not store your card number

3.2 Customers

When you make a booking through a business's Slotzy page, we collect:

• Your full name and SA phone number (required)
• Your email address (optional)
• Booking notes or any custom questions the business has added (optional)
• Your booking history with that specific business (service, date, time, status)

Your phone number is used as your identifier across bookings with the same business — no account or login is required.

3.3 Usage data

We collect standard technical information including IP addresses, browser type, device type, and pages visited. This is used to operate and improve the platform and is not linked to your personal identity.

4. Why we collect your information

We process personal information for the following lawful purposes:

• To provide the service — operating business accounts, processing bookings, sending confirmations and reminders
• Identity verification — confirming that businesses are operated by real people in South Africa before they can accept bookings
• Billing — processing subscription payments via PayFast
• Communications — WhatsApp and email notifications about bookings, account status, and billing
• Safety and compliance — fraud prevention, responding to customer reports, POPIA compliance
• Service improvement — understanding how the platform is used to make it better

We do not sell your personal information to third parties. We do not use your information for advertising.

5. Verification documents — special conditions

SA ID numbers, ID document photos, and portrait photos are special categories of personal information under POPIA. We collect them solely to verify the identity of business owners before allowing them to accept bookings from the public.

How we handle these documents:

• Stored in encrypted storage — not accessible via public URLs
• Accessible only to authorised Slotzy admin staff through a secured admin panel
• Permanently deleted 12 months after submission — automatic, no manual action required
• Not shared with any third party
• Not used for any purpose other than identity verification

Annual re-verification (at month 11) captures a fresh set of documents for the new cycle. The previous set is deleted on schedule regardless.

6. How long we keep your information

7. Who we share your information with

We use the following third-party service providers to operate Slotzy. Each processes personal information only as necessary to deliver their service to us:

We may also disclose personal information if required by law, court order, or to protect the rights and safety of Slotzy, its users, or the public.

8. Your rights under POPIA

As a data subject under POPIA, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request that your personal information be deleted (subject to retention obligations)
• Objection — object to processing of your information for certain purposes
• Complaint — lodge a complaint with the Information Regulator of South Africa

How to request data deletion

Customers can request deletion of their personal information by emailing slotzy.info@gmail.com with your phone number and the request. We will remove your name and phone number from our system within 7 business days. Note: anonymised booking records may be retained by individual businesses for their own accounting records.

Business owners can cancel their account from billing settings. Data is exported and deleted as described in Section 6.

Information Regulator

If you believe we have violated your POPIA rights, you may contact the Information Regulator of South Africa at inforegulator.org.za or email inforeg@justice.gov.za.

9. Cookies

Slotzy uses session cookies to keep you logged in to your business dashboard. We do not use advertising cookies, tracking pixels, or cross-site tracking of any kind.

10. Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or destruction. These include encrypted storage, HTTPS-only access, restricted admin access with two-factor authentication, and audit logs of all admin actions. In the event of a data breach we will notify affected users and the Information Regulator as required by POPIA.

11. Children

Slotzy is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information about a child, please contact us immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify business account holders of material changes via email or WhatsApp. The current version is always available at slotzy.co.za/privacy.

13. Contact

For any privacy questions or data requests, contact our Information Officer at slotzy.info@gmail.com.