# GigZA Privacy Policy **Last Updated:** August 26, 2026 **Effective Date:** August 26, 2026 ## Introduction GigZA (Pty) Ltd (registration number 2026/673329/07) ("GigZA," "we," "us," or "our") operates the GigZA platform. We are committed to protecting your privacy and complying with the Protection of Personal Information Act, 2013 (POPIA). This Privacy Policy explains how we collect, use, process, and protect your personal information when you use the GigZA platform. **Registered address:** 16 Cape Ash Street, Kraaifontein, Cape Town, South Africa 7570 **Information Officer:** Name: Diederick Arnoldus Vorster Email: contact.gigza@gmail.com Phone: +27 72 950 9350 ## 1. Information We Collect ### 1.1 Information You Provide Directly **Account Registration:** - Full name - Email address - Mobile phone number (required for WhatsApp integration) - Password (encrypted) - Suburb/location - Date of birth (to verify 18+ age requirement) - Profile photo (optional) **Profile Information:** - Skills and categories (for Hustlers) - Service preferences (for Clients) - Bio or description (optional) **Verification Information:** - South African ID number (for verified users) - ID document photo (stored securely) - Selfie photo (for identity verification) - Verification is performed by manual review by GigZA staff; we do not currently use automated third-party identity verification services **Gig Information:** - Gig titles and descriptions - Photos of work locations or requirements - Pricing and scheduling information - Application messages **Payment Information:** - Payment card details (processed and stored by our payment provider, Paystack) - Bank account information (for payouts, processed by Paystack) - Transaction history **Communications:** - Messages sent through the platform - Support inquiries - Feedback and ratings ### 1.2 Information Collected Automatically **Usage Data:** - Pages viewed and features used - Time spent on the platform - Click and navigation patterns - Device information (type, operating system, browser) - IP address and approximate location **Technical Data:** - Cookies and similar tracking technologies - Session information - App performance data - Error logs and diagnostics ### 1.3 Information from Third Parties **OAuth Providers:** - If you sign in with Google, we receive your name, email, and profile picture from Google **Payment Processor:** - Payment verification and transaction status from Paystack **Public Sources:** - Identity documents you upload for manual review by GigZA (SA ID photo). We do not currently run automated Home Affairs lookups. ## 2. How We Use Your Information (POPIA Lawful Purpose) ### 2.1 Service Provision (Contractual Necessity) - Create and manage your account - Match Clients with Hustlers - Process applications and hiring - Facilitate payments and commissions - Enable WhatsApp handoff for direct communication - Display your profile to other users ### 2.2 Safety and Trust (Legitimate Interest) - Verify user identities - Detect and prevent fraud - Investigate user reports - Enforce our Terms and Conditions - Resolve disputes between users ### 2.3 Communication (Consent & Legitimate Interest) - Send transactional notifications (application status, hire confirmations) - Respond to your support inquiries - Send service updates and important notices - Send marketing communications (with your consent, opt-out available) - WhatsApp notifications for nearby gigs (Premium users only) ### 2.4 Improvement and Analytics (Legitimate Interest) - Analyze platform usage and performance - Develop new features - Improve user experience - Conduct research and data analysis ### 2.5 Legal Compliance - Comply with legal obligations - Respond to lawful requests from authorities - Protect our legal rights - Prevent illegal activities ## 3. POPIA Compliance - Eight Conditions ### Condition 1: Accountability We have appointed an Information Officer responsible for POPIA compliance and maintaining this Privacy Policy. ### Condition 2: Processing Limitation We only collect and process personal information that is: - Adequate, relevant, and not excessive - Collected for a specific, explicitly defined, and lawful purpose - Collected directly from you unless otherwise authorized ### Condition 3: Purpose Specification Your personal information is collected for the purposes specified in Section 2 above. We will not use your information for unrelated purposes without your consent. ### Condition 4: Further Processing Limitation We will not process your information in a way that is incompatible with the original purpose unless: - You have consented - It is required by law - It is necessary to protect your legitimate interests ### Condition 5: Information Quality We take reasonable steps to ensure your personal information is: - Complete, accurate, and not misleading - Updated when necessary You may update your information at any time through your account settings. ### Condition 6: Openness This Privacy Policy is freely available and explains: - What information we collect - Why we collect it - How we use it - Your rights regarding your information ### Condition 7: Security Safeguards We implement technical and organizational security measures including: - Encryption of sensitive data (passwords, payment information) - Secure data storage with Supabase (ISO 27001 certified) - Row Level Security (RLS) policies on all database tables - HTTPS encryption for all data transmission - Regular security audits and updates - Access controls and authentication requirements - Secure file storage for photos and documents ### Condition 8: Data Subject Participation You have the right to: - Access your personal information - Request correction of inaccurate information - Request deletion of your information - Object to processing - Withdraw consent (where processing is based on consent) - Lodge a complaint with the Information Regulator ## 4. Information Sharing and Disclosure ### 4.1 With Other Users When you use GigZA, certain information is shared with other users: **Publicly Visible (All Users):** - Name and profile photo - Suburb/general location - Skills and categories - Ratings and reviews - Gig history count - Verified badge status **Shared After Hiring:** - Phone number (for WhatsApp communication) - Specific gig details and requirements ### 4.2 With Service Providers We share information with trusted third parties who help us operate the Service: **Paystack (Payment Processing):** - Payment card information - Transaction details - Payout information **Supabase (Data Hosting):** - All user data and platform content - Location: European Union servers - Security: ISO 27001, SOC 2 compliant **Vercel (Application Hosting):** - Usage logs and performance data **WhatsApp/Meta (Communication):** - Phone numbers for WhatsApp handoff - Pre-filled message templates All service providers are contractually obligated to protect your data and use it only for specified purposes. ### 4.3 For Legal Reasons We may disclose information if required by: - South African law or legal process - Court orders or subpoenas - Law enforcement or government requests - Protection of rights, safety, or property ### 4.4 Business Transfers If GigZA is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change. ### 4.5 With Your Consent We may share information for other purposes with your explicit consent. ## 5. Data Retention ### 5.1 Active Accounts We retain your information for as long as your account is active and as needed to provide the Service. ### 5.2 After Account Deletion When you delete your account: - Profile information is immediately removed from public view - Personal identifiers are anonymized after 30 days - Transaction records are retained for 7 years (tax and legal compliance) - Ratings and reviews may be retained in anonymized form ### 5.3 Legal Retention We may retain information longer if required by law or to resolve disputes. ## 6. International Data Transfers Your information may be stored and processed in: - **European Union** (Supabase servers) - **United States** (Vercel hosting, Paystack) We ensure appropriate safeguards are in place for international transfers, including: - Standard contractual clauses - Service providers with adequate privacy frameworks - Security measures equivalent to POPIA requirements ## 7. Your Rights Under POPIA ### 7.1 Right of Access You may request a copy of your personal information. We will provide it within 30 days. ### 7.2 Right to Correction You may request correction of inaccurate or incomplete information through your account settings or by contacting us. ### 7.3 Right to Deletion You may request deletion of your account and personal information, subject to legal retention requirements. ### 7.4 Right to Object You may object to processing of your information for marketing purposes or legitimate interests. ### 7.5 Right to Restrict Processing You may request restriction of processing in certain circumstances. ### 7.6 Right to Data Portability You may request your data in a structured, commonly used format. ### 7.7 Right to Lodge a Complaint You may lodge a complaint with the Information Regulator: **Information Regulator (South Africa)** Email: inforeg@justice.gov.za Phone: 012 406 4818 Website: www.justice.gov.za/inforeg ## 8. Children's Privacy GigZA is not intended for use by persons under 18 years of age. We do not knowingly collect information from children under 18. **POPIA Child Data Protection:** - Under POPIA, a "child" is defined as a person under 18 years - Processing of child information is prohibited without parental consent - If we discover a user is under 18, we will immediately delete their account If you believe a child has registered on GigZA, please contact us immediately. ## 9. Cookies and Tracking ### 9.1 Types of Cookies **Essential Cookies:** - Authentication and session management - Security features - Basic platform functionality **Analytics Cookies:** - Usage statistics - Performance monitoring - Feature adoption tracking **Preference Cookies:** - Language and location settings - UI preferences ### 9.2 Cookie Control You may disable cookies through your browser settings, though this may limit platform functionality. ## 10. Security Measures ### 10.1 Technical Safeguards - End-to-end encryption for sensitive data - Secure Socket Layer (SSL/TLS) encryption - Firewalls and intrusion detection - Regular security audits - Automated threat monitoring ### 10.2 Organizational Safeguards - Employee confidentiality agreements - Limited access on need-to-know basis - Regular staff training on data protection - Incident response procedures ### 10.3 Your Responsibilities You are responsible for: - Keeping your password secure - Not sharing account credentials - Logging out from shared devices - Reporting suspicious activity ## 11. Marketing Communications ### 11.1 Consent We will only send marketing communications if you have opted in. ### 11.2 Opt-Out You may unsubscribe at any time by: - Clicking "unsubscribe" in any marketing email - Updating preferences in your account settings - Contacting us directly ### 11.3 Transactional Communications You cannot opt out of essential transactional messages (e.g., hire confirmations, payment notifications) while using the Service. ## 12. Changes to This Privacy Policy We may update this Privacy Policy from time to time. We will notify you of material changes by: - Email notification - In-app notification - Prominent notice on the platform Continued use after changes indicates acceptance of the updated policy. ## 13. Contact Us For privacy-related questions, requests, or complaints: **General Inquiries:** Email: contact.gigza@gmail.com **Information Officer (POPIA):** Name: Diederick Arnoldus Vorster Email: contact.gigza@gmail.com Address: 16 Cape Ash Street, Kraaifontein, Cape Town, South Africa 7570 Phone: +27 72 950 9350 **Requests Under POPIA:** Please submit requests in writing to the Information Officer. We will respond within 30 days. ## 14. Consent By using GigZA, you consent to: - Collection and processing of your personal information as described - Transfer of your information to third-party service providers - Display of certain information to other users - Communication via email, WhatsApp, and push notifications - Use of cookies and similar technologies You may withdraw consent at any time by closing your account, though this will prevent use of the Service. --- **Last Reviewed:** August 26, 2026 **Next Review Date:** August 26, 2027 **This Privacy Policy complies with the Protection of Personal Information Act, 2013 (POPIA) and applicable South African data protection laws.**