Privacy Policy (POPIA Compliant)

Completeman (Pty) Ltd ("Completeman", "the Company", "we", "us", "our"), a private company duly registered in accordance with the corporate laws of the Republic of South Africa, is deeply committed to protecting the privacy, confidentiality, and integrity of the personal information belonging to our users.

This Privacy Policy ("Policy") details how we collect, process, store, utilize, and safeguard your personal information in strict accordance with the Protection of Personal Information Act (POPIA), No. 4 of 2013. This Policy applies to all Customers (Users) and Independent Contractors (Workers) utilizing the Completeman mobile applications, website, and digital backend architecture (collectively, the "Platform").

1. The Responsible Party

Completeman acts as the "Responsible Party" (as defined under POPIA) in respect of the personal information collected from you through your use of the Platform.

• Company Name: Completeman (Pty) Ltd
• Country of Operation: Republic of South Africa
• Contact Email: support@completeman.co.za

2. Categories of Personal Information We Collect

We only collect personal information that is strictly necessary to perform our algorithmic dispatch coordination, process secure payments, and maintain platform security.

2.1. Information Collected from All Users (Customers and Workers)

• Identity Information: Full legal names, identity numbers or passport numbers (where applicable for verification), and digital profile photographs.
• Contact Information: Cellular telephone numbers and electronic mail (email) addresses.
• Authentication Data (Including Google Sign-In): If you opt to register or log into the Platform using third-party single sign-on services such as Google Accounts OAuth authentication, we collect your unique third-party identifier, name, email address, and profile picture URL as authorized by your Google account privacy permissions.
• Technical and Usage Data: IP addresses, mobile device hardware models, operating system versions, push notification tokens, unique device identifiers, and platform navigation metrics.

2.2. Specific Information Collected from Customers (Users)

• Physical Location Data: Precise physical residential or commercial addresses where property maintenance services are requested.
• Project Metadata: Specific problem descriptions, selected repair categories, and photographic attachments submitted within the Binding Scope of Work.

2.3. Specific Information Collected from Independent Contractors (Workers)

• Professional Credentials: Trade certifications, municipal licenses, company registration documents, and SARS tax numbers.
• Financial Account Details: South African bank account numbers, branch codes, and account holder names required to process automated wallet disbursements.
• Real-Time Geolocation Tracking: To facilitate real-time map tracking for customers and programmatic proximity dispatching, the Worker App tracks your precise geographical coordinates (GPS) while the application is active in the foreground or background.
• Background Screening Checks: Criminal record status validations and identification authenticity verifications gathered through accredited third-party vetting partners.

3. How We Process and Enforce Your Data (Purpose of Collection)

Under Section 9 of POPIA, personal information must be processed reasonably and lawfully. We utilize your data exclusively for the following operational outcomes:

3.1. Core Service Fulfillment: Registering your profile, establishing your digital wallet, validating the accuracy of the Binding Scope of Work, and programmatically matching appropriate Workers to Customer properties.

3.2. Transactional Notifications: Firing automated triggers to send transactional SMS alerts, push notifications, and electronic mail updates regarding booking updates, worker dispatches, and quote submissions.

3.3. Payment Security: Transmitting structural booking identifiers to our third-party payment partner to securely handle payments — whether that is the full booking price for direct-priced services (such as cleaning, gardening, moving assistance, pool care and pest control) or the upfront Assessment Fee and subsequent final quote balance for assessment-first trades (handyman, plumbing, electrical, tiling, painting, carpentry and guttering with materials sourcing).

3.4. Platform Integrity: Monitoring real-time tracking data to verify that Workers physically arrived at the property, ensuring the safety of all stakeholders, and enforcing platform anti-bypass rules.

4. Third-Party Data Disclosure and Sharing

Completeman does not sell, rent, or lease user databases to third-party marketing brokers. Your information is shared exclusively with critical infrastructure operators necessary to run the Platform:

4.1. PayFast (Pty) Ltd: All card payments, Instant EFT handshakes, and wallet processing are handled securely via PayFast. Your sensitive banking details are transmitted directly to PayFast using end-to-end encryption. Completeman does not capture, see, or store your credit card or bank login credentials on its servers.

4.2. SMS and Notification Gateways: Cellular contact numbers are shared with automated messaging APIs to distribute real-time transit warnings and appointment reminders.

4.3. Bilateral Disclosure Between Users: Once a booking reservation transitions to an active dispatch state, the Platform discloses the Customer's physical address, name, phone number, and Binding Scope of Work to the designated Worker. Concurrently, the Worker's name, profile image, phone number, and real-time GPS coordinates are disclosed to the Customer.

4.4. Statutory and Legal Requests: We will disclose personal information only if compelled to do so by a South African court of law, a formal directive from the Information Regulator, or to protect the physical safety of our users.

5. Information Security Protocols

We implement advanced technical and organizational security measures to protect personal information against accidental loss, unauthorized destruction, alteration, or unlawful access, as mandated by Section 19 of POPIA:

• Encryption in Transit: All communications between your mobile device and our cloud servers are encrypted using Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols.
• Credential Hashing: User passwords and API authentication parameters are cryptographically hashed and salted; they are never stored in plaintext format.
• Access Control: Access to raw database records is strictly restricted to authorized platform administrators using multi-factor authentication (MFA) and monitored audit logs.

6. Data Retention Framework

In accordance with Section 14 of POPIA, we retain your personal information only for as long as your account remains active or as required to fulfill the operational and legal tracking purposes outlined in this Policy. Financial transaction records, ITN payloads, and formal billing histories will be securely archived for a minimum statutory period of 5 years to comply with the South African Companies Act and SARS tax regulations.

7. Your Data Rights Under POPIA

As a data subject in South Africa, you possess the following statutory rights regarding your personal information under Chapter 10 of POPIA:

• Right of Access (Section 23): You have the right to request a confirmation copy of the personal information we hold regarding you, free of charge.
• Right to Correction (Section 24): You have the right to request that we immediately update, correct, or amend inaccurate, irrelevant, or outdated personal data linked to your account profile.
• Right to Erasure ("Right to be Forgotten"): You have the right to request that we completely delete and purge your personal profile data from our live databases. Note: If you request absolute deletion, you will no longer be able to log into or use the Completeman App.
• How to Exercise Your Rights: Submit a formal written request to our data compliance team at support@completeman.co.za.

8. Contacting the Information Regulator

If you believe that Completeman has processed your personal information in a manner that infringes upon the provisions of POPIA, and we have failed to resolve your complaint directly, you have the right to lodge an official complaint with the South African Information Regulator:

• Physical Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
• Website: inforegulator.org.za
• Complaints Email: POPIAComplaints@inforegulator.org.za