Information SAFA collects
SAFA may collect identity information, contact details, service history, payment metadata, device information, location signals, verification records, and evidence uploaded through incidents, disputes, or onboarding. Sensitive verification data is only requested for trust, safety, compliance, and category-specific checks.
Purpose and lawful use
Information is used to operate the marketplace, verify users and providers, support payments, improve service quality, manage fraud and abuse, support legal compliance, and surface operational trust signals where appropriate. SAFA does not sell personal data.
POPIA-aware sharing and safeguards
SAFA may share relevant information with payment partners, identity or verification partners, service providers directly involved in a booking, and regulators or law-enforcement bodies where legally required. Controls include encryption, access restrictions, structured role permissions, and internal audit logging.
Retention, rights, and biometrics
Records may be retained for legal compliance, platform security, fraud prevention, dispute handling, and auditability. Users may request access, correction, or deletion subject to retention duties. Facial verification and KYC processing require explicit consent and may restrict sensitive actions if declined or withdrawn.
Breach response
Where required by law, SAFA will assess incidents, contain exposure, and notify affected parties or authorities in line with applicable breach-response obligations.