Privacy Policy

Introduction

Dollup ("we", "us", or "our") operates a beauty and salon booking platform that connects clients with salons, stylists, and beauty professionals across South Africa, and offers an online shop for beauty products. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have under the Protection of Personal Information Act (POPIA) and the General Data Protection Regulation (GDPR) where applicable.

By creating an account, booking an appointment, purchasing a product, subscribing to a plan, or otherwise using our platform, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of personal information:

• Account & Identity Data: Your full name, email address, and role (client, salon owner, stylist, or admin) when you register or sign in.
• Profile Preferences: Hair type and length, skin type and concerns, allergies, favourite brands and stylists, preferred booking days and times, birthday, and notes you add to your client profile.
• Booking Data: Salon and service selected, stylist chosen, appointment date and time, recurrence preferences, notes, and the contents of your booking cart.
• Payment & Transaction Data: Payment amounts, PayFast transaction references, subscription package and billing period, invoices, and order history.
• Product Orders: Items purchased, quantities, prices, delivery address, and order status.
• Reviews & Ratings: Star ratings, written comments, and any replies from salons or stylists.
• Client Gallery Photos: Photos you upload of your salon results, along with captions, the service and stylist, and approval status.
• Messages: The content of conversations between you and salons or stylists via our in-app messaging.
• Loyalty Data: Loyalty points earned and redeemed, tier status, and promotion redemptions.
• Location Data: Approximate device location used to show nearby salons on the Explore map, powered by Google Maps.
• Notification Data: Email address and device tokens used to send appointment confirmations, reminders, review requests, and push notifications.
• Technical & Usage Data: IP address, browser type and version, device information, pages viewed, and how you interact with the platform.

2. How We Use Your Information

We process your personal information for the following purposes:

• To create and manage your account and authenticate you when you sign in.
• To process salon and stylist bookings, including recurring appointments and booking cart checkout.
• To process product orders and payments through PayFast.
• To manage salon and stylist subscriptions, free trials, and renewal billing.
• To send appointment confirmations, reminders, cancellation notices, and review requests by email or push notification.
• To enable in-app messaging between clients, salons, and stylists.
• To display and manage reviews, ratings, and client gallery photos.
• To run our loyalty points programme and apply promotions.
• To show nearby salons and stylists on the map using your location.
• To verify and approve salon and stylist registrations, including reviewing uploaded documents.
• To provide admins with platform oversight, analytics, and reporting.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal and regulatory obligations under POPIA and other applicable laws.

3. Legal Basis for Processing

Under POPIA, we process your personal information based on your consent, to perform a contract (such as processing your booking or order), to comply with a legal obligation, and for our legitimate interests in operating and securing the platform. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

4. Data Sharing & Third Parties

We share your personal information only as necessary to provide our services:

• Salons & Stylists You Book With: When you book an appointment or message a salon, we share your name, contact details, booking details, and any notes so they can fulfil your appointment.
• PayFast: Our payment processor receives the information needed to process your bookings, product orders, and subscription payments securely.
• Google Maps: Used to display salon locations and to estimate distances based on your device location.
• Email & Infrastructure Providers: Services that deliver transactional and notification emails and host our platform.
• Administrators: Dollup admins may access account, booking, salon, stylist, and subscription data to manage and oversee the platform.
• Legal Authorities: Where required by law, court order, or to protect our rights and safety.

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as your account is active and for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Booking, order, payment, and invoice records are kept for the period required by South African tax and record-keeping laws. You may request deletion of your account and associated data, subject to records we are legally required to retain.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Payment processing is handled by PayFast, which is PCI-DSS compliant, and we do not store your full card details on our servers. Sensitive operations such as payments, subscription management, and notifications are processed server-side. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

7. Your Rights Under POPIA

As a data subject, you have the following rights:

• Access: Request confirmation of what personal information we hold about you and a copy of it.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Request the deletion of your personal information, subject to legal retention requirements.
• Objection: Object to the processing of your personal information for direct marketing or other purposes.
• Restriction: Request that we restrict the processing of your information in certain circumstances.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Complaint: Lodge a complaint with the Information Regulator (South Africa) if you believe we have not handled your information lawfully.

To exercise any of these rights, contact us at privacy@dollup.com. We will respond within a reasonable time, as required by POPIA.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the platform is used. You can configure your browser to refuse cookies or alert you when cookies are being sent; however, some parts of the platform may not function properly without them.

9. Notifications

We send you email and, where the app is installed on your device, push notifications for appointment confirmations, reminders, cancellations, review requests, loyalty updates, and account-related alerts. You can manage notification preferences within your account settings or through your device's notification settings.

10. Children's Privacy

Our platform is not intended for children under 18 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. International Transfers

Your information may be processed and stored on servers located outside South Africa, including by our infrastructure and email providers. We take reasonable steps to ensure such transfers are carried out in line with POPIA and that appropriate safeguards are in place.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.