Privacy Policy

This policy applies to all users of the Repairers Hub platform operated by McSbuSing (Pty) Ltd ("we", "us", "our"), including customers who submit service requests, track repairs, or browse the Platform; repair shop owners and their staff members.

1. Information We Collect

We collect different categories of personal information depending on how you interact with the Platform:

2. How We Collect Information

2.1 Directly from You

When you register an account, submit a service request, complete a repair intake form, or fill in any field on the Platform, you provide information directly to us.

2.2 Through Your Browser

When you visit the Platform, your browser may share technical information such as your IP address, browser type, and operating system. We also use browser session storage and cookies to maintain your login state.

2.3 Via Geolocation

If you click "Detect My Location" on the service request form or store settings, your browser will request permission to access your GPS coordinates. This is entirely optional and requires your explicit consent. We never access your location without your action and approval.

2.4 From Third Parties

We do not currently purchase or receive personal data from third-party data brokers. Information about staff members is provided by their Shop Owner employer when creating staff accounts.

3. Why We Collect & Use Your Information

We do not use your personal information for automated decision-making that produces significant legal or similarly significant effects without human oversight.

4. Legal Basis for Processing

Under POPIA, we process personal information on the following grounds:

• Performance of a contract — Processing is necessary to provide the Platform's services (e.g. creating a repair record, matching you with shops).
• Consent — For optional data such as geolocation, profile pictures, and email notifications to customers about accepted requests.
• Legitimate interest — For platform security, fraud prevention, and service improvement — balanced against your interests and rights.
• Legal obligation — Where we are required by South African law to retain certain records.

5. Sharing Your Information

5.1 With Repair Shops

When you submit a service request, your contact details, device description, budget, and collection preference are shared with Repair Shops that accept your request. Before acceptance, shops only see the request details — your full contact details are revealed only after a shop accepts your request.

5.2 With Staff

Staff members at a Repair Shop can access customer and device information for repairs assigned to their store. This access is limited to their assigned store only.

5.3 Service Providers

We may share limited technical data with trusted third-party service providers who assist us in operating the Platform (e.g. email delivery providers, hosting services). These providers are contractually obligated to protect your data and may only use it to provide services to us.

5.4 Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect our rights, or prevent fraud or abuse.

5.5 Business Transfers

If McSbuSing (Pty) Ltd is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify affected users before data is transferred and becomes subject to a different privacy policy.

6. Data Retention

We retain your personal information for as long as necessary for the purposes described in this policy or as required by South African law:

Upon expiry of the relevant retention period, personal information is deleted or anonymised.

7. Data Security

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures, including:

• Password hashing — All passwords are hashed using industry-standard bcrypt. We never store plain-text passwords.
• Access controls — Separate authentication guards for owners and staff. Staff can only access their assigned store's data.
• Email confirmation — New staff accounts must be verified by email before login is permitted.
• Session management — Secure session tokens with server-side validation.
• CSRF protection — All forms are protected against cross-site request forgery.
• Secure storage — Uploaded files (logos, photos, QR codes) are stored on the server with access-controlled paths.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify affected individuals and the Information Regulator as required by POPIA.

8. Location Data

8.1 Customer Location (Service Requests)

When you submit a service request, you may optionally click "Detect My Location". This uses the HTML5 Geolocation API in your browser, which prompts you for permission. If you grant permission, your latitude and longitude coordinates are:

• Stored with your service request for matching purposes;
• Used to notify repair shops within a defined radius (default: 50 km);
• Visible to Shop Owners who receive your lead notification.

If you do not grant location permission, your request is still submitted and all active shops may be notified.

8.2 Store Location

Shop Owners may set their store's geographic coordinates in Store Settings using the "Detect My Location" button. This location is used to calculate proximity to service requests and is not publicly displayed.

8.3 We Do Not Track You Continuously

We do not continuously track your location. Location is captured only at the explicit moment you click the "Detect My Location" button. We do not use background location tracking on any device.

9. Cookies & Session Data

We use the following minimal cookies and session mechanisms:

We currently use no third-party analytics, advertising, or tracking cookies. All cookies used are strictly necessary for the Platform's operation or your convenience.

10. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act 4 of 2013, you have the following rights:

10.1 Right of Access

You have the right to request a copy of the personal information we hold about you.

10.2 Right to Correction

You have the right to request that we correct inaccurate or incomplete personal information. Shop Owners and Staff can update most information directly in their account settings.

10.3 Right to Deletion

You have the right to request deletion of your personal information, subject to our legal retention obligations. Where we are legally required to retain records (e.g. financial or repair records), we will inform you of the basis for retention.

10.4 Right to Object

You have the right to object to the processing of your personal information on the grounds of legitimate interest.

10.5 Right to Withdraw Consent

Where processing is based on your consent (e.g. geolocation), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

10.6 Right to Complain

If you believe we have handled your personal information unlawfully, you have the right to lodge a complaint with the Information Regulator of South Africa:

• Website: www.justice.gov.za/inforeg
• Email: inforeg@justice.gov.za

To exercise any of the above rights, contact our Information Officer at privacy@repairershub.co.za. We will respond within 30 days.

11. Children's Privacy

The Platform is not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verifiable parental consent, we will take steps to delete that information promptly.

If you believe a child has provided us with personal information, please contact us at privacy@repairershub.co.za.

12. Third-Party Services

The Platform uses the following third-party services. Each has its own privacy practices:

Links to external websites from our Platform are provided for convenience only. We are not responsible for the privacy practices of those websites.

13. Cross-Border Data Transfers

Repairers Hub is operated from South Africa and primarily stores data within South Africa. If any personal information is transferred to a country outside of South Africa for processing (e.g. via a cloud email provider), we ensure that such transfers comply with the requirements of POPIA Section 72, including that the recipient country provides adequate levels of protection or is bound by an agreement that upholds similar protections.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy;
• Notify registered Shop Owners and Staff via email at least 14 days before changes take effect;
• Display a notice on the Platform.

The current version of this policy is always available at /privacy-policy.

15. Contact & Information Officer

We have appointed an Information Officer as required by POPIA. For any privacy-related queries, requests, or concerns, please contact us:

We will acknowledge all privacy requests within 3 business days and respond fully within 30 days as required by POPIA.