Privacy Policy (POPIA).

Sideh (Pty) Ltd is the responsible party for your personal information under the Protection of Personal Information Act, 2013 (POPIA). Information Officer: available on request from support@sidehcash.co.za, privacy@sidehcash.co.za. Address: available on request from support@sidehcash.co.za.

1. Information we collect

2. Why we may process it (legal grounds)

To perform our contract with you; to comply with the law (for example tax and financial records); for legitimate interests such as security, fraud prevention and improving Sideh; and, for marketing, only with your consent, which you can withdraw at any time.

3. Who we share it with

• The other party to your booking: first name, rating and booking details, and the exact address only after acceptance. Phone numbers and emails typed in chat are masked.
• Operators who process information for us under contract: Yoco (payments), Supabase (database, file storage and login), Vercel (website hosting), Twilio (SMS one-time PINs), and Google or Apple if you choose to sign in with them.
• Authorities, when the law requires it.
• We never sell personal information.

4. Information outside South Africa

Some operators store information outside South Africa (our database and website run in Frankfurt, Germany, which is covered by the EU GDPR; SMS is sent through the USA). We only use operators bound by law or agreements that give protection similar to POPIA, as section 72 requires.

5. How long we keep it

While your account is active, and after that: booking and payment records for 5 years (tax and financial law); provider ID documents for up to 12 months after a provider leaves (fraud prevention); chats for 2 years after the booking. Then the information is deleted or anonymised.

6. Security

Encryption in transit (HTTPS), bank account numbers encrypted at rest, private storage for ID documents with short-lived links, strict access controls, mandatory two-step login for staff, an audit log of sensitive actions, and regular backups. If a security compromise affects you, we will notify you and the Information Regulator as POPIA requires.

7. Your rights

You may ask to see, correct or delete your information, object to processing, and withdraw consent for marketing. Email privacy@sidehcash.co.za. You may also complain to the Information Regulator (inforegulator.org.za, complaints.IR@inforegulator.org.za). See also Access to information (PAIA).

8. Children

Sideh accounts are for people aged 18 and older. Services for children, such as tutoring, must be booked by a parent or guardian, and we collect only what is needed about the child.

9. Changes

We will post any changes here and tell you about important ones before they apply.