1. Introduction

Welcome to Nextapt. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp booking service.

This policy complies with the Protection of Personal Information Act (POPIA), 2013 (Act No. 4 of 2013) of South Africa. By using Nextapt, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

When you register as a merchant or make a booking, we collect:

• Business Information: Business name, business type, services offered, pricing, operating hours
• Contact Information: WhatsApp phone number, email address (if provided)
• Booking Information: Customer phone numbers, service details, booking dates and times
• Payment Information: Wallet balance, transaction history (we do NOT store credit card details)

2.2 Information Automatically Collected

• Usage Data: How you interact with our service, booking patterns, feature usage
• Device Information: IP address, browser type, operating system
• Cookies: We use session cookies to keep you logged in and improve user experience

2.3 Information from Third Parties

• WhatsApp: Message delivery status, read receipts
• PayFast: Payment confirmation, transaction references

3. How We Use Your Information

We use your information to:

• Provide the Service: Process bookings, send WhatsApp notifications, manage your wallet
• Process Payments: Handle wallet top-ups and booking deposits via PayFast
• Improve the Service: Analyze usage patterns, fix bugs, develop new features
• Customer Support: Respond to your questions and resolve issues
• Communicate: Send service updates, booking confirmations, payment receipts
• Security: Detect fraud, prevent abuse, protect our users
• Legal Compliance: Comply with applicable laws and regulations

4. Legal Basis for Processing (POPIA Compliance)

Under POPIA, we process your personal information based on:

• Consent: You've agreed to our Terms of Service
• Contract Performance: Processing is necessary to provide the booking service
• Legitimate Interests: Improving our service, preventing fraud, ensuring security
• Legal Obligation: Complying with tax laws, financial regulations

5. How We Share Your Information

We share your information only in these limited circumstances:

5.1 Service Providers

• Meta (WhatsApp): To send booking notifications and messages via WhatsApp Cloud API
• PayFast: To process payments securely
• Digital Ocean: Our hosting provider (data stored in secure servers)

5.2 Business Transfers

If Nextapt is acquired or merged, your information may be transferred to the new owner. We will notify you before your information becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request.

5.4 With Your Consent

We may share information for other purposes with your explicit consent.

6. Data Security

We implement appropriate technical and organizational security measures to protect your data:

• Encryption: All data transmitted is encrypted using SSL/TLS
• Secure Storage: Data is stored in encrypted databases
• Access Controls: Limited employee access on a need-to-know basis
• Password Protection: Passwords are hashed using industry-standard algorithms
• Regular Audits: We conduct security reviews and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records for 5 years)
• Resolve disputes and enforce agreements

Specific retention periods:

• Active Accounts: Data retained while account is active
• Inactive Accounts: Deleted after 2 years of inactivity (with notice)
• Booking Records: Retained for 1 year after booking date
• Financial Records: Retained for 5 years (tax compliance)
• Marketing Communications: Until you unsubscribe

8. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

To exercise any of these rights, contact us at: privacy@nextapt.co.za

We will respond to your request within 30 days.

9. Children's Privacy

Nextapt is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than South Africa, including the United States (WhatsApp servers, Digital Ocean infrastructure). These countries may have different data protection laws.

When we transfer data internationally, we ensure appropriate safeguards are in place in accordance with POPIA Section 72, including:

• Using service providers with adequate data protection measures
• Standard contractual clauses approved by the Information Regulator
• Ensuring recipients comply with privacy standards equivalent to POPIA

11. Third-Party Links

Our service may contain links to third-party websites (e.g., PayFast payment pages). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies before providing any information.

12. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for login and basic functionality
• Analytics Cookies: Help us understand how you use our service
• Performance Cookies: Improve service speed and reliability

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features.

13. Marketing Communications

We may send you promotional messages about new features, special offers, or updates. You can opt out at any time by:

• Clicking "unsubscribe" in any marketing email
• Replying "STOP" to marketing WhatsApp messages
• Contacting us at support@nextapt.co.za
• Adjusting preferences in your dashboard

Note: You cannot opt out of service-related messages (booking confirmations, payment receipts, security alerts) as these are essential to the service.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page with an updated "Last updated" date
• Sending an email notification to registered merchants
• Displaying a prominent notice in the dashboard

Your continued use of Nextapt after changes become effective constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or your personal information, please contact:

16. POPIA Compliance Statement

Nextapt is committed to full compliance with the Protection of Personal Information Act (POPIA), 2013. We adhere to the eight conditions for lawful processing of personal information:

1. Accountability: We take responsibility for all information under our control
2. Processing Limitation: Information is processed lawfully and fairly
3. Purpose Specification: Collection for specific, lawful purposes
4. Further Processing Limitation: Data used only for stated purposes
5. Information Quality: We keep data accurate and up to date
6. Openness: Transparent about data processing practices
7. Security Safeguards: Technical and organizational measures in place
8. Data Subject Participation: You have rights regarding your information