Privacy Policy

NOW Services (“we”, “us” or “our”) operates a platform that connects customers with independent service providers. This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you use our website, web application or mobile applications.

NOW Services is intended to operate in accordance with applicable South African privacy law, including the Protection of Personal Information Act 4 of 2013 (POPIA).

Depending on how you use the Platform, we may collect:

• Name and surname, email address and telephone number
• Account login information
• Address or service location, and GPS/location information where enabled
• Profile, provider and business information
• Service requests, quotations and job details
• Communications with other users and with us
• Ratings and reviews
• Payment and transaction information, invoices and transaction records
• Device, browser and technical information, including IP address
• Information you voluntarily submit to us

We aim to collect information that is reasonably necessary for the purposes described in this Privacy Policy.

We may process personal information to:

• Create and manage accounts
• Connect customers with service providers and facilitate service requests and communications
• Process subscriptions and payments
• Issue and maintain invoices and transaction records
• Provide customer support and investigate complaints and disputes
• Prevent fraud and misuse, and maintain Platform security
• Improve and develop the Platform
• Communicate important service information
• Comply with legal and regulatory obligations, and enforce our agreements and policies

Where a feature requires location information, such as finding service providers near a customer or enabling a provider to respond to a job, we may process location information provided by the user or generated by the device.

Users should only enable location access when comfortable doing so. Some Platform features may not function correctly without required location permissions.

To facilitate a service request, we may share relevant customer information with the service provider selected or matched for the job, such as name, contact details, service location, job description and other information reasonably necessary to perform or arrange the service.

Service providers may similarly receive information needed to communicate with customers and perform accepted jobs.

We may use third-party providers for hosting, databases, authentication, analytics, communications, payment processing, maps/location services, email, security and other Platform functions. These providers may process personal information on our behalf or as independent service providers, subject to their applicable terms and privacy practices.

Payment providers such as PayFast may process payment information directly. Users should review the relevant payment provider’s privacy notice for details of its processing.

Where required by law, we will obtain the necessary consent or provide an appropriate lawful mechanism before sending direct marketing communications. Users may opt out of marketing communications by using the unsubscribe mechanism provided or contacting us.

The Platform may use cookies, local storage, device identifiers and similar technologies to keep users signed in, remember preferences, maintain security, understand usage and improve functionality.

Some cookies may be provided by third-party services. Users can manage certain cookie settings through their browser or device, although disabling some technologies may affect Platform functionality.

We process personal information only where we have an appropriate lawful basis under applicable law, which may include consent, performance of a contract, compliance with a legal obligation, legitimate interests where permitted, or another lawful basis recognised by law.

Where processing relies on consent, you may withdraw consent subject to legal or contractual limitations and the consequences explained at the time of collection.

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure. No internet-based system can be guaranteed to be completely secure.

Users are responsible for protecting their account credentials and should notify us promptly if they suspect unauthorised account activity.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining transaction and accounting records, resolving disputes, preventing fraud, complying with legal obligations and enforcing agreements.

When information is no longer required, we may securely delete, destroy or anonymise it, subject to applicable retention requirements.

Some third-party technology providers may process or store information outside South Africa. Where personal information is transferred across borders, NOW Services will take steps required by applicable law, including applicable POPIA requirements concerning cross-border transfers.

Subject to applicable law, you may have the right to:

• Request access to personal information held about you
• Request correction or updating of inaccurate information
• Object to certain processing
• Request deletion where legally applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Regulator

Requests should be sent to the contact details in this Privacy Policy. We may need to verify your identity before responding.

The Platform is not intended to knowingly collect personal information from children in circumstances prohibited by applicable law. Where children’s information is processed, NOW Services will apply the safeguards required by POPIA and other applicable law.

If a security compromise occurs that triggers notification obligations under applicable law, NOW Services will take the required steps, which may include notifying the Information Regulator and affected data subjects where required.

If you have a privacy complaint, contact us first so that we can investigate and attempt to resolve it. You may also contact the Information Regulator of South Africa where permitted by law. The Information Regulator is the independent authority responsible for monitoring and enforcing POPIA and PAIA compliance.

We may update this Privacy Policy from time to time to reflect changes to our Platform, processing practices or legal requirements. The latest version will be published on the Platform or website with an updated effective date.