BookIt SA

Privacy Policy (POPIA)

Draft for review by a lawyer before launch. Last updated October 2026.

BookIt SA ("BookIt", "we") is a booking platform operated by 2Faces. This policy explains how personal information is handled under the Protection of Personal Information Act, 2013 (POPIA).

1. Who is responsible

Each business that uses BookIt (for example a salon) is the responsible party for its customers' information. BookIt acts as an operator that processes that information on the business's behalf. For business owners' own account information, BookIt is the responsible party.

2. What we collect

  • Customers: name, cellphone number, optional email, booking history, payments made, reviews you leave, and your WhatsApp marketing choice.
  • Business owners and staff: name, email, business details, and subscription payments.
  • Technical: a login cookie for owners and staff. Customers booking online don't need an account and get no tracking cookies.

3. Why we use it

  • To make, confirm, remind you about, reschedule and cancel bookings (needed to provide the service you asked for).
  • To take deposits and payments through PayFast (we never see or store card numbers).
  • To send marketing messages only if you opted in. You can opt out at any time by replying STOP or using the link on your booking page.

4. WhatsApp messages

Booking confirmations and reminders are service messages linked to a booking you made. Specials and broadcasts are marketing and only go to customers who ticked the opt-in box. Each business can see who opted in, when and how.

5. Sharing

We share information only with: the business you booked with; PayFast or Yoco to process payments; Meta (WhatsApp) to deliver messages once the business connects WhatsApp; and our hosting provider. We do not sell personal information.

6. Keeping it safe and for how long

Data is stored on secured servers with access limited to the business and authorised BookIt staff. Booking records are kept for as long as the business has an account plus 3 years for tax and dispute purposes, unless deletion is requested earlier and the law allows it.

7. Your rights

  • Ask what information is held about you, and ask for corrections or deletion.
  • Object to processing for marketing at any time.
  • Complain to the Information Regulator: inforeg.org.za, complaints.IR@inforegulator.org.za.

8. Contact

Information Officer: privacy@bookit.co.za. To exercise your rights about a specific booking, you can also contact the business directly.