Legal

Privacy Policy

Last updated: 6 July 2026

This Privacy Policy explains how Mzansi Salons (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you use our website and services (the “Platform”). We are committed to protecting your privacy in line with South Africa’s Protection of Personal Information Act, 2013 (“POPIA”), and, where it applies to you, comparable international data-protection standards such as the GDPR.

For the purposes of POPIA, Mzansi Salons is the “responsible party” that determines why and how your personal information is processed.

1. Who we are and how to reach us

Mzansi Salons is a South African online directory that helps customers find independent salons and stylists by location and service type, and lets salon owners (“hosts”) list their services and prices. If you have any questions about this policy or your personal information, contact us at:

• Email: info@mzansisalons.co.za
• Website: mzansisalons.com

2. The personal information we collect

We only collect information that we need to run the Platform:

Account information

• Your name and email address.
• Your password, which is encrypted (“hashed”) by our authentication provider — we never see or store it in readable form.
• Whether you are a customer or a host.

Salon and listing information (hosts)

• Salon name, description, physical address, and the approximate map coordinates derived from that address.
• Photos you upload, and the services and prices you list.

Booking request information (customers)

• The name and contact details (phone or email) you provide when requesting a booking.
• The service you are interested in, your preferred day/time, and any note you add.

Technical information

• Basic, standard information that our hosting and database providers automatically log to keep the service running securely (such as limited connection and device data).

We do not collect payment or bank-card details, because no payments are processed on the Platform.

3. How and why we use your information

We process your personal information for the following purposes, each with a lawful basis under POPIA (such as your consent, the performance of our service to you, or our legitimate interests in operating a safe directory):

• To create and manage your account and keep you logged in.
• To publish salon listings and show them to customers searching by area and service.
• To pass a customer’s booking request to the relevant salon so the salon can contact the customer directly to arrange the appointment.
• To review and approve listings before they go live, and to keep the directory accurate and trustworthy.
• To respond to your questions and provide support.
• To keep the Platform secure and to comply with our legal obligations.

4. Who we share it with

We do not sell your personal information. We share it only with trusted service providers (“operators” under POPIA) that help us run the Platform, and only to the extent needed:

• Between users, by design: when a customer submits a booking request, the relevant salon receives that customer’s name, contact details and request so they can respond. A host’s public listing (salon name, address, description, photos, services and prices) is visible to visitors once approved.
• Supabase — our database, secure login, and photo-storage provider.
• Netlify — hosts the website.
• Google Maps Platform — converts addresses into map locations and powers the “near me” search.

We may also disclose information if required by law, or to protect our rights, users, or the public.

5. Cross-border transfers

Some of our service providers store or process information on servers outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it receives a level of protection comparable to POPIA — for example, by using reputable providers that offer appropriate contractual and technical safeguards. By using the Platform, you acknowledge that your information may be processed in this way.

6. How long we keep it

We keep personal information only for as long as needed for the purposes above, or as required by law. If you close your account or ask us to delete your information, we will delete or de-identify it unless we are legally required to retain it. Public listings and booking requests may be retained while your account or salon remains active.

7. How we protect it

We use appropriate technical and organisational measures to safeguard your information, including encrypted connections (HTTPS), hashed passwords, and access controls that limit who can see the data. No system is perfectly secure, but we work to protect your information and to notify you and the Information Regulator if a security compromise affecting your personal information occurs, as required by POPIA.

8. Your rights

Subject to applicable law, you have the right to:

• Be told what personal information we hold about you and to access it.
• Ask us to correct or update information that is inaccurate, out of date, or incomplete.
• Ask us to delete or destroy your information where we are no longer entitled to keep it.
• Object, on reasonable grounds, to our processing of your information.
• Object to your information being used for direct marketing.
• Not have significant decisions about you made solely by automated means (we do not do this).
• Withdraw any consent you have given, without affecting processing that already took place.

To exercise any of these rights, email us at info@mzansisalons.co.za. We aim to respond within a reasonable time, and within any period required by law.

9. Direct marketing

We will only send you marketing messages if you have agreed to receive them or where the law otherwise allows it. Every marketing message will give you a simple way to opt out, and you can also opt out at any time by contacting us.

10. Cookies and similar technologies

The Platform uses a small amount of essential browser storage that is necessary to keep you securely logged in. We do not use advertising or tracking cookies. Google Maps may set its own cookies when maps are displayed; these are governed by Google’s privacy policy.

11. Children

The Platform is intended for people aged 18 and older. We do not knowingly collect personal information from children without the consent of a competent person. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Complaints

If you have a concern about how we handle your personal information, please contact us first at info@mzansisalons.co.za so we can try to resolve it. You also have the right to lodge a complaint with the Information Regulator of South Africa:

• Website: inforegulator.org.za
• Complaints email: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za

13. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above, and significant changes will be made clear on the Platform. Please check back occasionally.