Privacy Policy

Version 1.0 · Effective 14 September 2026

1. Introduction and Purpose

  • This Privacy Policy explains how HatGo collects, uses, stores, and protects personal information of Users (including Customers, Providers, and Runners).
  • HatGo complies with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and where applicable, the European Union’s General Data Protection Regulation (“GDPR”), due to data hosting location.

2. Who We Are

  • HatGo Services (“HatGo”, “we”, “us”, “our”) is the responsible party for your personal information collected through hatgoservices.co.za and related platform services.
  • HatGo has an Information Officer registered with the Information Regulator of South Africa.
  • Contact for data privacy enquiries: team@hatgoservices.co.za

3. Personal Information Collected

  • Users provide personal data including names, identification numbers, contact details, and bank account information.
  • Providers and Runners submit identity documents and liveness images which are manually reviewed.
  • Payment transaction data is collected and processed directly by HatGo.
  • Bank account numbers are stored encrypted; only masked views are presented externally.
  • We collect personal information necessary to provide platform services, including but not limited to:
    • Name, surname, contact details;
    • Identity documents and verification images;
    • Account login details;
    • Delivery, booking, and order details;
    • Payment and banking information;
    • Communication records and logs;
    • Photographs and delivery proof;
    • Device and usage data.
  • We collect only information necessary for legitimate service and legal compliance purposes.

4. How We Collect Information

  • Directly from you when registering, ordering, or contacting us.
  • Automatically through your use of the platform.
  • From documents you provide for verification.
  • From Providers, Runners, Partner Shops where necessary.
  • Lawfully from third parties as permitted.

5. Use and Processing of Personal Data

  • Personal data is used solely for purposes of account creation, verification, payment processing, order fulfillment, fraud prevention, and compliance with legal obligations.
  • Manual verification procedures are employed; no automated third-party verification services are engaged.
  • Data is only accessed by authorized HatGo personnel under strict access controls.

6. Identity Verification and Screening

  • Verification data (ID documents, liveness photos, banking info) is collected and manually reviewed by authorised HatGo personnel.
  • Third-party verification providers are not currently used.
  • Verification is mandatory when specified and tied to payout eligibility and delivery assignments.
  • By submitting such data, you consent to its use for verification, fraud prevention, compliance, and settlement.

7. Data Storage and Security Measures

  • Personal data is stored on Supabase infrastructure located in the West EU (Ireland) region.
  • Appropriate technical and organisational security measures are implemented including encryption at rest, access controls, and restricted data views.
  • Cross-border transfer safeguards in compliance with GDPR and POPIA are applied.
  • HatGo employs reasonable organisational and technical security measures, including:
    • Access control and encryption of sensitive data.
    • Role-based access and audit logging.
    • Staff training and confidentiality obligations.
    • Monitoring and incident response procedures.
    • Notification of data breaches as required by law.

8. Data Sharing and Third Parties

  • HatGo does not share personal information with third-party payment or verification processors at this time.
  • Personal data is only disclosed to authorities if legally required.

9. Retention Periods

  • Financial records are retained for a minimum of five (5) years to comply with tax and regulatory obligations.
  • Identity verification documents and related personal data are retained for three (3) years following account closure or cessation of services.
  • After expiry of retention periods, data is securely deleted or anonymised.
  • Deleted or archived data may persist in backups temporarily.

10. Data Subject Rights

  • Users may request access, correction, or deletion of their personal data subject to legal and operational constraints.
  • HatGo will respond to such requests within reasonable timeframes as required by POPIA.
  • Subject to POPIA and applicable law, you may:
    • Request access to your personal data.
    • Request correction of inaccurate information.
    • Request deletion where lawful.
    • Object to processing.
    • Withdraw consent where processing is consent-based.
    • Lodge complaints with the Information Regulator.
  • Submit requests via team@hatgoservices.co.za.

11. Cookies and Tracking

  • HatGo may use cookies to improve user experience and platform functionality.
  • Cookies do not include tracking beyond standard session management.
  • Consent will be sought where required for non-essential cookies.

12. Children

  • The platform is not intended for persons under 18 except where they have legal capacity or supervision.
  • We do not knowingly collect personal information from children unlawfully.

13. Changes to this Privacy Policy

  • We may update this policy from time to time.
  • Material changes will be communicated where practicable.
  • Continued use after updates constitutes acceptance.

14. Contact Information for Privacy Queries

Privacy-related questions or complaints may be directed to HatGo’s Information Officer at team@hatgoservices.co.za.

← Back to HatGo Services