Privacy Notice

1. Who is responsible for your information

Kasirooms, trading as KasiRooms, is the responsible party (data controller) for the personal information described here. This notice explains what we collect, why, who we share it with, and what rights you have under South Africa's Protection of Personal Information Act (POPIA).

2. What we collect and why

• Account details — name, email address, phone number, role (tenant/landlord/driver) and password credentials. Used to create and secure your account and to run the service. Legal basis: performance of our contract with you.
• Listing and advert content — room details, photos, township and city, business name and offer. Used to publish what you asked us to publish. Legal basis: contract.
• Contact numbers — landlord, business and driver phone and WhatsApp numbers. Shown only to signed-in users who need them to make contact. Legal basis: contract and legitimate interests in preventing scraping and spam.
• Driver verification documents — vehicle photos, number plate photo and identity document photo. Used only to verify drivers so tenants are not scammed. Legal basis: legitimate interests in platform safety.
• Approximate location — only if you tap "near me", and only in your browser session, to sort results by distance. Legal basis: consent.
• Usage and device information — pages visited, an anonymous browser code, and engagement events such as views and contact clicks. Used for site statistics and to show landlords how their rooms are performing. Legal basis: legitimate interests.
• Support messages — what you send us. Used to answer you. Legal basis: legitimate interests.

We do not collect or store card numbers. Payment information is collected by Paddle, our Merchant of Record.

3. Who we share it with

• Other users — the parts of your listing, advert or driver profile you chose to publish, plus your contact number to signed-in users who ask to contact you.
• Service providers — our hosting, database, storage, authentication and mapping providers, who process data on our instructions.
• Paddle, our Merchant of Record, for the sale of paid packages, payments, invoicing, tax compliance and refunds.
• Professional advisers such as legal and accounting advisers where needed.
• Authorities where we are required to by law, or to investigate fraud or protect someone's safety.

Some of these providers process data outside South Africa. Where that happens we rely on providers who offer a comparable level of protection and appropriate contractual safeguards.

4. How long we keep it

Account information is kept while your account is open and for a reasonable period afterwards to handle disputes and meet legal obligations. Driver verification documents are kept only while the driver profile is active, and are deleted or anonymised once no longer needed. Anonymous site statistics may be kept indefinitely because they cannot identify you.

5. Your rights

Under POPIA you may ask us to confirm what personal information we hold about you, correct or delete it, object to processing, or withdraw consent where we relied on it. You can also lodge a complaint with the Information Regulator of South Africa. Contact us using the details on the site and we will respond within a reasonable time.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls in our database, private storage for uploaded documents, and contact numbers that are only released to signed-in users who need them. No system is perfectly secure, so please use a strong, unique password.

7. Cookies and similar technology

We use essential browser storage to keep you signed in and to remember an anonymous visitor code used for counting site visits. We do not use advertising or tracking cookies. You can clear this storage at any time in your browser settings, but you will be signed out.