Legal review completed. These policies do not activate payments or waive statutory rights.
1 Responsible party and contact
AnythingDone Marketplace is the responsible party for the personal information it processes for its own platform purposes. Our address is Forest Hills, Kloof, 3624, South Africa. Send privacy requests to support@anythingdone.co.za, addressed to the Information Officer. Our published Information Officer is Emile Scandurra and Deputy Information Officer is Melissa Scandurra.
This notice is informed by the Protection of Personal Information Act 4 of 2013 (POPIA), particularly its lawful-processing conditions and sections 18, 19 to 24, 69 and 72. Accepting website terms is not blanket consent to every processing purpose.
2 Information collected and its sources
We receive information you provide when registering, verifying email, creating a profile, posting tasks, bidding, messaging, reporting a problem or purchasing membership. This can include your name, email, optional phone number, service areas, skills, business-registration information, task and quote details, uploaded photos and documents, and support correspondence.
Business owners may supply team invitations, enquiry details and notification-recipient addresses. Other users may provide information in messages, reports or reviews. Payment processing supplies transaction references, subscription identifiers, amounts, status and billing dates. Technical information can include session identifiers, IP addresses, device or browser data and security logs.
Required fields support the requested transaction, security or account function; without them the relevant function may not work. Optional contact sharing and directory fields can be left blank. Do not upload unnecessary sensitive personal information, payment-card details or identity documents.
3 Purposes and lawful grounds
We use necessary information to perform our agreement with you, administer accounts and subscriptions, deliver requested alerts and messages, respond to support requests and keep transaction records. We also process information where required by law or where justified by legitimate interests such as preventing fraud, protecting users and investigating misuse, after considering your rights.
We obtain consent where required, including for optional contact sharing and applicable electronic marketing. You may withdraw consent for future processing without affecting processing already lawfully completed. A legal obligation or another lawful ground may still require limited retention. We do not sell personal information.
4 Who can see marketplace information
Approved task listings and opted-in directory profiles are visible to the website audience permitted by the relevant feature. Public launch may make public listings visible to visitors and search engines. Do not include precise residential addresses or confidential information in publicly visible fields. Directory opt-in is separate from private sign-in information.
Bids, quote PDFs and private clarification or task conversations are restricted to the relevant participants and authorised operational staff. Earlier quote revisions may remain in the task history. Details voluntarily placed inside a PDF are visible to its recipients even if optional profile contact sharing is switched off. Recipients may retain copies already downloaded.
Optional contact sharing reveals the selected contact information to the other participant after bid acceptance. You may disable future disclosure in your profile, but we cannot recall details already seen. Business owners and authorised team members can access their business enquiries and permitted work records. Removing team access prevents future access but does not recall existing copies.
5 Service providers and payment information
We use hosting, storage, email and payment suppliers to deliver the platform. The Cloudflare deployment uses Cloudflare hosting and data services, Resend is used for configured transactional email, and PayFast processes authorised membership payments. Suppliers receive the information needed for their functions and may also have their own legal obligations and privacy notices.
Card entry takes place through PayFast. Our application does not request or store your full card number or card security code. We keep subscription identifiers and payment-status records for billing, reconciliation and support. Do not email card credentials to us.
We may disclose relevant information to advisers, authorities or dispute bodies when legally required or otherwise lawfully justified. Independent service providers are responsible for their own lawful processing of customer information outside our platform. They may not use it for unrelated marketing without a lawful basis.
6 Storage outside South Africa and safeguards
Service suppliers may process information outside South Africa. Cross-border transfers must meet POPIA section 72, such as adequate legal or contractual protection, or another applicable statutory basis. Use of the website alone is not blanket consent to overseas transfers. Contact the Information Officer for information about the suppliers and safeguards relevant to your data.
We apply reasonable technical and organisational safeguards, including access restrictions and measures to protect authentication and payment flows. No system is risk-free. If a security compromise triggers POPIA section 22, we will notify the Information Regulator and affected people as required, as soon as reasonably possible, subject to lawful grounds for delay.
7 Retention and deletion
We retain information only for as long as reasonably necessary for the purpose for which it was collected, a legal recordkeeping obligation, a lawful contract requirement or a justified dispute or security hold. Account information supports active accounts; task and payment records may need to remain after closure for claims and statutory obligations. We review retained information and delete, de-identify or restrict it when no longer needed.
Request closure or deletion by emailing support. Deletion is not necessarily immediate or absolute: we will explain any lawful retention and protect retained information from unrelated use. Copies in backups are managed through the applicable backup cycle. Other users' lawful transaction records and copies already received are not automatically erased when your account closes.
8 Cookies and communications
The website uses session and security technologies necessary for sign-in and requested features; a sample workspace may use browser storage. Blocking these may prevent those functions working. This notice does not authorise optional advertising or tracking technologies without the notice and choice required by law.
Account, security and billing notices are separate from promotional messages. You may manage optional matching and reminder emails in Profile and membership, or contact support. Additional notification recipients must verify and opt in before receiving optional messages. Electronic direct marketing must comply with POPIA section 69, including the limited existing-customer exception where applicable and an easy opt-out. Push availability depends on the implemented feature and device permission; it is not guaranteed.
9 Your rights and complaints
Subject to lawful conditions and exceptions, you may ask whether we hold your personal information, request access, correction or deletion, object to processing, withdraw consent and complain about misuse. We may request proportionate identity verification and explain any lawful fee or refusal. Where PAIA procedures apply, we will explain the applicable process; an access request may not be refused merely because it was sent to support.
You may complain directly to the Information Regulator through https://inforegulator.org.za/. You do not have to accept a privacy outcome you consider unlawful. The platform is intended for adults; contact us if information about a child has been supplied without appropriate authority.
We will publish updates to this policy and give appropriate notice of material changes. A notice update does not retrospectively create consent or remove your statutory rights.