Privacy Policy
Last updated: 20 September 2026
This Privacy Policy explains how Do Chat collects, uses, shares and protects personal information when you use our platform, website and services. We are committed to processing personal information lawfully and transparently, in line with the Protection of Personal Information Act, 2013 (POPIA) and other applicable data-protection laws.
Contents
1. Who is responsible
Do Chat ("we", "us", "our") is the responsible party (data controller) for the personal information described in this Policy. Where we process information on behalf of a vendor or property owner — for example, order details on their behalf — we act as an operator (processor) for that party.
2. Information we collect
We collect the following categories of personal information:
| Category | Examples |
|---|---|
| Account information | Name, business name, email address, phone number, role (owner, vendor or buyer) |
| Transaction information | Orders placed, amounts, items purchased, timestamps, commission and payout records |
| Payment information | Bank account details for payouts; card and payment data handled by our payment processor (we do not store full card numbers) |
| Communications | Messages you send us, support requests, and demo bookings |
| Technical information | Device type, browser, IP address, and usage data collected through cookies and similar technologies |
We collect this information directly from you when you register, place an order, contact us or book a demo, and automatically when you use the Platform.
3. How we use information
We use personal information to:
- create and manage accounts;
- process orders and split and settle payments between buyers, vendors, and property owners;
- provide the owner dashboard, reporting and analytics;
- provide customer support and respond to enquiries;
- send service messages and, where permitted, updates about the Platform;
- detect, prevent and address fraud, abuse and security issues; and
- comply with legal obligations, including tax and record-keeping.
4. Lawful basis for processing
We process personal information where: it is necessary to perform a contract with you or take steps at your request; you have consented; it is necessary for our legitimate interests (such as securing the Platform), balanced against your rights; or it is required to comply with a legal obligation. Where processing relies on consent, you may withdraw it at any time.
5. How we share information
We share personal information only as needed to operate the Platform:
- Between users of a transaction — a vendor receives the order details needed to fulfil a buyer's order; a property owner receives aggregated and transaction-level data for their own property through the dashboard.
- With service providers — including payment processors, hosting and communication providers, who process information on our behalf under contract.
- For legal reasons — where required by law, regulation, legal process or a lawful government request, or to protect our rights, users or the public.
- In a business transfer — if Do Chat is involved in a merger, acquisition or sale of assets, subject to this Policy.
We do not sell your personal information.
6. Service providers
We rely on third-party providers to deliver the Platform, including a payment processor to move funds, a messaging channel (such as WhatsApp) to take orders, cloud hosting to run the service, and a scheduling tool for demo bookings. These providers are permitted to use personal information only to provide their service to us and are bound by appropriate confidentiality and security obligations.
7. How long we keep it
We keep personal information only for as long as necessary for the purposes described in this Policy, including to meet legal, accounting and tax requirements. Transaction and financial records are typically retained for the period required by law. When information is no longer needed, we delete or de-identify it.
8. How we protect it
We maintain reasonable technical and organisational measures designed to protect personal information against loss, unauthorised access, alteration and disclosure, including encryption in transit, access controls and secure hosting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your rights
Subject to applicable law, you have the right to:
- access the personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your information, where we are not required to keep it;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a data-protection authority.
To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.
10. Cross-border transfers
Some of our service providers may process personal information outside the country where you are located. Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection consistent with applicable law.
11. Cookies
Our website uses cookies and similar technologies to operate the site, remember preferences and understand usage. You can control cookies through your browser settings. Disabling some cookies may affect how the site works.
12. Children
The Platform is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.
13. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new "last updated" date and, where changes are material, take reasonable steps to notify you.
14. Contact and complaints
For privacy questions or to exercise your rights, contact our information officer at privacy@dochat.co. If you are in South Africa and are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa).