This Privacy Policy describes how Newday Technologies (Pty) Ltd collects, uses, and protects your personal information when you use TOCO. We are committed to full compliance with the Protection of Personal Information Act (POPIA).
Newday Technologies (Pty) Ltd ("we", "us", or "our") operates TOCO, a digital task marketplace platform. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, how long we keep it, and what your rights are. By using TOCO, you consent to the practices described in this policy.
Newday Technologies (Pty) Ltd has designated an Information Officer as required by POPIA. All privacy-related queries, access requests, and complaints may be directed to our Information Officer at: newdayb2b@gmail.com. We will respond to all privacy requests within 30 days as required by law.
We collect the following categories of personal information: (1) Identity information — your name, email address, and profile photo provided at registration or via Google OAuth; (2) Account information — your user type (individual or business), province, suburb, bio, and any profile details you choose to add; (3) Location information — GPS coordinates when you use the Near Me feature (only with your explicit permission), and the suburb and province you provide when posting a job; (4) Transaction information — job postings, applications, bid amounts, job status, and completion records; (5) Communication data — messages sent between users through the in-app chat; (6) Ratings and reviews — scores and comments left after job completion; (7) Technical data — device type, browser, IP address, and usage logs collected automatically for security and platform improvement purposes.
We collect and process your personal information for the following lawful purposes: (1) To provide the Platform — creating and managing your account, enabling job postings and applications, facilitating communication between Posters and Taskers; (2) To improve the Platform — analysing usage patterns, fixing bugs, and developing new features; (3) To ensure safety and security — detecting fraud, investigating disputes, and enforcing our Terms and Conditions; (4) To communicate with you — sending account confirmations, notifications, and platform-related updates; (5) Legal compliance — meeting our obligations under POPIA, the CPA, and any other applicable South African law. We do not use your personal information for automated decision-making or profiling beyond what is necessary to operate the Platform.
Your personal information is used solely to operate and improve TOCO. Specifically: your name and photo are displayed on your public profile and job listings; your location data is used to match you with nearby jobs or Taskers; your messages remain private between the users involved in a job; your ratings contribute to your public trust score visible to other users. We do not sell, rent, or trade your personal information to any third party. We do not use your information for advertising purposes.
We share limited personal information with trusted third-party service providers solely to operate the Platform: (1) Supabase — our database and authentication provider, which stores your account data and messages on secure servers; (2) Vercel — our hosting provider, which serves the Platform to your device; (3) Google — for OAuth sign-in and email delivery via Gmail SMTP; (4) OpenStreetMap Nominatim — for geocoding suburb and province data when you post a job (no personal identifiers are shared). All third-party providers are required to process your data only as instructed by us and in accordance with applicable data protection laws. We do not authorise any third party to use your data for their own purposes.
We retain your personal information for as long as your account is active or as necessary to provide the Platform. Specifically: account data is retained for the duration of your account and deleted within 30 days of account deletion; job and transaction records are retained for 3 years after completion for dispute resolution and legal compliance purposes; chat messages are retained for 12 months after job completion; ratings and reviews are retained indefinitely as part of the public trust system, but are anonymised if your account is deleted. You may request deletion of your personal information at any time by deleting your account through your profile settings or by contacting our Information Officer.
As a data subject under POPIA, you have the following rights: (1) Right of access — you may request a copy of the personal information we hold about you; (2) Right to correction — you may request that we correct inaccurate or incomplete information; (3) Right to deletion — you may request that we delete your personal information, subject to our legal retention obligations; (4) Right to object — you may object to the processing of your personal information in certain circumstances; (5) Right to lodge a complaint — if you believe we have violated POPIA, you may lodge a complaint with the Information Regulator of South Africa at inforeg@justice.gov.za. To exercise any of these rights, contact our Information Officer at newdayb2b@gmail.com.
Newday Technologies (Pty) Ltd implements reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), secure authentication (PKCE OAuth flow), and access controls on our database. However, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.
TOCO is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will delete the account and associated data immediately.
We may update this Privacy Policy from time to time. Where changes are material, we will notify you via the Platform or by email. Your continued use of TOCO after any update constitutes acceptance of the revised policy. The date of the most recent update is shown at the top of this page.
For any questions, access requests, or complaints regarding this Privacy Policy or the handling of your personal information, please contact our Information Officer at newdayb2b@gmail.com. If you are not satisfied with our response, you may escalate your complaint to the Information Regulator of South Africa: website: www.inforegulator.org.za, email: inforeg@justice.gov.za.
If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa.
🌐 www.inforegulator.org.za · ✉️ inforeg@justice.gov.za