Privacy Policy

EasyJobCard is operated by Purple Toe Trading Pty Ltd, a company registered in South Africa ("we", "us", or "our"). We are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). This policy explains what data we collect, why we collect it, how we protect it, and your rights.

1. What personal information we collect

We collect information that you provide directly and information generated through your use of the service:

• Account information: first name, last name, email address, company name, and password (stored as a secure hash).
• Job card data: customer names, addresses, phone numbers, job descriptions, photos, and customer signatures.
• Billing information: subscription plan and payment status. Card details are processed directly by PayFast and are never stored on our servers.
• Usage data: pages visited, features used, browser type, and device type, collected via Google Analytics.
• Communications: any messages you send us via email.

2. Why we collect it (purpose)

3. How we store your data

Your data is stored in a secured database on a server located in the European Union. We apply the following technical and organisational measures:

• All data in transit is encrypted using TLS (HTTPS).
• Database access is restricted to authorised application processes only.
• Passwords are hashed using a one-way cryptographic function and are never stored in plain text.
• Server access is restricted by SSH key authentication.
• Regular automated backups are maintained.

4. Who has access to your data

We share your data only with the following third-party processors, strictly to operate the service:

• PayFast (payment processing) — receives billing and subscription information to process payments. PayFast Privacy Policy
• Resend (transactional email delivery) — receives email addresses to deliver system emails on our behalf. Resend Privacy Policy
• Google Analytics (usage analytics) — receives anonymised usage data if you have given cookie consent. Google Privacy Policy

We do not sell, rent, or share your personal information with any other third parties.

5. Data retention

• Job cards are automatically deleted after 90 days. This applies to all plans.
• Account data (your profile, company settings, and users) is retained for as long as your account is active.
• Upon account deletion, all associated data is permanently removed within 30 days.
• Payment records may be retained for up to 5 years to meet South African tax and accounting obligations.

6. Cookies and analytics

We use cookies and Google Analytics to understand how visitors use our site. When you first visit, you will be asked to accept or decline analytics cookies.

• If you accept, Google Analytics will collect anonymised usage data (pages visited, session duration, device type).
• If you decline, no analytics data is collected. The site will still function fully.
• You can change your preference at any time by clearing your browser's local storage or by contacting us.

We do not use advertising cookies, tracking pixels, or any third-party marketing tools.

7. Your rights under POPIA

As a data subject under POPIA, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request that inaccurate or incomplete information be corrected.
• Deletion — request that your personal information be deleted, subject to legal retention obligations.
• Objection — object to the processing of your personal information.
• Complaint — lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg.

To exercise any of these rights, please email us at info@easyjobcard.co.za. We will respond within 30 days.

8. Contact

For any privacy-related questions or requests, contact us at:
Purple Toe Trading Pty Ltd
Cape Town, South Africa
info@easyjobcard.co.za

9. Changes to this policy

We may update this policy from time to time. We will notify registered users by email of any material changes. The date at the top of this page reflects when the policy was last updated.