Privacy policy
Last updated: [date] · Responsible party / data controller: [legal entity, address, Information Officer name and email]
This policy explains what personal information MyCraft collects, why, who can see it, and your rights under South Africa's Protection of Personal Information Act, 2013 (POPIA) and Botswana's Data Protection Act, 2024.
1. What we collect
- All users: name, email, mobile number, country, city/area, password (stored only as a one-way hash), and records of when you accepted our terms and verified your email.
- Tradespeople: SA ID or Botswana Omang number, trade, optional bio, referees (name, phone, relationship — please tell your referees you've shared their details), and optional certificates or evidence of work you upload.
- Activity: jobs you post or accept, status changes, ratings and reviews, dispute notes, reports you make, and security logs (IP address, login attempts).
2. Why we use it
To run the marketplace (matching, contact between parties, ratings), to keep the platform safe (fraud prevention, rate limiting, account lockout, moderation of reports and disputes), to send service emails (verification codes, password resets, job updates), and to meet legal obligations. We do not sell personal information.
3. Who can see what
| Information | Who can see it |
|---|---|
| Tradesperson name, trade, area, bio, ratings, reviews, jobs completed | Public (anyone) |
| Phone numbers | The other party on a job you've both agreed to, and admins |
| ID / Omang number, referees | You and MyCraft admins only |
| Certificates you upload | You and MyCraft admins only (not employers, not other tradespeople, not the public) |
| Dispute notes | The employer and tradesperson on that job, and admins |
| Reports | Admins only (the reported person is not told who reported them) |
Service providers that process data for us (hosting, email delivery, backups) are bound by contract. [List providers and the countries where data is stored — e.g. servers in South Africa.] Cross-border transfers between South Africa and Botswana or to providers abroad are made only with adequate safeguards as required by POPIA s72 and the Botswana Data Protection Act.
4. Your rights
Under POPIA and the Botswana Data Protection Act 2024 you may: ask what information we hold about you and get a copy; ask us to correct or delete it; object to processing or withdraw consent; and complain to the regulator. Contact our Information Officer at privacy@mycraftglobal.com [placeholder — confirm]. Regulators: Information Regulator (South Africa) — inforegulator.org.za; Information and Data Protection Commission (Botswana) — [contact details].
5. Security & retention
Passwords are hashed; uploads are stored outside the public web folder with random names; access is limited by role; connections use HTTPS. We keep account data while your account is active and for [X] months afterwards for legal and safety reasons, then delete or anonymise it. Backups are kept for [14] days.
6. Children
The platform is for people aged 18 and over.
7. Changes
We are launching in Botswana and South Africa. If we expand to other countries we will update this policy for their data protection laws. We will post updates here and notify you of material changes.