Privacy notice (POPIA)

Pure Basket Co (Pty) Ltd runs FreshKept, CleanKept and HomeKept. We are the responsible party for account holders' information (the business owner or household who signs up). For the records an account holder keeps about their own staff, helper or gardener, the account holder is the responsible party and we process that information for them, as their operator.

What we collect:

• Account holders: name, email, phone number, business or household name and address (suburb only for households), and billing details from Paystack.
• Staff, helpers and gardeners: first name, a 4-digit PIN (stored scrambled, never readable), and what they record: checks, cleaning jobs, clock-in and clock-out times, jobs ticked off, notes and "We need…" items.
• Visitors who report a bathroom problem: only the problem chosen and the time. We don't ask who they are.
• Phones that turn on alerts: a technical address used to deliver the alerts. No location, contacts or photos.
• Invite links: who invited whom, and, to stop misuse, a card "fingerprint" supplied by Paystack that shows whether two payments used the same card. We never see or store card numbers.

What we don't collect: no location tracking, no photos, no face or fingerprint scans.

Why: to run the service, produce reports for the account holder, send the alerts they ask for, run the invite-a-friend rewards, and bill the subscription. We do not sell information or use it for advertising.

Who can see it: the account holder sees everything in their account. Staff see their own checks and lists. In HomeKept, notes and the "We need…" list are shared by everyone in that household's account. Our own staff only look at an account to give support or fix a problem.

Where it is kept: on secure cloud servers in Germany (European Union), which has data protection law at least as strong as POPIA. Card payments are handled by Paystack (part of Stripe); we never see or store card details.

How long: records (checks, cleaning, clock-in times and HomeKept lists) are kept while your account is open and for 3 years after it closes, so you can still show them to an auditor or inspector. R638 requires production and distribution records to be kept for at least 6 months after a product’s shelf life; 3 years covers that for most products with a year to spare. You can download all your records at any time. Payment records are kept for 5 years, as tax law requires. After that, records are deleted.

Your rights: you can ask to see, correct or delete your personal information, or complain to the Information Regulator (inforegulator.org.za). Contact: purebasketco@gmail.com.