Square 15 Facility Solutions (Pty) Ltd • Last Updated: 9 April 2026
This Privacy Policy complies with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and the General Data Protection Regulation (“GDPR”) where applicable.
Square 15 Facility Solutions (Pty) Ltd (“Square 15”, “we”, “us”)
Email: privacy@square15.co.za
Website: www.square15.co.za
Information Officer: The Managing Director
2.1 Personal Information Provided by You:
2.2 Information Collected Automatically:
2.3 Information from Third Parties:
We process your personal information for the following lawful purposes under POPIA Section 11:
3.1 Contract Performance (Section 11(1)(b)):
3.2 Legitimate Interest (Section 11(1)(f)):
3.3 Legal Obligation (Section 11(1)(c)):
3.4 Consent (Section 11(1)(a)):
4.1 Booking and Service Delivery: Your name, phone, and address are shared with the assigned Artisan for the duration of the booking. After completion, the Artisan no longer has access to your address.
4.2 WhatsApp Communications: When you book via WhatsApp, your phone number and messages are processed by our AI assistant (Lizzy). Conversations are stored securely for service quality and dispute resolution.
4.3 Voice Assistant: Lizzy (voice) uses real-time speech-to-text processing. Voice data is processed via LiveKit and OpenAI. We do not permanently store raw audio recordings. Transcripts may be retained for 90 days for quality assurance.
4.4 AI Photo Analysis: Before/after work photos may be analysed by AI for quality verification. Images are stored in Firebase Cloud Storage with encryption at rest.
4.5 Payment Processing: Payment card details are handled by PCI-DSS-compliant third parties (Ozow, PayGate). We store only tokenised references, never raw card numbers. Wallet transactions are logged in our secure database.
5.1 We share personal information only with:
5.2 We do NOT sell your personal information to third parties.
5.3 We do NOT share your data for unrelated marketing purposes.
7.1 All data transmitted is encrypted using TLS 1.2+.
7.2 Data at rest is encrypted using AES-256 via Google Firebase.
7.3 Access to production systems requires multi-factor authentication.
7.4 Regular security audits and penetration testing are conducted.
7.5 Staff access to personal data is restricted on a need-to-know basis.
7.6 We maintain incident response procedures and will notify affected data subjects within 72 hours of a confirmed breach, as required by POPIA Section 22.
As a data subject, you have the right to:
To exercise any of these rights, email privacy@square15.co.za or use Profile → Settings → Delete Account.
9.1 Our Platform is not intended for persons under 18 years of age.
9.2 We do not knowingly collect personal information from children.
9.3 If we become aware that a child’s data has been collected, we will delete it promptly.
10.1 Our website uses essential cookies for functionality.
10.2 Analytics cookies (Google Analytics) are used with anonymised IP addresses.
10.3 You can manage cookie preferences through your browser settings.
11.1 Your data may be processed in countries where our cloud providers operate (e.g., Google Cloud regions, OpenAI servers in the United States).
11.2 We ensure adequate protection through contractual safeguards and compliance with POPIA Section 72.
12.1 We may update this Policy from time to time. Material changes will be communicated via in-app notification.
12.2 The “Last Updated” date at the top reflects the most recent revision.
Information Regulator of South Africa
Email: inforeg@justice.gov.za
Website: https://inforegulator.org.za
Tel: 012 406 4818
Square 15 Facility Solutions (Pty) Ltd
Privacy Enquiries: privacy@square15.co.za
General Support: support@square15.co.za
Website: www.square15.co.za