Privacy Policy

Last updated: 14 August 2026 · QASHA DIGITAL (PTY) LTD (2026/490545/07)

1. Responsible party

QASHA DIGITAL (PTY) LTD trading as Qasha (“we”, “us”) is responsible for personal information processed through https://www.qasha.org.za under the Protection of Personal Information Act, 2013 (“POPIA”). Registration: 2026/490545/07. Based in South Africa — contact us by email (below).

2. Information Officer

Privacy requests (access, correction, deletion): contact our Information Officer at qashafindaplace@outlook.com or Help on the site. General contact: help@qasha.org.za (or your real help inbox).

3. What we collect

  • Account data: name, username, email, phone (optional), password (stored hashed), profile photo, home area (if you provide it), and sign-in via Google if you choose that option.
  • Listing & booking data: property addresses, photos, video, pricing, dates, application messages, and booking status.
  • Payment data: when Pay on Qasha is used, our payment partner (Ozow) processes card or EFT details. We receive payment status, amounts, and limited card metadata (for example last four digits) — not your full card number or CVV.
  • Communications: in-app messages and Help / support requests.
  • Technical data: IP address, browser type, session cookies, and server logs needed to run and secure the service.

4. Why we use it (lawful basis)

  • To create and manage your account and provide the Platform.
  • To facilitate listings, booking requests, messaging, and (where enabled) payments.
  • To send transactional emails (for example booking updates, password reset, welcome email).
  • To respond to support requests and protect users from fraud or abuse.
  • With your consent, for optional marketing (you may opt out at any time).
  • To comply with legal obligations and enforce our Terms.

5. Sharing

We share information between users where needed for bookings and messages (for example hosts see an applicant’s name and message). We do not sell personal information.

We use trusted service providers (“operators”) who process data on our instructions, including:

  • Render — application hosting (may include EU/US infrastructure).
  • Resend — transactional email delivery.
  • Cloudflare R2 — media storage for listing photos and video.
  • Google — Maps / Places autocomplete (if enabled) and optional Google sign-in.
  • Ozow — payment processing when Pay on Qasha is live.

We may also disclose information if required by law, court order, or to protect rights and safety.

6. Cross-border transfers

Some providers may process data outside South Africa. Where POPIA requires it, we take reasonable steps to ensure appropriate safeguards (for example contractual protections with operators).

7. Cookies & similar technologies

We use essential session cookies to keep you logged in and protect forms (CSRF). We do not use third-party advertising cookies on the Platform at this time. If that changes, we will update this policy.

8. Security & retention

We use reasonable technical and organisational measures (encryption in transit, access controls, hashed passwords). No system is perfectly secure. We keep data only as long as needed for the service, dispute resolution, and legal obligations, then delete or anonymise it where possible.

9. Your rights (POPIA)

You may request access to, correction of, or deletion of your personal information, and object to certain processing. Contact the Information Officer at qashafindaplace@outlook.com. We will respond within a reasonable time as POPIA requires.

You may lodge a complaint with the Information Regulator (South Africa): www.justice.gov.za/inforeg.

10. Children

The Platform is not directed at children under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided data.

11. Data breaches

If a breach is likely to cause harm, we will notify affected users and the Information Regulator as POPIA requires, and take steps to reduce harm.

12. Changes

We may update this Privacy Policy. The “last updated” date will change when we do. Material changes may be communicated via the Platform or email where appropriate.

Terms of Service · Legal & compliance