Privacy Policy

Effective date: 1 May 2026 · Compliant with POPIA (Act 4 of 2013)

1. Responsible Party

Quote Hub (Pty) Ltd is the responsible party as defined in the Protection of Personal Information Act, 4 of 2013 ("POPIA"). We determine the purpose and means of processing your personal information. Contact our Information Officer at privacy@quotehub.co.za for any data-related enquiries.

2. Personal Information We Collect

We collect: (a) Identity information — name, ID number (where required for verification), company registration number; (b) Contact information — email address, phone number, physical and business address; (c) Financial information — subscription payment history, PayFast transaction references (we do not store card details); (d) Transactional data — service requests, quotes submitted and received, invoice records; (e) Usage data — IP address, browser type, device information, platform activity logs; (f) Uploaded content — portfolio images, certification documents, BOQ files, and catalogue data.

3. Lawful Basis for Processing

We process your personal information on the following grounds: (a) Performance of contract — to provide and manage your account and services; (b) Legal obligation — to comply with tax, financial reporting, and regulatory requirements; (c) Legitimate interests — to improve the Platform, detect fraud, and ensure security; (d) Consent — for marketing communications, which you may withdraw at any time.

4. How We Use Your Information

Your information is used to: (a) create and manage your account; (b) process payments and subscription billing; (c) match service requests with appropriate providers using AI-assisted algorithms; (d) calculate trust and risk scores displayed to relevant parties; (e) send transactional notifications (quote alerts, invoice reminders, system messages); (f) comply with legal and regulatory obligations; (g) improve platform functionality and user experience.

5. Sharing of Personal Information

We share your information with: (a) Other platform users — your business name, description, and ratings are visible to consumers and funders as part of your public profile; (b) Service providers — cloud hosting (Neon/PostgreSQL), file storage (Amazon S3), payment processing (PayFast), email delivery (SMTP providers), and AI services (Google Gemini). All third-party processors are bound by data processing agreements; (c) Legal and regulatory authorities — where required by law or court order. We do not sell your personal information.

6. Data Retention

We retain personal information for as long as your account is active, plus a further period of 5 years for financial and transactional records as required by the Income Tax Act and the Financial Intelligence Centre Act. You may request deletion of non-legally-required data by contacting privacy@quotehub.co.za.

7. Security

We implement reasonable technical and organisational measures including TLS encryption in transit, encrypted storage, access controls, and regular security audits. However, no transmission over the internet is completely secure. In the event of a data breach that is likely to result in harm, we will notify affected data subjects and the Information Regulator as required under POPIA.

8. Your Rights Under POPIA

You have the right to: (a) access the personal information we hold about you; (b) correct inaccurate or incomplete information; (c) delete your personal information (subject to legal retention obligations); (d) object to processing for direct marketing; (e) lodge a complaint with the Information Regulator at enquiries@inforegulator.org.za. Requests can be submitted to privacy@quotehub.co.za.

9. Cookies and Tracking

We use session cookies essential for platform operation and authentication. We do not use third-party advertising cookies. Analytics are performed on aggregated, anonymised data to improve Platform functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the Platform after the effective date of changes constitutes acceptance.