Privacy & Data Protection

This Privacy Policy explains how Want A Service collects, uses, and protects personal information in compliance with the California Consumer Privacy Act (CCPA), CPRA, COPPA, CAN-SPAM Act, and other applicable U.S. laws.

We collect:

• •Identifiers: name, email, phone, IP address
• •Commercial information: bookings, payments, transaction history
• •Internet activity: pages visited, clicks, session data
• •Geolocation: city and state for service matching
• •Communications: messages sent through the Platform
• •User content: reviews, ratings, profile photos

We use personal information to:

• •Provide and improve the Platform
• •Process bookings and payments
• •Send transactional and marketing emails (opt-out available)
• •Enforce Terms and prevent fraud
• •Comply with legal obligations

We do not sell your personal information. We share data only with:

• •Service providers operating parts of the Platform (hosting, payments, email)
• •Other users as necessary to facilitate a booking
• •Law enforcement when required by law

California residents have rights to: Know, Delete, Correct, Opt-Out of Sale, and Non-Discrimination. Submit requests to our Contact form (/contact).

We implement industry-standard safeguards. All payment data is handled by PCI-DSS compliant processors.

The Platform is not directed to children under 13. We do not knowingly collect data from children under 13.

Providers' listing information — including business name, description, services, photos, logos, address, contact details, and social media links — is publicly visible on the Platform. Reviews and ratings submitted by Clients are also public. Please do not publish personal information in your listing that you do not want publicly visible.

The Platform contains links to third-party websites, provider websites, social media pages, payment platforms, and other external resources. We are not responsible for the privacy practices, security, or content of those external sites. You should review the privacy policy of any website you visit via our Platform.

Want A Service is governed by the laws of the Republic of South Africa but is accessible globally. If you access the Platform from outside South Africa, you are responsible for ensuring your use complies with any local laws that apply to you.

Privacy requests: our Contact form (/contact)

This section applies to users located in the European Union (EU), European Economic Area (EEA), the United Kingdom, or Switzerland. Want A Service processes personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") and the UK Data Protection Act 2018.

We process your personal data under the following lawful bases:

• •Consent (Art. 6(1)(a)) — when you agree to receive marketing emails or enable optional features
• •Contractual necessity (Art. 6(1)(b)) — to provide bookings, payments, and marketplace services you have requested
• •Legal obligation (Art. 6(1)(c)) — to comply with tax, anti-fraud, and regulatory requirements
• •Legitimate interests (Art. 6(1)(f)) — to operate and improve the Platform, prevent abuse, and ensure security

For EU/UK users, we collect:

• •Identity data: name, email address, phone number
• •Booking data: service requests, addresses, messages between Client and Provider
• •Payment data: handled by PayPal; we do not store full card numbers
• •Usage data: IP address, browser type, pages visited
• •Profile data: photos, reviews, business description (for Providers)

As an EU/UK user, you have the following rights:

• •Right to Access (Art. 15) — request a copy of the personal data we hold about you
• •Right to Rectification (Art. 16) — correct inaccurate or incomplete data
• •Right to Erasure / 'Right to be Forgotten' (Art. 17) — request deletion of your personal data
• •Right to Restrict Processing (Art. 18) — limit how we use your data
• •Right to Data Portability (Art. 20) — receive your data in a structured, machine-readable format
• •Right to Object (Art. 21) — object to processing based on legitimate interests or for direct marketing
• •Right to Withdraw Consent (Art. 7(3)) — withdraw consent at any time without affecting prior processing
• •Right to Lodge a Complaint (Art. 77) — with your local Data Protection Authority

To exercise any of these rights, email our Contact form (/contact) with your request. We will verify your identity and respond within one month (extendable to three months for complex requests, as permitted by Article 12(3)).

As Want A Service operates primarily from the United States, your personal data may be transferred outside the EU/UK. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure appropriate safeguards for such transfers. We do not sell your personal data to third parties.

We retain personal data only as long as necessary for the purposes described in this policy:

• •Active accounts: for the duration of your account plus 30 days after deletion
• •Booking and payment records: up to 7 years for tax and regulatory compliance
• •Marketing consent data: until you withdraw consent or opt out
• •Dispute records: for the duration of the dispute plus 3 years

Want A Service does not use automated decision-making or profiling that produces legal or similarly significant effects on you. Listing approval and AI-extracted metadata are used solely to assist Providers in completing their profiles and do not determine eligibility for services.

For GDPR-related enquiries, contact our Data Protection team at our Contact form (/contact). If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (Data Protection Authority in your EU member state, or the ICO in the UK at www.ico.org.uk).

This section applies to users located in South Africa. Want A Service processes personal information in accordance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) ("POPIA").

Queries regarding the processing of personal information under POPIA may be directed to our Information Officer at our Contact form (/contact).

We process personal information only for the purposes set out in this Privacy Policy and only with a lawful basis — including the performance of a contract, compliance with a legal obligation, or your consent. You may withdraw consent at any time.

As a data subject in South Africa, you have the right to:

• •Be notified when your personal information is collected
• •Access and request a copy of your personal information
• •Request correction or deletion of inaccurate personal information
• •Object to the processing of your personal information
• •Lodge a complaint with the Information Regulator

We only send direct marketing communications with your consent, and you may opt out at any time using the unsubscribe link in any marketing email or by contacting our Contact form (/contact).

If you believe we have not handled your personal information in accordance with POPIA, you may lodge a complaint with the Information Regulator of South Africa at www.informationregulator.org.za.

We use cookies for authentication, preferences, and analytics. We do not sell personal information via cookies. California residents may manage cookie preferences via browser settings.

Essential (required for login/session), Functional (preferences), Analytics (anonymous usage data), Third-Party (payment processors).

Cookie enquiries: our Contact form (/contact)