Privacy policy
Last updated: 27 September 2026
Waypoints ("we", "us", "our") operates the waypoints.co.za platform and WhatsApp booking service. This policy explains how we collect, use, store, and protect your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African law.
1. Who we are
Waypoints is a software platform that connects service providers (hairdressers, nail technicians, delivery businesses, and similar) with their clients via WhatsApp. We are the responsible party for the personal information we process.
Contact: hello@waypoints.co.za
2. Information we collect
From clients (end customers)
| Data | Purpose |
|---|---|
| Name | Identify you in bookings and messages |
| Phone number (WhatsApp) | Send booking confirmations, reminders, and notifications |
| Address and area | Route planning and travel-time estimation |
| GPS coordinates (derived from address) | Calculate driving distances and optimise routes |
| Booking and service history | Track appointments and past services |
| Payment references | Link payments to bookings (we do not store card numbers) |
| WhatsApp message content | Process bookings and respond to queries |
| Marketing consent status | Respect your opt-in/opt-out preferences |
From providers (business users)
| Data | Purpose |
|---|---|
| Business name, contact name, email, phone | Account administration |
| Business address and GPS coordinates | Route starting point and geocoding |
| Payment gateway credentials (PayFast, Ozow, Yoco) | Process client payments on your behalf |
| Banking details (for EFT payments) | Display to clients who choose to pay by EFT |
| Login credentials | Secure dashboard access (passwords are hashed, never stored in plain text) |
| Subscription and billing records | Manage your Waypoints Connect or Premium subscription |
| Social media links | Display on your public join page |
From website visitors
We use a session cookie for authentication and CSRF protection only. We do not use analytics trackers, advertising pixels, or third-party tracking cookies.
3. How we use your information
- Process and manage bookings, deliveries, and appointments
- Send transactional WhatsApp messages (confirmations, reminders, arrival updates)
- Send marketing notifications (only with your consent — you can opt out at any time)
- Optimise delivery routes and calculate travel times
- Process payments through your chosen payment gateway
- Provide customer support
- Manage provider subscriptions and billing
4. Legal basis for processing (POPIA)
We process personal information on the following grounds:
- Consent — marketing messages, client registration via the join form (explicit checkbox consent)
- Contract — processing bookings, payments, and provider subscriptions
- Legitimate interest — route optimisation, platform security, fraud prevention
5. Third parties we share data with
| Service | Data shared | Purpose |
|---|---|---|
| Twilio | Phone numbers, message content | WhatsApp messaging |
| PayFast | Client name, email, payment amount | Payment processing |
| Ozow | Client name, payment amount | Payment processing |
| Yoco | Payment amount, item description | Payment processing |
| Google Maps Platform | Addresses, GPS coordinates | Geocoding, route planning, distance calculation |
| OpenStreetMap / Nominatim | Addresses | Geocoding (fallback) |
| OSRM | GPS coordinates only | Travel time estimation |
| SMTP provider (e.g. Gmail) | Email address | Password reset emails |
Payment gateway credentials belong to each provider individually. Client payments go directly to the provider's own payment account — Waypoints does not receive, hold, or process client payment funds.
We do not sell your personal information to any third party.
6. Marketing and your choices
You can control marketing messages at any time:
- Reply STOP to any WhatsApp message to unsubscribe from that provider
- Reply STOP ALL to pause marketing from all providers on Waypoints
- Reply START to resubscribe
Transactional messages (booking confirmations, reminders, payment receipts) are not affected by marketing opt-outs — these are necessary to fulfil your bookings.
7. Data retention
- Client records — retained while you have an active relationship with a provider. Providers can delete individual client records, which removes associated bookings, orders, and service history.
- Payment records — retained indefinitely for financial record-keeping and dispute resolution, even after a client record is deleted (detached from personal identifiers).
- Message logs — retained for support and dispute resolution.
- Provider accounts — retained while your subscription is active. Contact us to request account deletion.
- Referral credits — expire after 6 months.
8. Data security
- All connections use HTTPS (enforced via HSTS)
- Passwords are hashed using industry-standard algorithms (never stored in plain text)
- Session cookies are HttpOnly, SameSite, and Secure
- CSRF protection on all forms
- Rate limiting on login, registration, and password reset endpoints
- Twilio webhook signature validation prevents spoofed messages
- Payment gateway callbacks are cryptographically verified
9. Your rights under POPIA
You have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct inaccurate information
- Deletion — request that we delete your personal information (subject to legal retention requirements)
- Objection — object to the processing of your information for marketing
- Complaint — lodge a complaint with the Information Regulator at inforegulator.org.za
To exercise any of these rights, contact us at hello@waypoints.co.za or WhatsApp +27 60 969 9033.
10. Children
Waypoints is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. We will notify providers of material changes via WhatsApp or email.
12. Contact
Email: hello@waypoints.co.za
WhatsApp: +27 60 969 9033