Privacy Policy

Who we are

canyoufixmyza (trading as CanYouFixMyZA) is a South African platform that connects customers with service providers. We are a provider-discovery and contact platform. We do not perform the work ourselves, and we do not provide medical diagnosis or advice.

canyoufixmyza is the responsible party (data controller) for the personal information described in this notice. We decide what information is collected, why it is collected and how it is protected.

Privacy enquiries: privacy@canyoufixmyza.co.za

Our legal basis for processing

Performance of a contract: to create and run your account, route your request to providers, manage quotes, messages and appointments, and to bill provider subscriptions.

Consent: marketing messages, optional communication channels and any optional information you choose to give us. You can withdraw consent at any time in your Privacy Centre.

Legitimate interests: keeping the platform secure, preventing fraud and abuse, auditing administrator access, resolving disputes and improving the service.

Legal obligation: tax, accounting, and responding to lawful requests from authorities or the Information Regulator.

What we collect and why

Customers: your name, phone number, WhatsApp number, email address, the suburb and metro where the work is needed, and a description of the problem. We collect this only to match you with suitable providers and to let you and the provider communicate about the job.

We ask for a suburb, not your exact street address. An exact address is only requested once you have chosen a provider and an appointment or site visit is being arranged.

We do not ask ordinary customers for a South African ID number.

Providers: business or personal details, contact details, service categories, service areas, and verification documents where applicable.

Who can see your information

Your contact details are never public. They do not appear on the website, in search engines or in any public directory.

When a request is routed, matched providers first see only the reference number, the service category, the general suburb, a summary of the problem and the urgency. Your full name, phone number, WhatsApp number and email are released only once a provider accepts the job.

Every release of customer contact details is recorded in a security audit log with the user, the action and the time.

When a job is closed, lost, completed or reassigned, the provider's access to your contact details is withdrawn again.

Platform administrators have controlled, permission-based access needed to run the service and resolve disputes. Administrator access is logged.

Health requests

Health-related requests are treated as especially sensitive. We only collect the healthcare service required, your general location, preferred timing and preferred contact method. Never send medical records, medication lists, diagnoses or clinical photographs through the initial request.

Health information is never shown publicly or shared with unrelated businesses.

Security requests

Never include alarm codes, gate codes, security passwords, camera blind spots, safe or key locations, or detailed access instructions in a request. Keep the description general, for example "CCTV needs repair" or "electric fence problem", and share sensitive detail privately with the provider you have chosen.

How we protect your information

The site runs entirely over HTTPS. Passwords are never stored in plain text. Access rules are enforced in the database itself, not only in the website, so one customer can never read another customer's information and a business can only read the leads assigned to it.

Uploaded files are kept in private storage and can only be opened through a temporary, expiring link by someone authorised to see them.

We never store full card numbers, CVV numbers or banking credentials. We keep only the payment reference, amount, date, invoice and status.

Payments and who we share information with

Subscription payments are processed by PayFast (Payfast (Pty) Ltd), our South African payment processor. PayFast receives the billing and card information you enter at checkout and processes it as a separate responsible party. canyoufixmyza never sees or stores your card number, CVV or banking credentials — we keep only the payment reference, amount, date and invoice record.

We also share personal information with: our service providers and subprocessors (hosting, database, email and analytics tooling) who process it only on our instructions; professional advisers such as our accountants and attorneys; and authorities where the law requires it.

Matched providers receive only the limited customer information described above, and only for as long as the job is open.

Consent and marketing

Submitting a request is consent for us to route it to suitable providers. Marketing messages are opt-in and can be switched off at any time in your Privacy Centre. We do not sell your information or reuse it for unrelated advertising.

Your POPIA rights

You may view and correct your personal information, request a copy of it, object to processing, withdraw consent, and request deletion of your account and eligible personal information. You can do all of this from the Privacy Centre in your account, and we will confirm the outcome.

You also have the right to complain to the Information Regulator of South Africa.

How long we keep information

We do not keep information forever. Closed leads, uploaded files, closed conversations, inactive accounts, verification documents and analytics each have a retention period set by the platform, after which the information is deleted or anonymised — subject to legal, accounting and operational requirements.

If something goes wrong

If a security compromise affects your personal information, we will investigate, contain it, and notify affected users and the Information Regulator as required by POPIA.