Privacy Policy.

Find At Home Network (Pty) Ltd, registration number 2026 / 040876 / 07, trading as Find At Home (“FAH”, “we”, “us” or “our”), is the responsible party for the processing described in this Policy.

This Policy applies when you visit our website, browse or contact a Listing, submit an enquiry, request a Listing, provide Listing information or verification material, accept a quotation, receive an invoice, purchase a service, communicate with us, or otherwise interact with FAH.

It does not govern the independent privacy practices of a listed Business, Institution or Professional, an external website, social-media platform, bank, telecommunications provider or other third party. It also does not automatically govern a website owned by one of our website-service clients; that client should provide its own privacy notice.

Information you or an authorised person gives us

• name, role, organisation, telephone number, WhatsApp number, email address and communication preferences;
• Listing information such as provider name, category, area, services, descriptions, address, opening hours, contact channels, website, Google Business Profile, photographs, video links and other authorised publication material;
• verification and authority information, including CIPC registration details, identity-verification material where applicable, authority to act, verification outcome and limited review notes;
• quotation, invoice, billing, EFT payment-reference and FAH service transaction-administration information;
• website-project content, domain, hosting, email, analytics, support and access information reasonably needed to provide an agreed service;
• for client Online Ordering Websites, product and catalogue information, order-notification settings, collection or delivery configuration, and customer/order information that FAH may technically process while hosting, maintaining, troubleshooting or supporting the Client's website;
• form responses, consent or acceptance records, complaints, correction requests, correspondence and call or meeting notes; and
• any other information you voluntarily provide that is relevant to your request.

Information from public or third-party sources

We may obtain current business contact or service information from public websites, public registers, Google Business Profiles, public social-media business pages, directories, referrals, authorised representatives or service providers. Where reasonably practicable, we record the source and review date. A provider may ask us to correct, claim or remove an unclaimed profile.

Information collected automatically

Our website and technical providers may process IP address, date and time, browser and device information, referring page, pages viewed, search or filter activity, approximate location derived from IP, cookie or consent choices, error logs, security events and performance data. We do not use this technical data to make decisions with legal or similarly significant effects about an individual.

A Listing is designed for public discovery. Information authorised for a Listing may be published on our website, included in internal search and filters, displayed in related or Featured areas where eligible, and indexed or cached by search engines. Public contact buttons may open telephone, email, WhatsApp, website, map or social-media services.

Administrative contact details, quotations, invoices, payment information, verification documents, private notes, form-submission evidence and account or system-access information are not automatically made public. A contact person may be different from the public contact shown on a Listing.

Where we create an Unclaimed Profile using lawfully available public business information, we use it to support local discovery, label the profile according to its status, provide a claim or correction route, and do not treat public availability as permission for unrelated electronic marketing. Search engines or third-party caches may retain an earlier copy for a period after we update or remove a page; we can request re-indexing but cannot control an independent cache.

The lawful ground depends on the context. Consent is not the only lawful ground under POPIA. Where we rely on consent, you may withdraw it without affecting processing that was lawful before withdrawal or processing supported by another lawful ground.

Browsing public pages is generally possible without giving us direct contact information. Supplying information through an enquiry, Listing, quotation, invoice or service process is usually voluntary; however, fields marked as required and information reasonably needed to verify authority, comply with law, invoice correctly or deliver the requested service must be supplied if you want us to complete that step.

If required information is missing or inaccurate, we may be unable to respond, verify authority, accept or publish a Listing, issue correct billing documents, begin or complete work, provide support, or meet a legal obligation. Marketing consent is optional and must not be bundled into a service request where it is not necessary.

Please do not send passwords, card PINs, online-banking credentials, full identity documents or special personal information unless we have specifically requested an approved, appropriate channel and explained why the information is needed.

Cookies and similar technologies are small files or identifiers used to make a website function, remember choices, understand performance and protect systems. Depending on the live configuration, our site may use:

• strictly necessary technologies for security, traffic delivery, form integrity, session functions and consent choices;
• preference technologies that remember settings selected by a visitor;
• analytics technologies, including Google Analytics 4 where enabled, to understand aggregated website use and improve pages; and
• embedded or external services such as Google Maps, YouTube privacy-enhanced embeds, WhatsApp or other linked platforms, which may receive technical data when content is loaded or a link is used.

Where consent is legally required, non-essential technology should be activated only after the required choice. If a cookie-preference control is available, you may use it to change your selection. You may also restrict or delete cookies through your browser, although essential functions may then work differently.

We do not sell, rent or trade personal information. We may disclose limited information where reasonably necessary and lawful to:

• hosting, cloud, backup, content-delivery, cybersecurity, website, WordPress/WooCommerce, form, analytics, search, email and technical-support providers;
• where a Client has separately enabled an applicable third-party service on its website, the Client's authorised courier, payment-gateway or other integration provider to the extent technically necessary for that integration;
• communications, productivity, invoicing and payment-administration providers, including WhatsApp/Meta, Zoho, email providers and financial institutions involved in EFT payments;
• authorised employees, contractors or advisers who need access for their work and are subject to appropriate confidentiality or data-protection duties;
• a Listing owner where you intentionally request contact or where a clearly described enquiry service routes your message to that provider;
• auditors, accountants, insurers, legal advisers, regulators, courts, law-enforcement bodies or public authorities where required or lawfully justified; and
• a successor or participant in a genuine restructuring, financing or transfer of the business, subject to lawful safeguards and use compatible with this Policy.

Service providers acting as operators should process information only for agreed purposes, maintain confidentiality and reasonable safeguards, and notify us of suspected unauthorised access as required by their contract and applicable law.

FAH is a discovery platform. When you click a call, email, WhatsApp, website, Google Business Profile, map, social-media or similar external link, you may provide information directly to the relevant Listing owner or third-party service. That recipient then processes the information under its own privacy practices and applicable law. FAH does not control an independent recipient's systems or policies.

Before contacting a provider, decide what information is necessary. Do not send identity documents, banking credentials, medical information or other sensitive material merely to request a quote. If a provider asks for excessive or suspicious information, stop and verify the request independently.

Listing Owners must have authority to supply and publish information about employees, representatives, clients, photographs, testimonials or other identifiable people. They remain responsible for giving any required notice and obtaining any required permission.

Some cloud, analytics, email, communications, productivity or technical service providers may process or store information outside South Africa, or make it accessible from another country. The privacy and security laws of that country may differ from South African law.

Where POPIA applies to a transfer, we seek to use an available lawful mechanism, such as a recipient subject to substantially similar protection, a binding agreement requiring adequate safeguards, your consent where appropriate, contractual necessity, or another basis permitted by section 72 of POPIA. We also seek to limit the information transferred to what is reasonably required for the service.

We retain personal information only for as long as reasonably needed for the purpose for which it was collected or subsequently processed, or while retention is required or permitted by law, contract, legitimate operational needs, dispute management or consent.

When we are no longer authorised to retain a record, we will delete, destroy or de-identify it as soon as reasonably practicable and in a manner appropriate to the medium. Deletion from live systems may not immediately remove a protected backup copy; the backup remains restricted until it is overwritten through the normal cycle.

We use reasonable technical and organisational safeguards appropriate to our size, systems, risks and the nature of the information. Measures may include encrypted web connections, Cloudflare security and traffic controls, restricted administrative access, authentication controls, software updates, backups, malware or abuse monitoring, controlled publication, data minimisation, safer document channels and service-provider safeguards.

No website, transmission or storage system is guaranteed completely secure. You are responsible for using safe devices and channels and for not sending unnecessary sensitive information.

If there are reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will assess and contain the incident and notify the Information Regulator and affected data subjects as soon as reasonably possible where POPIA requires, subject to lawful investigative limitations.

Operational communications about an enquiry, quote, invoice, Listing, renewal, security matter, service request or legal notice are not treated as optional marketing where they are necessary to administer the relationship.

For electronic direct marketing, we seek consent where required. POPIA may permit marketing of our own similar services to an existing customer where the contact details were obtained in the context of a sale and the customer received a simple, free opportunity to object when the details were collected and in each marketing communication.

• Marketing permission should be separate, optional and not preselected.
• We will not treat a general enquiry as blanket permission for unrelated marketing.
• Where POPIA allows a one-time request for consent, we will not repeat it after consent has been withheld.
• You may unsubscribe, reply STOP where appropriate, or email us at any time.
• We may keep a minimal suppression record so that we do not contact you again for the objected purpose.

Subject to POPIA, PAIA and other applicable law, and after adequate identity or authority verification, you may:

• ask whether we hold personal information about you;
• request access to the information and available details of categories of third parties who have had access;
• ask us to correct, update or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
• ask us to destroy or delete a record we are no longer authorised to retain;
• object, on reasonable grounds, to processing based on specified lawful grounds;
• withdraw consent where processing depends on consent;
• object at any time to direct marketing and use a free, simple unsubscribe method; and
• lodge a complaint with the Information Regulator or seek another remedy available by law.

Send a request to [email protected] with the subject POPIA Privacy Request. Explain what you want us to locate or change and include only the proof reasonably needed to verify your identity or authority. We may refuse, limit or charge for a request only where law permits and will explain the applicable reason.

FAH lists some schools, churches, care-related organisations and other institutions, but the platform is not intended to create accounts for children or collect learner, patient or beneficiary records. Do not submit a child's name, image, contact details or other personal information unless you are a competent person or otherwise lawfully authorised and the information is genuinely necessary for an agreed purpose.

We do not intentionally request health, biometric, criminal-behaviour, religious, political, union-membership, race or ethnic-origin information for ordinary directory use. An institution's publicly stated faith affiliation or services does not authorise submission of the beliefs or sensitive information of identifiable members.

If we learn that child or special personal information was supplied without an adequate lawful basis or is not necessary, we may restrict, remove or delete it and request further proof of authority.

When FAH designs, hosts, maintains or supports a Client's website or online presence, the Client will usually decide why and how its own visitor or customer information is collected and used and will ordinarily be the responsible party for that processing. Where FAH processes that information only to provide the agreed website service on the Client's documented instructions, FAH may act as an operator for the Client.

Information an Online Ordering Website may collect

Depending on the Client's configured checkout and fulfilment process, an Online Ordering Website may collect information such as a customer's name, telephone number, email address, order contents, quantities, order value, order number, collection choice, delivery address or delivery-area information, order notes and technical information needed to submit and administer the order.

The purpose of this information is primarily to allow the Client business to receive, communicate about, prepare, collect, deliver, fulfil, record and support the customer's order. The Client is responsible for ensuring that it collects only information reasonably needed for its lawful business purposes and gives customers an appropriate privacy notice.

FAH's technical access

Because FAH may host, maintain, back up, secure or troubleshoot a Client website, authorised FAH personnel or approved technical providers may have technical access to customer/order information where reasonably necessary to operate or support the service. Such access should be limited to the agreed purpose, restricted to authorised persons and handled with reasonable confidentiality and security safeguards.

FAH does not use a Client's customer/order information for FAH's own unrelated marketing merely because the information passes through or is stored in a website that FAH hosts or manages.

Courier and payment integrations

Standard Online Ordering uses Direct EFT / bank transfer, collection and/or basic local delivery setup. FAH does not apply for or manage the Client's courier or payment-gateway account. If the Client independently enables an approved third-party courier, payment gateway or other integration, information may be transmitted to that provider as required for the Client's chosen service. That provider's own privacy terms and the Client's privacy obligations will also apply.

Client responsibilities

Clients remain responsible for their own privacy notice, lawful forms and checkout fields, customer communications, marketing permissions, cookie choices where applicable, retention decisions, access by their staff, customer rights requests and other compliance measures appropriate to their business, products, audience and data.

The quotation, Website Service Agreement, technical scope or other written instructions may further define ownership, access, hosting, security responsibilities, incident notification, handover, retention and deletion. FAH may separately process Client contact, billing, support and project-administration information for FAH's own legitimate business and legal purposes; for that processing, FAH acts as the responsible party under this Policy.

We may update this Policy when our services, systems, providers, risks or legal duties materially change. The revised version and effective date will appear at the top of the page. Where a change materially affects an existing consent or relationship, we will provide additional notice or obtain a new choice where law requires.

Please first contact our Information Officer so that we can investigate and respond. You may also lodge a complaint with the Information Regulator if you believe your personal information has been processed contrary to POPIA.

This Policy should be read with our Terms & Platform Rules and PAIA Manual.