Privacy Notice

1. Responsible party

Get Furnished is the responsible party for personal information processed through getfurnished.co.za. The service operates from Johannesburg, Gauteng, South Africa. Privacy enquiries and requests may be sent to getfurnishedza@gmail.com.

This notice applies to visitors, account holders, buyers, sellers, seller-verification applicants and people communicating with support.

2. Personal information we collect

Account and identity

• name, email address, cell number, password-protected account identifiers and authentication records;
• shop name and seller-verification status; and
• an identification document you voluntarily submit when applying for a verified-seller badge.

Listings and marketplace activity

• camera photographs, title, description, category, condition, price, suburb and delivery methods;
• saved items, searches, messages, support requests and moderation records;
• orders, timestamps, status history, inspection deadline, disputes, evidence, refunds and payout requests; and
• private pickup and delivery addresses and postal codes.

Payment and technical information

• payment references, amounts, currency, payment status, provider response and limited bank-payout details such as bank name, account holder and final four digits;
• delivery quote identifiers, route information and selected delivery method; and
• IP address, browser/device information, security events, server logs, session identifiers and essential local storage used to keep you signed in.

We do not intend to store full card details. When you add a payout account, the full account number is sent securely to the payment provider to create the payout recipient. Get Furnished does not store the full account number; it stores the provider reference and limited account details needed to display and administer payouts. No identity-document number is required to add a payout account.

3. Where information comes from

Most information comes directly from you when you register, create a listing, send a message, buy, sell, request delivery, upload verification evidence or contact support. We also receive transaction and risk results from Paystack, quote or delivery information from the provider you select, and technical/security information from our hosting, database and authentication services.

If another user supplies information about you in a dispute or report, we use it only where reasonably necessary to review the matter, protect the marketplace or comply with law.

4. Why and on what basis we process information

We process personal information to:

• create and secure your account;
• publish listings and operate search, saved items, shops and messages;
• verify payments, prevent multiple sales of one item and maintain transaction records;
• calculate delivery estimates or request live quotes and coordinate the chosen method;
• hold and release seller amounts, verify payout accounts and administer refunds;
• review seller identification, listings, fraud signals, disputes and safety concerns;
• send necessary account, message, order, security and service communications;
• improve reliability, troubleshoot errors and defend legal rights; and
• comply with tax, financial-crime, consumer-protection, information-access, court and regulatory duties.

Depending on the activity, we rely on your agreement with us, steps requested before entering a transaction, compliance with legal obligations, protection of legitimate interests in a safe and reliable marketplace, or consent where the law requires it. Providing core account and order information is voluntary, but without it we cannot create an account or complete the requested transaction. Seller ID verification is optional unless additional verification becomes reasonably necessary for a specific safety, fraud or legal reason.

5. What other users can see

A published listing may show the item photographs, title, description, condition, category, price, public suburb, shop name, verification badge and how long ago it was posted. Messages are visible only to conversation participants and authorised Get Furnished personnel where necessary for support, safety or dispute review.

6. Who we share information with

We share only what is reasonably necessary with:

• Supabase for authentication, database and private file storage;
• Vercel for website hosting, server functions, security and operational logs;
• Paystack for payment processing, transaction verification, refunds, bank verification and payouts;
• Uber Direct/Uber Connect, couriers, PAXI or another selected delivery partner for quotes and fulfilment;
• buyers and sellers involved in the same confirmed order;
• professional advisers, insurers or service providers under appropriate confidentiality and data-protection duties; and
• regulators, courts, payment networks, fraud-prevention bodies or law-enforcement authorities where permitted or required by law.

We do not sell personal information and do not currently use it for third-party behavioural advertising.

7. Payments, payouts and delivery providers

Payment and delivery providers act under their own legal and privacy terms for the services they provide. They may perform identity, fraud, sanctions, account-ownership or route checks. Never place passwords, card details, one-time PINs or full bank details in a listing or chat.

Get Furnished uses transaction references and signed delivery-quote records to prevent fee manipulation, verify the amount paid and ensure only one buyer can purchase a unique item.

8. Processing outside South Africa

Some technology and payment providers may process or back up information in other countries. Where personal information is transferred outside South Africa, we take reasonably practicable steps to use providers and arrangements that offer an adequate level of protection, binding safeguards or another lawful basis under POPIA.

9. How long we keep information

We retain information only for as long as reasonably needed for the purposes described above and any period required by South African law. Account and active listing information is generally kept while the account is open. Transaction, payout, refund, fraud, dispute and support records may be retained after an account closes to meet financial, consumer, security and legal obligations.

Expired listings and verification documents are deleted or restricted when no longer reasonably required, subject to unresolved orders, disputes, investigations, backups and lawful retention duties. Backup deletion may occur on a delayed cycle.

10. Security and information compromises

We use access controls, row-level database permissions, private document storage, signed delivery quotes, payment verification and limited display of banking details to reduce risk. Access to seller identification and administrative operations is restricted to authorised reviewers.

No online service can guarantee absolute security. If we have reasonable grounds to believe personal information was accessed or acquired by an unauthorised person, we will investigate and make notifications to affected people and the Information Regulator where POPIA requires it.

You should use a unique password, protect access to your email and phone, and report suspicious account activity immediately.

11. Your POPIA rights

Subject to POPIA and PAIA, you may ask us to:

• confirm whether we hold personal information about you and request access to it;
• correct or update inaccurate, incomplete, excessive or outdated information;
• delete or restrict information that we are not lawfully required or entitled to keep;
• object to certain processing or withdraw consent where processing depends on consent; and
• explain a decision or raise a complaint about our handling of your information.

Email your request to getfurnishedza@gmail.com. We may need to verify your identity before acting and may refuse or limit a request where the law permits or requires it—for example, to protect another person’s privacy, preserve an active dispute or retain statutory transaction records.

If you remain dissatisfied, you may lodge a complaint through the Information Regulator’s complaints service or email POPIAComplaints@inforegulator.org.za.

12. Children and automated decisions

Get Furnished is intended for adults aged 18 and over. We do not knowingly create accounts for children. If you believe a child supplied personal information, contact us so we can investigate and take appropriate action.

We do not currently make decisions that produce legal or similarly significant effects solely through automated processing. Payment, hosting and delivery providers may perform automated risk or fraud checks under their own terms. Important marketplace restrictions and payout reviews may be checked by an authorised person.

13. Changes and contact

We may update this notice when the service, providers or legal requirements change. We will update the effective date and draw attention to material changes where reasonably appropriate.

For privacy questions, access/correction requests or information-security reports, email getfurnishedza@gmail.com. Please do not send passwords, one-time PINs or full card/bank details by email.