POPIA Compliance — Contractor Hub

Last updated: May 2026 | Governed by the Protection of Personal Information Act 4 of 2013 (POPIA) and the laws of the Republic of South Africa

1. Introduction

Contractor Hub is committed to protecting the personal information of all users, clients, and third parties in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This notice explains what personal information we collect, why we collect it, how it is processed, and what your rights are as a data subject.

By using Contractor Hub, you consent to the collection and processing of your personal information as described in this notice.

2. Responsible Party & Information Officer

The responsible party for the purposes of POPIA is the operator of Contractor Hub. Our designated Information Officer can be contacted as follows:

Platform	Contractor Hub
Information Officer	Justin Naude
Email	info@nextechdisplay.com
Country	Republic of South Africa

You may direct any POPIA-related queries, requests, or complaints to the Information Officer at the email address above.

3. Personal Information We Collect

We collect personal information that is necessary to deliver the services provided by Contractor Hub. This includes:

Identity information — full name, business name, trade type
Contact information — email address, phone number (including WhatsApp number), physical or service area address
Financial information — banking details (account holder, bank name, account number, branch code) used for invoice and payment reference purposes
Business information — invoice prefix, VAT number, CIDB grading, trade licence details, business registration number
Job and client records — job descriptions, client names and contact details, quotes, invoices, contracts, payslips, and related documents you create within the platform
Usage data — GPS trip logs, expense records, compliance checklists, and other data you enter into the platform
Technical data — IP address, browser type, and session data collected automatically for security and platform integrity purposes

4. Purpose of Processing

We process your personal information for the following lawful purposes:

To register and maintain your account on Contractor Hub
To enable the creation and delivery of invoices, quotes, contracts, payslips, and job records
To facilitate communication via email and WhatsApp, including sending documents to your clients on your behalf
To operate the SOS Emergency Dispatch network, including matching you to nearby emergency requests based on your registered location
To process subscription payments and manage your billing status
To provide platform support and respond to queries
To comply with applicable South African laws, including tax and financial record-keeping requirements
To improve platform features and user experience using aggregated, anonymised usage data

5. Lawful Basis for Processing

We process your personal information on the following grounds as set out in POPIA:

Consent — you provide consent at registration and may withdraw it at any time (subject to legal obligations)
Contractual necessity — processing is required to deliver the services you have signed up for
Legal obligation — we may be required to retain or disclose certain information to comply with South African law
Legitimate interest — to protect the security and integrity of the platform and its users

6. Sharing of Personal Information

We do not sell, rent, or trade your personal information. We may share it with:

Service providers acting as operators on our behalf — including hosting providers, email delivery services, WhatsApp API providers (GreenAPI), and payment processors. These parties are contractually bound to process your information only for the purposes we specify and in compliance with POPIA.
Your clients — when you generate and send invoices, quotes, or contracts, the relevant information is shared with the recipient you designate.
Regulatory or law enforcement authorities — where required by law or a valid court order.

We require all third parties to maintain appropriate technical and organisational safeguards over your personal information.

7. Cross-Border Transfers

Some of our service providers (such as cloud hosting and messaging infrastructure) may process data outside the Republic of South Africa. Where personal information is transferred across borders, we ensure that the recipient country or organisation provides an adequate level of protection, or we put in place appropriate contractual safeguards as required by section 72 of POPIA.

8. Data Retention

We retain your personal information for as long as your account is active, or as long as necessary to fulfil the purposes outlined in this notice, whichever is longer. Specific retention periods include:

Account and business data — retained for the duration of your subscription and for 5 years after account closure, in line with South African financial record-keeping requirements
Invoices, contracts, and financial records — retained for a minimum of 5 years as required by the South African Revenue Service (SARS) and related tax legislation
Technical and security logs — retained for up to 12 months

Upon expiry of the applicable retention period, personal information will be securely deleted or anonymised.

9. Security

We implement appropriate technical and organisational measures to protect personal information against loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

HTTPS encryption for all data in transit
Password hashing using industry-standard algorithms
Access controls limiting data access to authorised personnel only
Regular security reviews and vulnerability assessments

Important: While we take every reasonable precaution, no system is completely secure. You are responsible for keeping your login credentials confidential. Report any suspected security breach to info@nextechdisplay.com immediately.

10. Your Rights as a Data Subject

Under POPIA, you have the following rights in respect of your personal information:

Right to access — you may request a copy of the personal information we hold about you
Right to correction — you may request that inaccurate or incomplete information be corrected
Right to deletion — you may request erasure of your personal information, subject to our legal retention obligations
Right to object — you may object to the processing of your personal information on grounds relating to your particular situation
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal
Right to data portability — you may request your data in a structured, commonly used format

To exercise any of these rights, contact our Information Officer at info@nextechdisplay.com. We will respond within a reasonable time and no later than the period prescribed by POPIA.

11. Cookies and Tracking

Contractor Hub uses session cookies strictly necessary for platform functionality (authentication and session management). We do not use third-party advertising trackers or behavioural profiling cookies. No consent banner is required for strictly necessary cookies under South African law, but you may disable cookies in your browser settings — doing so will prevent you from logging in.

12. Children's Privacy

Contractor Hub is intended for use by adults operating a trade or business. We do not knowingly collect personal information from persons under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately so we can take appropriate action.

13. Complaints to the Information Regulator

If you believe we have processed your personal information unlawfully or in contravention of POPIA, you may lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
Complaints email: POPIAComplaints@inforegulator.org.za

We encourage you to contact us first so we can attempt to resolve your concern directly before escalating to the Regulator.

14. Changes to This Notice

We may update this POPIA Compliance Notice from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Contractor Hub after any changes constitutes your acceptance of the updated notice. Material changes will be communicated to registered users via email or an in-app notification.

15. Contact Us

For any questions, requests, or concerns regarding this notice or the processing of your personal information, please contact our Information Officer:

Email	info@nextechdisplay.com
Platform	Contractor Hub — https://nextechdisplay.com/finance