Privacy policy and cookies

Last updated 29 September 2026. This policy explains how FixBook (fixbook.co.za) processes personal information under the Protection of Personal Information Act, 2013 (POPIA).

Who is responsible

FixBook is the responsible party. Our Information Officer can be reached at hello@fixbook.co.za or through the contact form.

What we collect and why

• Business listing information (business name, phone, address, opening hours, website, sometimes an email address). This is business contact information, compiled from public sources and from business owners, so that customers can find and contact the business. Each listing states its source. For sole traders this can be personal information: you can ask us to correct or remove it at any time.
• Call-out requests (your name, phone number and message). Sent to the business you chose so it can contact you, and stored so we can show delivery status and deal with abuse.
• Reviews (your name as you enter it, your rating and text). Your email address is used only to confirm the review and is stored as a one-way hash so we can enforce one review per person per business.
• Accounts for business owners (name, email, phone, password stored as a hash).
• Technical data. We count clicks on call and WhatsApp buttons per listing per day without recording who clicked. We store a salted hash of your IP address (not the address itself) to limit spam and abuse.

Who we share it with

Call-out requests go to the business you selected. We use email, hosting and security providers to run the service (including Cloudflare Turnstile to block spam). We do not sell personal information.

Your rights

You may ask what we hold about you, and ask us to correct or delete it, or object to processing. Use the correction and removal form. We unpublish listings and act on valid requests within 72 hours. You may also complain to the Information Regulator (South Africa).

Cookies

FixBook uses these categories of cookies:

• Essential. A session cookie when you sign in to an owner or admin account, and a cookie remembering your cookie choice (fb_consent). These are needed for the site to work.
• Analytics. If you choose "Accept all", we may load Google Analytics to understand how the site is used. It does not load unless you accept.
• Advertising. If you choose "Accept all", Google AdSense may show ads and set cookies for advertising and measurement. Ads do not load unless you accept.

You can change your choice at any time: open cookie settings.

Retention and security

We keep call-out requests for up to 12 months, then delete them. We keep audit and removal-request logs as long as needed to show we acted lawfully. Access to our systems is restricted, passwords are hashed and traffic is encrypted.

Changes

We will update this page when our practices change and show the new date at the top.