Your Privacy,
Protected.

Bubbled Up (Pty) Ltd is committed to protecting your personal information in line with the Protection of Personal Information Act (POPIA), 4 of 2013. This policy explains what information we collect, how we use it, and your rights as a data subject.

1. What we collect

Your name, email, mobile number, vehicle details, booking history, and (for partners) South African ID number, banking details, and business documentation. Payment data is held in TradeSafe’s regulated escrow infrastructure — Bubbled Up does not store card numbers or bank passwords.

2. How we use it

To process your bookings, communicate booking updates, verify partners, and improve the platform. We never sell your data. We share necessary booking information with the car wash you’ve booked, and payment details with TradeSafe for escrow processing.

3. Who we share with

• Car wash partners — only the booking details necessary for them to fulfil your wash (your name, vehicle, time slot, contact number).
• TradeSafe — payment and KYC data needed for regulated escrow processing.
• SMS provider — your mobile number to deliver booking and pickup notifications.
• Law enforcement — only where compelled by a valid South African court order.

4. How long we keep it

Booking and transaction records are retained for 7 years to comply with South African tax and consumer protection law. You can request deletion of personal data not subject to that retention requirement at any time.

5. Your rights under POPIA

• Request a copy of the personal data we hold about you.
• Ask for inaccurate data to be corrected.
• Request deletion of data not subject to legal retention.
• Object to specific processing activities.
• Lodge a complaint with the Information Regulator.

To exercise any of these, email info@bubbledup.co.za. We respond to all requests within 30 days as required by POPIA.

6. Cookies & analytics

The bubbledup.co.za website uses essential cookies only — no third-party tracking, no advertising cookies. The mobile app uses anonymous device identifiers for crash reporting and to deliver push notifications. You can disable push notifications in your device settings at any time.

7. Security

We use HTTPS across all pages, encrypt sensitive fields at rest, and run our backend on infrastructure with enterprise-grade access controls. Your payment data never touches Bubbled Up servers — it lives only inside TradeSafe’s regulated environment.

8. Changes to this policy

If we make material changes we will notify you by email and update the “last updated” date above. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact us

Questions about your data, this policy, or POPIA in general? Email info@bubbledup.co.za or visit our contact page.

This is a working summary written in plain English. The full legal-form Privacy Policy will be published before the mobile app launch. The summary and the full policy will be aligned in substance — if you spot a difference, the full policy controls.