Last updated: 2 October 2026
This page explains how Business Floor meets South Africa's Protection of Personal Information Act, 2013 (POPIA). It adds to our Privacy Policy, which describes in full what we collect, why, who we share it with and how long we keep it. Users in other countries are covered by the Privacy Policy and the data protection law where they live.
BISAPT (Pty) Ltd, which runs Business Floor, is the responsible party for the personal information processed on Business Floor. When a business uses Business Floor to handle its own customers' information (for example, quote requests or bookings it receives), that business is also responsible for how it uses that information.
Our Information Officer handles POPIA requests and concerns. Contact: support@businessfloor.app.
| Condition | How we meet it |
|---|---|
| Accountability | We keep an audit log of moderation and verification decisions, and of every time our team opens a verification document. |
| Processing limitation | We collect only what each feature needs, and process it because you agreed to it, to provide the service you asked for, to meet a legal duty, or for legitimate interests such as preventing fraud. Optional cookies are used only with your consent. |
| Purpose specification | Each kind of information has a stated purpose (Privacy Policy, sections 2 and 3), and is deleted when it's no longer needed: for example, verification documents 90 days after a decision, and CVs 180 days after an application. |
| Further processing limitation | We don't use information for purposes unrelated to why it was collected, and we don't sell it. |
| Information quality | You can correct your details and your business's details yourself at any time, and ask us to correct anything else. |
| Openness | This page, the Privacy Policy and the Cookie Policy explain our processing in plain language, and we tell you at the point of collection what we'll do (for example, before you upload verification documents). |
| Security safeguards | Encrypted connections, controlled access, private storage for documents with links that expire after minutes, and contracts requiring our service providers (operators) to protect information. |
| Data subject participation | You can ask for access to, correction of and deletion of your information, and delete your account yourself (section 5 below). |
We don't ask for special personal information (such as health, religion, race, biometric or criminal information). Please don't include it in posts, requests or documents unless it's needed. Business Floor isn't for children: you must be 18 or older, or have a parent's or guardian's permission.
Email support@businessfloor.app to make a request. We'll respond within 30 days and may ask you to confirm your identity first. Requests are free unless the law allows a fee, in which case we'll tell you before doing the work.
We only send marketing messages to people who agreed to receive them, or to our customers about similar Business Floor services. Every marketing message tells you how to stop receiving them. Receipts and account messages aren't marketing.
We use service providers to host, store, email, process payments and run AI features; the full list is in the Privacy Policy. They may only process information on our instructions and must keep it secure.
Some of these providers store or process information outside South Africa, including in the European Union and the United States. We transfer information only where the recipient is bound by law or by a contract to protect it to a standard substantially similar to POPIA, as section 72 of POPIA requires.
If we have reason to believe your personal information has been accessed or acquired by someone not authorised to, we'll notify the Information Regulator and you as soon as reasonably possible, as section 22 of POPIA requires, and tell you what we're doing about it.
Please contact us first, so we can try to put things right. You may also complain to the Information Regulator of South Africa at any time: inforegulator.org.za.
We'll update this page when our processing changes, and change the date at the top.