1. Who we are
CapeLeads (Pty) Ltd is a South African company that operates the CapeLeads online marketplace at https://www.capeleads.co.za. We connect customers with verified service providers across the country.
Registered address: 31 Archers Green, Summer Greens, Cape Town, 7441, South Africa.
Data controller + Information Officer (POPIA): privacy@capeleads.co.za. For general enquiries: hello@capeleads.co.za.
2. What we collect
- Account information. Email, full name, mobile number, password (stored hashed, never plain), role (customer/provider/admin).
- Profile information (providers). Business name, bio, years in business, staff size, website, logo, portfolio photos.
- Service requests (customers). The category, description, location (address + optional precise coordinates if you opt in), budget, and timing of the work you need done.
- Communications. Provider responses to leads, reviews you leave, and the messages you exchange via the platform.
- Payment information. Top-up amounts, package chosen, transaction status. Card details are handled by Yoco; we never see or store them. EFT proof-of-payment files are stored on our servers until verified.
- Technical information. IP address, browser user agent, the pages you visit, time stamps. Used for security, abuse prevention, and product analytics.
3. Why we collect it
- To run the marketplace — match customers with providers.
- To verify accounts and prevent fraud.
- To send you notifications you'd expect (welcome emails, new responses on your lead, payment receipts).
- To resolve disputes and respond to reports of abuse or safety.
- To improve the platform — anonymised, aggregated analytics.
We will not use your personal information for any other purpose without your consent.
4. Who we share it with
We do not sell your personal information. Limited sharing happens only as follows:
- Other users on the platform, but only the minimum needed for the marketplace to function. A provider never sees your phone or email until you choose to contact them. A customer sees a provider's public profile and their response to a lead.
- Service providers we depend on: Yoco (payments), Resend (transactional email), Mapbox (address autocomplete), Railway (hosting). Each has its own privacy terms.
- Legal authorities when required by law (a court order, regulatory investigation, etc.).
5. How long we keep it
- Account data — for as long as your account is active. You can request deletion at any time.
- Financial transactions — retained for at least 5 years to comply with tax and audit requirements. Even when you delete your account, financial records are retained with all personal identifiers minimised.
- Audit logs — retained for the period configured in our system (typically 90 days), then deleted.
6. How we keep it safe
- HTTPS everywhere — your traffic is encrypted in transit.
- Passwords stored with industry-standard one-way hashing (bcrypt) — even our staff can't read them.
- Webhook signatures verified with HMAC to prevent spoofing.
- Role-based access control: only authorised admins access system settings; staff see operational data only.
- Regular dependency updates and security reviews on high-impact changes.
7. Your rights under POPIA
You have the right to:
- Know what personal information we hold about you.
- Correct or update inaccurate information.
- Have your information deleted, subject to retention requirements above.
- Withdraw consent for any non-essential use.
- Object to direct marketing.
- Lodge a complaint with the Information Regulator (South Africa) if you believe we've mishandled your data.
To exercise any of these rights, email hello@capeleads.co.za. We'll respond within 30 days.
8. Cookies + similar technologies
We use only the cookies and local-storage entries we need to run the site (session token, your preferences). We do not run third-party advertising trackers.
9. Children
CapeLeads is not aimed at people under 18. If you are a parent and become aware that your child has signed up, contact us and we'll remove the account.
10. Changes to this policy
We may update this policy as the platform evolves. Material changes will be communicated by email to active accounts at least 14 days before they take effect.
11. Contact us
Questions, concerns, or requests: hello@capeleads.co.za.