Privacy Policy

Last updated: March 26, 2026

1. Introduction

NoQue Pty Ltd ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our appointment booking platform.

This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Phone Number: Used for OTP authentication and SMS notifications
• South African ID Number: Optional, for identity verification
• Booking Details: Service type, location, time slot preferences
• Communication: Messages sent through our contact forms

2.2 Technical Information

We automatically collect certain information when you use our services:

• IP address and browser type
• Device information and operating system
• Usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• To facilitate appointment bookings
• To send booking confirmations and reminders
• To verify your identity
• To improve our services
• To comply with legal obligations
• To communicate with you about our services

4. Legal Basis for Processing

We process your personal information based on:

• Consent: When you provide consent to process your information
• Contract Performance: To fulfill our booking service contract with you
• Legal Obligation: To comply with South African laws and regulations
• Legitimate Interest: To improve our services and prevent fraud

5. Information Sharing

We share your information only with:

• Government Departments: The department where you booked an appointment
• Service Providers: SMS gateway providers for sending notifications
• Legal Authorities: When required by law or legal process

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• TLS 1.3 encryption for data in transit
• AES-256 encryption for data at rest
• Row-level security in our database
• Regular security audits and penetration testing
• Access controls and authentication

7. Data Retention

We retain your personal information for:

• Booking Records: 7 years (National Archives and Records Service requirements)
• Audit Logs: 5 years
• OTP Codes: Deleted after verification or 24 hours
• Anonymization: Bookings older than the configured retention period are anonymized automatically to remove personal identifiers.

8. Data Processing, Consent & Access

We capture your explicit consent during the booking flow and record the consent timestamp in booking metadata. You can request a copy of your data at any time:

• Use the in-product data export option (available via the booking widget) to download your bookings.
• Contact our Information Officer at privacy@noque.co.za for formal access or deletion requests.

9. Your Rights (POPIA)

Under POPIA, you have the right to:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Objection: Object to the processing of your information
• Data Portability: Receive your data in a structured format
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact our Information Officer at privacy@noque.co.za

10. Cookies

We use cookies and similar technologies to:

• Maintain your session
• Remember your preferences
• Analyze usage patterns
• Improve user experience

You can control cookies through your browser settings.

11. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Transfers

All personal information is stored and processed in South Africa. We do not transfer personal information outside of South Africa.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending email notifications for significant changes

14. Contact Information

Information Officer:
NoQue Pty Ltd
123 Innovation Drive, Sandton, Johannesburg, 2196
Email: privacy@noque.co.za
Phone: +27 (0)11 XXX XXXX

15. Complaints

If you have concerns about how we handle your personal information, you may:

1. Contact our Information Officer at privacy@noque.co.za
2. Lodge a complaint with the Information Regulator of South Africa:
   • Email: inforeg@justice.gov.za
   • Website: www.justice.gov.za/inforeg