POPIA Compliance Statement

Last Updated: June 2026

In accordance with the Protection of Personal Information Act, No. 4 of 2013 (POPIA) of South Africa, NailDesk is fully committed to protecting the privacy rights of our South African users, merchants, and their end-clients.

1. About NailDesk

NailDesk is developed, owned, and operated by a privately registered company in the Republic of South Africa, with headquarters in Midrand, Gauteng. The company operates in accordance with the Companies and Intellectual Property Commission (CIPC). As an organization subject to South African jurisdiction, we fully comply with POPIA requirements. Registration documentation and corporate details are available upon official request.

2. Core Principles of Data Processing

NailDesk functions as an Operator when processing automated client booking information on behalf of the beauty professionals utilizing our platform, and as a Responsible Party regarding our primary merchant accounts. We process all personal information under the following rules:

• Accountability: We ensure appropriate technical security measures are deployed across our microservices to prevent unauthorized access, loss, or degradation of personal identifying information (PII).
• Processing Limitation: Personal information is processed lawfully, minimally, and strictly with the implicit or explicit consent of the user during account setup and client booking actions.
• Purpose Specification: Data is only kept to execute the booking automation, system monitoring, and SaaS dashboard administration workflows.
• Information Quality: We provide user interfaces allowing merchants to update, correct, or delete incomplete or inaccurate client entries easily.

2. Security Safeguards

Our infrastructure applies secure API handshakes, tokenized authentication mechanisms, and isolated transactional state routing to guarantee that consumer phone numbers and data processed over the WhatsApp integration remain isolated and secure against data interception.

4. Your Rights Under POPIA

Under POPIA, you and your clients have the right to:

• Request access to confirmation of whether or not we hold your personal information.
• Object to the processing of personal information for unsolicited marketing or unauthorized avenues.
• Request that records be amended, corrected, or permanently destroyed.

5. Information Officer Contact

For matters regarding POPIA compliance, data access requests, or to reach out directly to our compliance oversight, please email: support@naildesk.co.za