Who we are
weekend is a simple tool for keeping track of clients, follow-ups and invoices. This policy explains what personal information we handle and why, in line with South Africa's Protection of Personal Information Act 4 of 2013 (POPIA).
For the personal information described in this policy, the responsible party is:
- Trading as
- weekend
- Operated by
- [Registered business name; intended: Weekend Suite (Pty) Ltd, not yet registered] ([legal status, e.g. sole proprietor or (Pty) Ltd])
- Registration number
- [CIPC registration number, if registered]
- VAT number
- [VAT number, if VAT registered]
- Physical address
- [Street address in South Africa]
- [contact email]
- Telephone
- [contact phone number]
- Website
- [website address]
Our Information Officer is [Information Officer name], reachable at [contact email].
Two kinds of information
Information about you (visitors and account holders) is covered by this policy, and we are the responsible party.
Information about your clients is different. When you add your own clients to weekend, you are the responsible party and we act as your operator. We only process it to run the service for you, on your instructions, and we keep it secure. You are responsible for having a lawful reason to hold it and for telling your clients how you use it.
What we collect
On this website
Nothing you type. The website has no forms, no accounts, no analytics and no advertising or tracking cookies. Our hosting provider keeps standard server logs (IP address, browser type, page requested and time) for security and fault-finding.
When you have a weekend account
- Your name, email address and a password (stored only in scrambled, hashed form).
- Your business name and contact details, and your VAT number if you are VAT registered.
- Banking details, only if you choose to print them on your invoices.
- Your clients' names, WhatsApp numbers, notes and follow-up dates, and the invoices you create.
- Basic usage and error information needed to keep the service working.
What we deliberately do not collect
ID numbers, dates of birth, card numbers, your phone's contact list, your location, or anything else we do not need to run weekend. Please do not put special personal information (such as health, religion, race or a child's details) in notes fields.
Why we use it
| Purpose | Basis under POPIA |
|---|---|
| Creating and running your account, and providing the service | Performing our agreement with you |
| Keeping the service secure and preventing abuse | Our legitimate interests |
| Replying when you contact us | Your request, and our legitimate interests |
| Billing and keeping records the law requires | Legal obligation |
| Sending news or offers | Your consent only. We do not do this unless you opt in. |
We do not sell personal information and we do not use it for advertising.
Who we share it with
We use a small number of service providers (operators) to run weekend. Each may only use the information to provide its service to us.
| Provider | What it does | Where data is held |
|---|---|---|
| Vercel | Hosts the website and app | [confirm region] |
| Supabase | Database, sign-in and file storage | [confirm region] |
| Resend | Sends emails from weekend (for example password resets) | [confirm region] |
| Paystack | Card payments, only if and when we offer them | [confirm before launch] |
We may also disclose information if the law or a court order requires it, or to protect rights, safety or property.
weekend does not connect to WhatsApp's servers and does not send messages for you. When you tap Send, your phone or computer opens WhatsApp with your invoice and message ready, and you choose whether to send it. From that point WhatsApp and Meta handle the message under their own terms and privacy policy.
Information leaving South Africa
Some of our providers store or process information outside South Africa. We only use providers that protect it to a standard comparable to POPIA, through their contracts with us or the laws that apply to them, as section 72 of POPIA requires.
How long we keep it
We keep your information while your account is open. If you close it, we delete or anonymise your information within [number] days, unless the law requires us to keep something longer. You can export your clients and invoices before you close your account. Many tax laws expect you to keep invoices for five years, so please keep your own copy.
How we protect it
Information is encrypted in transit (HTTPS) and at rest by our providers, and access is restricted so that each account can only see its own data. No system is perfectly secure. If a breach puts your information at risk, we will tell the Information Regulator and the people affected as soon as reasonably possible, as POPIA requires.
Your rights
You can ask us to confirm what we hold about you, to see it, to correct it, to delete it, or to stop using it. You can withdraw consent at any time. Email [contact email] and we will respond within a reasonable time.
If you are unhappy with how we handle your information, you can complain to the Information Regulator (South Africa): inforegulator.org.za, complaints.IR@justice.gov.za.
Children
weekend is for adults running a business. It is not meant for anyone under 18 and we do not knowingly collect information from children.
Marketing
We only send marketing emails or messages if you have opted in, and every message will have a simple way to opt out.
Cookies
See our Cookie policy.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and, for account holders, let you know before the change takes effect.
Contact us
Questions about privacy: [contact email].