This Privacy Policy explains how XZONO (PTY) LTD (Registration No. 2026/739337/07) (“we”, “us”, “our”), trading as XZONO, a South African online local business directory and business software platform operated at xzono.com, collects and uses personal information.
The responsible party for this platform is XZONO (PTY) LTD (Registration No. 2026/739337/07). For privacy requests contact info@xzono.com. We process personal information in line with South Africa’s Protection of Personal Information Act (POPIA) and other applicable law.
1. Whose information we process
- Visitors to the public directory and marketing pages
- Clients who create a client portal account to discover and book businesses
- Business users (owners and staff using the business portal)
- People booked or recorded by a business on XZONO where that business enters their details
2. What we collect
Depending on how you use XZONO, we may collect:
- Identity and contact details (name, email, phone)
- Location preferences (for example suburb or city you search near)
- Account credentials (passwords stored as secure hashes — we do not store plain passwords)
- Booking and appointment information
- Business profile and listing information you publish
- Billing and subscription details (for example via PayFast)
- Device and security data (IP address, browser/user agent, login success or failure logs)
- Communications you send us
3. Why we use it
- Provide and secure the XZONO platform (accounts, bookings, business tools)
- Show relevant local businesses and improve discovery
- Process trials, subscriptions and payments
- Prevent abuse (spam signups, password guessing, fraud)
- Send transactional messages (verification links, password resets, booking-related notices)
- Comply with law and enforce our Terms
Where POPIA requires a lawful basis, we rely on contract (providing the service you asked for), legitimate interests (security and platform integrity), and consent where appropriate (for example certain cookies or marketing, if introduced later).
4. Who we share with
- Businesses you interact with on XZONO (for example the salon you book) — they are separately responsible for how they use client data under POPIA
- Service providers who help us run the platform (hosting, email delivery, payment processing such as PayFast) under appropriate arrangements
- Authorities when required by law
We do not sell your personal information.
5. Cookies
We use cookies and similar technologies as described in our Cookie Policy. Essential cookies are required for login and security.
6. Security
We use industry-reasonable measures including HTTPS, hashed passwords, account lockouts after failed logins, and access controls. No method of transmission or storage is 100% secure. See also our Security summary.
7. Retention
We keep information for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Unverified or abandoned signup attempts may be deleted or deactivated after a short period. Login security logs are kept for a limited time for abuse prevention.
8. Your rights (POPIA)
Subject to POPIA, you may request access to, correction of, or deletion of your personal information, or object to certain processing. Contact info@xzono.com. You may also lodge a complaint with the Information Regulator (South Africa).
9. Children
XZONO is aimed at adults. If you are under the age of majority in your province, use the platform only with a parent or guardian’s permission where required.
10. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do.