Privacy policy

To create and fulfil a sale, Handover collects:

• Buyer and seller name, email address, and phone number
• Pickup and delivery addresses and contact numbers
• Item description, price, and parcel weight/size
• Transaction and payment status (the card/EFT details themselves are handled directly by TradeSafe — Handover never sees or stores them)
• Your email address, if you join the launch waitlist — used only to tell you when Handover opens, and never passed on
• Basic technical data from hosting logs (IP address, browser) used only for security and abuse prevention
• Which pages are viewed, and the website that referred you, so we can see what is useful and what isn’t. This is deliberately anonymous: no IP address, no device details and no name are stored against it, page addresses are recorded as route names rather than real links (so a payment link is never stored), and a referring site is reduced to its domain. A random identifier lets us tell one visit from several page views; your browser forgets it when you close the tab, and it cannot be linked to you or to a later visit.

Strictly to operate the marketplace: creating a sale, holding funds in escrow, arranging courier collection and delivery, verifying delivery with a one-time PIN, releasing payment, resolving disputes, and meeting our own legal and tax obligations. Handover doesn’t sell personal information, and doesn’t use it for advertising.

• TradeSafe — to hold and release payment.
• The Courier Guy, handling a given order — only the pickup/dropoff names, addresses, and phone numbers needed to collect and deliver that parcel (see courier terms).
• Supabase, our database and infrastructure provider, which stores this information on Handover’s behalf.
• An address lookup service, when you type an address into the collection or delivery field. Only the text you type is sent, so it can suggest matching South African addresses — never your name, contact details, or anything about the sale.
• Regulators or law enforcement, only where Handover is legally required to disclose it.

For as long as needed to complete the sale and resolve any dispute or claim, and afterwards for whatever period South African tax and consumer-protection law requires records to be kept. After that, it’s deleted.

Release PINs are never stored in plain text — only a salted, one-way hash, checked with a constant-time comparison and locked out after repeated wrong attempts. Payment credentials for accessing our database are server-only and never reach the browser. Traffic to the app is encrypted (HTTPS).

Under POPIA, you can ask Handover to:

• Tell you what personal information we hold about you
• Correct information that’s inaccurate or incomplete
• Delete information where there’s no lawful reason to keep it
• Restrict or object to certain processing
• Withdraw any consent you’ve given, at any time

To exercise any of these, contact us on the details below. You can also raise concerns with South Africa’s Information Regulator at inforegulator.org.za.

The responsible party for the personal information described here is Handover (Pty) Ltd, Gauteng, South Africa.

• Email gethandover@gmail.com
• Phone 072 299 6492

We aim to answer data requests within 30 days, as POPIA requires.