Privacy & Cookie Policy
How we collect, use, and protect your information
Last Updated: 11 November 2025
Privacy Policy
1. Introduction
Vask (operated by Heyluno (Pty) Ltd) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our carwash booking platform.
This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa.
2. Key Definitions
"Personal Information" means information relating to an identifiable, living, natural person, as defined in POPIA.
"Platform" means the Vask website, mobile application, and related services.
"Processing" means any operation or activity concerning personal information.
"We," "Us," "Our" refers to Heyluno (Pty) Ltd, trading as Vask.
3. Information We Collect
We collect the following categories of information:
- Full name
- Email address
- Phone number
- Password (encrypted)
- Profile picture (optional)
- Vehicle make and model
- Registration number (optional)
- Vehicle type/size
- Service preferences
This information helps businesses provide appropriate services.
- Payment card details (tokenized)
- Billing address
- Transaction history
Payment card information is processed by secure third-party payment providers and is not stored on our servers in full.
- Booking history
- Service selections
- Business preferences
- Reviews and ratings
- Messages with businesses
- IP address
- Device type and operating system
- Browser type
- Access times and dates
- Pages viewed and features used
- Referring website
- General location (city, area)
- Precise location (with your permission via mobile app)
Location data helps you find nearby carwash businesses and is only collected with your explicit permission.
4. How We Collect Information
We collect information through:
- Direct provision when you register, create bookings, or contact support
- Automated technologies such as cookies and analytics tools
- Third-party services for payment processing and identity verification
- Communications with customer support
- Reviews and feedback you provide
5. How We Use Your Information
We use your personal information to:
- Create and manage your account
- Facilitate bookings between you and carwash businesses
- Process payments and manage billing
- Communicate about bookings, account updates, and service notifications
- Provide customer support
- Improve and personalize your experience
- Detect and prevent fraud and security threats
- Comply with legal obligations
- Send marketing communications (with your consent)
- Analyze platform usage to improve our services
6. Information Sharing
We share your information with:
- Carwash Businesses: We share necessary booking and contact information with businesses to fulfill your bookings (name, phone number, vehicle details, booking details)
- Payment Processors: Third-party payment providers who process transactions securely
- Service Providers: Third parties that help us operate the Platform (cloud hosting, analytics, customer support tools)
- Legal Authorities: When required by law, court order, or governmental regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties.
7. Data Security
We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of sensitive data in transit and at rest
- Secure payment processing through certified providers
- Access controls and authentication procedures
- Regular security assessments
- Staff training on data protection
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. Your Rights Under POPIA
You have the following rights:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your information (subject to legal retention requirements)
- Objection: Object to processing of your information
- Withdrawal of Consent: Withdraw consent for processing (where consent is the legal basis)
- Complaint: Lodge a complaint with the Information Regulator
To exercise these rights, contact us at privacy@vask.co.za.
9. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Retention periods are based on:
- Duration of your account with us
- Legal and regulatory requirements
- Statute of limitations for potential claims
- Legitimate business purposes
When you delete your account, we will delete or anonymize your information, except where we must retain it for legal purposes.
10. International Data Transfers
We may transfer your information to service providers located outside South Africa. When we do so, we ensure appropriate safeguards are in place, such as standard contractual clauses or ensuring the recipient country has adequate data protection laws.
11. Children's Privacy
Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
12. Marketing Communications
With your consent, we may send you marketing communications about our services, promotions, and updates. You can opt out at any time by:
- Clicking the unsubscribe link in our emails
- Adjusting your communication preferences in your account settings
- Contacting us at support@vask.co.za
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last Updated" date. Material changes will be notified by email or prominent notice on the Platform. Your continued use after changes constitutes acceptance.
14. Contact Information
For privacy-related inquiries or to exercise your POPIA rights, contact our Information Officer:
Email: privacy@vask.co.za
Phone: 012 055 5617
Address: Heyluno (Pty) Ltd, [Physical Address], South Africa
You may also lodge a complaint with the Information Regulator:
Website: https://inforegulator.org.za
Email: enquiries@inforegulator.org.za
Cookie Policy
1. What Are Cookies?
Cookies are small text files placed on your device when you visit our Platform. They help us recognize you, remember your preferences, and improve your experience. Cookies set by us are "first-party cookies," while those set by third parties are "third-party cookies."
2. Types of Cookies We Use
These cookies are necessary for the Platform to function and cannot be disabled. They enable core functionality like security, authentication, and session management.
Examples:
- Session cookies (session_id)
- Authentication cookies (auth_token)
- Security cookies
These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.
Examples:
- Language preferences
- Location settings
- Search history
These cookies help us understand how visitors use our Platform, allowing us to measure and improve performance. All data is aggregated and anonymous.
Examples:
- Google Analytics (_ga, _gid)
- Page view tracking
- Performance measurement
These cookies track your browsing activity to deliver relevant advertisements. They may be set by our advertising partners and do not store directly personal information.
Examples:
- Facebook Pixel (_fbp)
- Google Ads
- Remarketing cookies
3. Third-Party Services
We use third-party services that may set cookies, including:
- Google Analytics: To analyze user behavior and improve our Platform
- Payment Processors: To securely process transactions
- Social Media Platforms: For advertising and social sharing features
- Customer Support Tools: To provide support services
4. Managing Your Cookie Preferences
You can control cookies through:
- Cookie Banner: Accept or decline non-essential cookies when you first visit
- Cookie Settings: Access cookie preferences in your account settings or footer link
- Browser Settings: Configure your browser to block or delete cookies
Note: Blocking essential cookies may prevent certain Platform features from functioning properly.
5. Browser Cookie Management
Manage cookies in your browser:
6. Other Tracking Technologies
We may also use similar technologies including:
- Web Beacons: Small graphics that monitor Platform usage
- Pixels: Track user activities for analytics and advertising
- Local Storage: Browser storage that persists between sessions
7. Updates to Cookie Policy
We may update this Cookie Policy to reflect changes in technology or regulations. Updates will be posted with a revised "Last Updated" date. Continued use of the Platform constitutes acceptance of changes.
Acknowledgment
By using the Vask Platform, you acknowledge that you have read and understood this Privacy and Cookie Policy and agree to the collection, use, and disclosure of your information as described herein.