1. Who we are
SkipDrop is operated by BotAndBotty (Pty) Ltd, a private company incorporated in the Republic of South Africa ("SkipDrop", "we", "us"). This Privacy Policy explains how we collect, use, store, and share personal information in connection with the SkipDrop platform at skipdrop.co.za and related apps and APIs.
Under the Protection of Personal Information Act 4 of 2013 ("POPIA"):
- For operator accounts and staff who sign up to use SkipDrop, we are typically the Responsible Party.
- For end customers of a skip-hire business using SkipDrop (bookings, invoices, job history), that business is the Responsible Party, and SkipDrop is their Operator (service provider) processing information on their behalf under a written Data Processing Agreement.
Information Officer: Charl Lamprecht — bot@botandbotty.com.
2. What we collect
From operators and staff
- Business name, subdomain, contact name, cell number, and email.
- Business registration / VAT / banking details you choose to enter for invoicing.
- Team member profiles (name, cell, email, role).
- Usage and security logs needed to run and protect the Service (for example sign-in events, IP address used for legal acceptance evidence, audit events for sensitive actions).
From end customers (via an operator)
- Name, cell number, email (if provided), and delivery / site address.
- Booking details (skip size, waste type, dates, payment type).
- Invoice and payment records related to the booking.
- Optional marketing preference (only if you tick a separate consent box).
- Job photos or signatures captured in the field where the operator uses those features.
We practise data minimisation: we only ask for what is needed to quote, deliver, collect, invoice, and support the service. We do not require ID numbers for standard skip bookings.
3. Why we use it (purpose & lawful basis)
- Contract — to create and run your SkipDrop account, or to fulfil a skip booking you make with an operator.
- Legitimate interests — to secure the platform, prevent abuse, improve reliability, and keep operational records.
- Legal obligation — tax and financial record-keeping where applicable.
- Consent — for optional marketing messages (WhatsApp / email offers). Marketing is never bundled with booking acceptance; you may withdraw consent at any time by contacting the operator (or us, for platform marketing).
4. Who we share it with
We do not sell personal information. We share it only as needed to provide the Service:
- The operator and their authorised staff / drivers (for end-customer data).
- Sub-processors listed in section 5.
- Regulators, courts, or law enforcement where required by law.
5. Sub-processors & where data lives
- Supabase — database (eu-west-1 / Ireland).
- Vercel — application hosting (US, with global edge).
- Resend — transactional email (US).
- SMS Portal — SMS delivery (South Africa).
- PayFast — payment processing (South Africa). Card numbers are handled by PayFast; SkipDrop does not store full card details.
Cross-border transfers are made under POPIA section 72, with contractual safeguards providing an adequate level of protection.
6. How long we keep it
Booking, job, and invoice records are retained for five (5) years to meet South African tax and financial record-keeping needs, after which personal fields are anonymised while financial history may be kept in non-identifying form. Operator account data is kept for as long as the tenant is active and for a short wind-down period after termination (see the Terms of Service). Security and acceptance logs are kept as long as reasonably needed for audit and dispute purposes.
7. Security
We use encryption in transit (TLS), encryption at rest at the database provider, tenant isolation, OTP-only sign-in, rate limiting, and audit logging of sensitive actions. No method of transmission or storage is completely secure; please report suspected incidents to bot@botandbotty.com.
8. Your rights
Under POPIA you may request access to, correction of, or (subject to legal retention) deletion / anonymisation of personal information we hold about you.
- End customers — contact the skip-hire operator you booked with first. Operators can export or anonymise customer records from SkipDrop.
- Operators / staff — contact us at bot@botandbotty.com.
You may also lodge a complaint with the Information Regulator (South Africa).
9. Children
SkipDrop is a business operations platform and is not directed at children. Operators must not upload children's personal information unless they have their own lawful basis under POPIA.
10. Changes
Material changes to this Privacy Policy will be published with a new version number. Operators will be asked to accept the updated version before continuing to use the Service. The version shown above is the version you accept when you tick the legal checkbox at signup or in the acceptance gate.
11. Contact
BotAndBotty (Pty) Ltd · SkipDrop
Email: bot@botandbotty.com
Related documents: Terms of Service · Data Processing (Operator) Agreement
Version 2026-07-v1 — effective 19 July 2026.