087 153 5250
Shalean Cleaning Services
Book now

Privacy Policy

Effective date: 20 July 2026

This notice explains how Shalean Cleaning Services("Shalean", "we", "us") processes personal information when you use shalean.co.za, our booking flows, customer support channels, and (where enabled) marketing social-publishing tools. We process personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA) and related South African requirements, subject to final confirmation of legal entity particulars by counsel.

1. Responsible party and contact

The responsible party for this processing is Shalean Cleaning Services, operating in Cape Town, South Africa. Privacy and data-subject requests: support@shalean.com. General enquiries: hello@shalean.co.za. You may also use our contact page. Registered company name, registration number, and physical address will be confirmed by counsel and updated here when finalized — until then, use the contacts above.

2. Categories of information we collect

3. Purpose and lawful justification

We use personal information to confirm bookings, assign cleaners, process payments, provide support, send service updates, operate and secure our platforms, and (for authorized administrators) publish marketing content to connected social accounts. We do not sell personal information. Lawful bases under POPIA typically include performance of a contract (bookings/payments), legitimate interests in operating a secure service, and consent or contract where an administrator connects a social account. Specific justifications for each processing activity should be confirmed with counsel.

4. Social-platform integrations

Where Meta (Facebook / Instagram) or other providers are enabled by Shalean, administrators may authorize Shalean to obtain Page or professional-account access tokens for publishing. Meta processes data under Meta's terms and privacy policy. Shalean stores connection credentials in encrypted form and uses them only for the authorized publishing purpose. Provider feature flags may keep integrations disabled until an explicit production release gate. Instructions for requesting deletion of social connection data are at /data-deletion.

5. Operators and service providers

We use operators to host and support the service, including website hosting and edge delivery (for example Vercel), database and authentication infrastructure (for example Supabase), payment processing (for example Paystack), and social platforms (for example Meta). Operators process information on our instructions for the purposes above.

6. Cross-border processing

Some operators and social platforms may process information outside South Africa (including in the United States or other jurisdictions). Where cross-border transfers occur, we rely on appropriate contractual and technical safeguards. Counsel should confirm the transfer mechanism inventory before Live Meta enablement.

7. Security safeguards

We apply administrative and technical measures appropriate to the risk, including HTTPS, access control for administrative functions, encryption of social OAuth tokens at rest, signature verification of Meta data-deletion callbacks, and redaction of tokens and provider identifiers from routine logs. No method of transmission or storage is completely secure.

8. Retention

Booking and payment-related records are retained as needed for accounting, dispute resolution, and legal compliance. Social connection credentials are retained while a connection remains active and are removed or invalidated after a verified deletion or disconnect. Publishing history and operational logs may be retained for security, audit, and operational integrity. Specific calendar retention periods are not yet defined as an organizational control — they must be set by operations with counsel and will be published here when adopted. We do not invent retention periods in this notice.

9. Your rights (data subjects)

Subject to POPIA, you may request access to your personal information, correction or deletion where appropriate, objection to certain processing, and restriction or complaint escalation. To exercise rights, email support@shalean.com with enough detail for us to verify your identity. Social-connection deletion via Meta is described on /data-deletion; booking or customer-record deletion is a separate authenticated process and is not performed automatically by Meta's callback.

10. Complaints and Information Regulator

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa). See inforegulator.org.za/complaints and POPIA complaints via POPIAComplaints@inforegulator.org.za. We ask that you contact us first so we can try to resolve the matter.

11. Cookies and sessions

We use cookies and similar technologies for essential session management (for example keeping you signed in), security (including OAuth CSRF state during social connect), and, where configured, analytics or marketing measurement. Essential cookies are required for the site to function. You can control cookies through your browser settings; blocking essential cookies may break booking or account features.

12. Changes to this policy

We may update this notice to reflect operational or legal changes. The effective date above will be revised when material changes are published. Continued use of the services after an update constitutes notice of the revised policy for website visitors; where POPIA requires further notice, we will take reasonably practicable steps.

See also our Terms of Service and data deletion instructions. This page is an engineering-aligned privacy notice for product and Meta App Dashboard use; it is not a substitute for qualified South African legal counsel.