How we collect, use, and protect your personal information. Written in plain English. Compliant with the Protection of Personal Information Act 4 of 2013.
PROFITSAGE (PTY) LTD trading as HALA MOVE (“HALA MOVE”, “we”, “us”, “our”) is the responsible party for the personal information we process in connection with our platform. We are a private company registered in the Republic of South Africa (registration number 2025/087445/07) and operate from Durban, KwaZulu-Natal.
We are committed to protecting your personal information and to processing it responsibly, lawfully, and transparently. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have.
This policy applies to all users of halamove.co.za and the HALA MOVE mobile applications (Android and iOS), including customers who post jobs, drivers who bid for jobs, and fleet owners who manage vehicles on the platform. By using the HALA MOVE platform, you confirm that you have read and understood this policy.
Your data belongs to you. HALA MOVE does not sell personal information to any third party. We never have and we never will.
When you register on HALA MOVE, we collect your name and your South African mobile number or your email address. You sign in with a one-time PIN (OTP) sent to your mobile number, with your email address and a password, or, in the customer app, with Google or Apple. A password is stored only as a one-way hash, never as the password itself. If you sign in with Google or Apple, we receive your name, your email address if that service shares it, and the identifier that service gives your account. For Apple we also keep an encrypted token, used only to disconnect HALA MOVE from your Apple account if you delete your HALA MOVE account.
Drivers are required to provide additional information as part of the verification process. This includes your South African ID document number, a photograph of your SA ID document or smart card, your vehicle details (make, model, registration number), a photograph of your vehicle, a photograph of your driver’s licence, a photograph of your vehicle licence disc, a selfie, which we compare with the photograph the Department of Home Affairs holds for your ID number to confirm the identity is yours (and again at job pickups, to confirm the right driver has arrived), and your South African bank account details for receiving payouts.
The HALA MOVE driver app collects your GPS location while you are marked as “Online” and during active jobs. This data is used to show your location to customers on the live tracking map, to calculate estimated arrival times, and to maintain an audit trail for dispute resolution. During an active job it continues while the app is in the background, so the customer can follow the delivery, and your phone shows a notification for as long as it does. Location data is not collected when the app is closed or when you are marked “Offline”. It is not used for advertising and is not shared with any advertising network.
We collect records of every job completed on the platform, including pickup and dropoff addresses, item descriptions, job status updates with timestamps, photos taken at pickup and delivery, the accepted bid amount, the platform fee charged, and the payout made to the driver. This data is stored to support dispute resolution, to generate earnings summaries, and to provide customers with a record of their move history.
We collect basic device information including your device type, operating system version, and push notification token. The push notification token is used solely to send you job alerts, status updates, and platform notifications. It is not used for advertising.
When a driver completes registration we also record a device identifier supplied by the operating system — the Android ID on Android, or Apple’s identifier for vendor on iOS. It is a pseudonymous value that does not identify you personally and is not shared with anyone. We use it for one purpose only: to detect the same device being used to open several driver accounts, which is how payout fraud is attempted. It is not used for advertising, analytics or tracking you between apps, and it is not collected from customers.
When you use the HALA MOVE apps we record which screens and steps you reach and how long each step takes - for example “opened the posting screen”, “set a pickup address” or “tapped Pay” - and whether you used the in-app guide. We use this only to find where people get stuck and to make the apps easier to use. We never record what you type (addresses, item descriptions or messages) as part of it. These records stay with HALA MOVE: they are not sold, not shared with advertisers or analytics companies, and are deleted after 90 days.
In-app chat messages sent during active jobs are stored to support dispute resolution. Support tickets submitted to HALA MOVE are stored to track issue resolution. Communications data is retained for 90 days following job completion and then deleted.
We process your personal information on the following lawful bases under the Protection of Personal Information Act 4 of 2013 (POPIA):
Before you accept a driver’s bid, you can see the driver’s name, profile photo, vehicle type and photo, star rating, and number of completed jobs. You cannot see their phone number, their South African ID, or their home address. Once you accept a bid, the driver can see your name and your job pickup address. In-app chat allows communication without either party sharing personal phone numbers.
Drivers can see a customer’s name and pickup address only after their bid is accepted. They cannot see the customer’s personal phone number.
During a job, the customer, the driver or HALA MOVE can create a live trip link and send it to someone else, such as a family member or the person waiting at the drop-off. Anyone with the link can open it without the app and see on a map where the driver is, the driver’s first name, photo, vehicle and registration number, and the stops on the route. A link the customer creates also shows the pickup and drop-off addresses and, until the goods are loaded, the pickup PIN. A link the driver creates shows where the driver is, without the addresses as text. No link shows the driver’s phone number or surname, the price, or the customer’s details, and every link stops working 30 minutes after delivery.
A driver can agree to join a fleet owner’s or a business’s account on HALA MOVE. Only after the driver has agreed does that account see the driver’s jobs, delivery photos, earnings and last known position, and only for the time the driver is part of it.
We share transaction data with PayFast (PayFast (Pty) Ltd, a licensed South African payment service provider) to process customer payments and driver payouts. We share only the data necessary to complete the transaction. PayFast’s own privacy policy governs their use of this data.
HALA MOVE uses Supabase as its database and file storage provider. All data stored on Supabase is subject to Supabase’s security standards and data processing agreement. Driver documents and job photos are stored in encrypted Supabase storage buckets.
The HALA MOVE website (halamove.co.za) is hosted by Vercel (Vercel Inc.). We use Vercel Web Analytics to count page views: the page opened, the website that sent you, your approximate location (country, region and city), and your device type, operating system and browser. It sets no cookie and keeps no record that identifies you. A visit is recognised by a code made from the incoming request, which Vercel discards after 24 hours. Codes in personal links, such as a live trip link or an invitation link, are removed before a page view is counted, and only campaign tags are kept from the web address.
We use Twilio (Twilio Inc.) to deliver WhatsApp messages, and SMSPortal (SMSPortal (Pty) Ltd) and Twilio to deliver SMS messages. We share only your mobile number and the content of the message itself with each of them, and only for the purposes described in this policy: sending you one-time verification codes when you sign in, sending you notifications about your jobs and payments, and sending the occasional service message described under “Service Messages & Check-Ins” below.
WhatsApp messages are delivered through the WhatsApp Business Platform, which means Meta Platforms processes the message in transit in the same way it would any WhatsApp message. We never send your South African ID number, your bank details, or your job photographs over SMS or WhatsApp.
We may disclose your personal information to law enforcement, regulatory authorities, or other third parties where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of HALA MOVE, its users, or the public.
HALA MOVE does not sell, rent, license, or otherwise transfer personal information to any third party for marketing, advertising, or commercial purposes.
Because location data is particularly sensitive, we want to be clear about exactly how it works on the HALA MOVE platform.
South African ID numbers and bank account details are treated with the highest level of protection on the HALA MOVE platform.
From time to time HALA MOVE sends a short message about your own account. We call these check-ins. They are not advertising, we do not sell them to anyone, and they are never sent to people who do not hold a HALA MOVE account.
Every check-in is triggered by a fact about your account, never by a mailing list. Examples of what triggers one:
How they reach you. We send a check-in as a push notification wherever we can, because that costs you nothing and stays inside the app. We only fall back to SMS when we have no working push notification token for you.
Limits we hold ourselves to. You will receive at most one check-in in any seven-day period, counting every type of check-in together. They are only sent between 07:00 and 19:00 South African time. Every batch is read by a person at HALA MOVE before it is sent — nothing goes out automatically.
How to stop them. Any of the following works, and each one is permanent until you reverse it:
Opting out of check-ins does not stop the messages you need in order to use the service — one-time verification codes when you sign in, and notifications about a job you are actually part of, such as a driver being on the way or a payment being released. Those are part of the service itself, not check-ins.
This processing is carried out under section 69 of POPIA on the basis that you are an existing customer or driver, the messages concern the service you signed up for, and you are given a clear opportunity to object in every message we send.
When you send a request from our quote page or business page, we keep what you tell us (your name, your business name, your phone number, your email address and your answers about your deliveries or vehicles) and how you reached the page (the page, any campaign code in the link, and the name of the website that sent you). We use it only to answer your request and prepare a proposal.
The lawful basis is that you asked us to take steps before a possible contract (POPIA section 11(1)(b)). We keep an enquiry for 12 months from when you sent it or when we last worked on it, and then it is deleted automatically, unless it has become a customer account, in which case it is kept with that account’s records. You may ask us to delete it sooner at any time by writing to contact@halamove.co.za.
As a data subject under the Protection of Personal Information Act 4 of 2013 (POPIA), you have the following rights:
To exercise any of these rights, contact us at contact@halamove.co.za. We will respond within 30 days.
To contact the Information Regulator: inforeg.org.za
The HALA MOVE website (halamove.co.za) uses minimal cookies. Please see our Cookie Policy for full details of which cookies are used, their purpose, and how to manage them.
HALA MOVE does not use advertising cookies, tracking pixels, or any third-party marketing technology on its website or mobile applications.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data (name, phone number) | Duration of account + 3 years | Contractual and legal obligations |
| Driver ID number | Duration of account + 5 years | Legal compliance, fraud prevention |
| Bank account details | Duration of account + 5 years | Financial record-keeping obligations |
| Job and transaction records | 5 years from job date | Financial and legal record-keeping |
| GPS location history | 30 days | Dispute resolution, then deleted |
| Delivery and pickup photos | 90 days | Dispute resolution, then deleted |
| In-app chat messages | 90 days | Dispute resolution, then deleted |
| Device data and push tokens | Duration of account | Platform operation |
| SMS delivery reports and replies | 90 days | Proving a message arrived, then deleted |
| Business enquiries (quote and business page forms) | 12 months from receipt or last update | Answering your request, then deleted automatically (kept with the account if you become a customer) |
| Driver documents (ID, driver’s licence, licence disc, vehicle photo, selfie) | Duration of active driver account | Ongoing verification |
If you have any questions about this Privacy Policy or about how HALA MOVE processes your personal information, please contact us:
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa:
We may update this Privacy Policy from time to time as the platform evolves and as legal requirements change. When we make material changes, we will notify registered users by in-app notification and by posting a prominent notice on halamove.co.za at least 14 days before the changes take effect.
Your continued use of the HALA MOVE platform after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you may close your account by contacting us at contact@halamove.co.za.
This policy was last updated in November 2026.