Privacy Policy

1. Introduction & Overview

Welcome to Dissafyt ("we", "our", "us"), operating the Dissafyt Platform and the Ace of Fyt Barbershop flagship studio in Cape Town, Western Cape, South Africa.

We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what personal data we collect, how we process it, the measures we take to safeguard it, and your rights under the Protection of Personal Information Act, 2013 (POPIA) of South Africa, the European Union General Data Protection Regulation (GDPR) where applicable, and Meta Platforms Inc. Developer & WhatsApp Business Policies.

By accessing our websites (https://www.dissafyt.com), using our client web applications, booking services, purchasing merchandise, or engaging with our official WhatsApp Business Concierge, you acknowledge that you have read and agree to this Privacy Policy.

2. Personal Information We Collect

We only collect personal information that is reasonably necessary to fulfill appointments, process orders, verify accounts, and deliver our services:

• Account & Contact Information: Full name, email address, international mobile telephone number (E.164), and encrypted authentication credentials.
• Barbershop Appointments & Preferences: Selected haircut or grooming service, assigned master barber, appointment date and time, appointment notes, attendance status, and membership tier.
• WhatsApp & Interactive Flow Data: Inbound messages, interactive button choices, WhatsApp Flow data exchanges (such as appointment selections, account details, feedback star ratings, and concierge support tickets), and temporary one-time password (OTP) verification tokens.
• Billing & Payment Records: Payment status, transaction reference numbers, order amounts, and payment timestamps. Note: All credit card, Instant EFT, SnapScan, and card machine transactions are processed directly by our PCI-DSS Level 1 certified payment gateway, PayFast (Pty) Ltd. We never store or transmit raw credit card numbers on our servers.
• Shipping & Delivery Details: Physical delivery address and recipient details for streetwear apparel orders.
• Technical & Usage Information: IP address, device type, browser characteristics, and non-sensitive server logs to detect fraud and ensure system reliability.

3. How We Use Your Information

We use your personal information strictly for legitimate commercial, operational, and customer-service purposes:

• Scheduling, managing, and confirming chair sessions with our master barbers.
• Sending automated WhatsApp booking confirmations, calendar updates, and 2-hour pre-appointment reminders.
• Providing instant self-service rescheduling and cancellation capabilities.
• Generating secure PayFast "Pay-Me" links for online settlement.
• Facilitating direct customer-to-barber concierge chats with Curtis Lee.
• Reviewing post-haircut feedback to maintain studio service excellence.
• Delivering e-commerce orders and processing warranty/returns.
• Preventing fraudulent bookings and unauthorized access to member accounts.

4. WhatsApp Messaging & Meta Cloud API Disclosure

Our WhatsApp customer service operates using the official Meta WhatsApp Cloud API and WhatsApp Business Platform:

• End-to-End & Payload Encryption: Data exchanged within native WhatsApp Flows is encrypted using military-grade RSA-OAEP (2048-bit) and AES-128-GCM encryption between Meta's infrastructure and our secure backend endpoint.
• Transactional & Service Messaging: We only message users who have initiated contact, scheduled an appointment, requested an OTP verification code, or explicitly opted in. We do not engage in unsolicited spam messaging.
• Opt-Out: You may opt out of WhatsApp notifications at any time by replying "STOP" in the WhatsApp conversation or by contacting our concierge.

5. Third-Party Service Providers & Data Processors

We do not sell, rent, or trade your personal information to third parties. We share data only with trusted infrastructure providers who are bound by strict confidentiality and data protection agreements:

6. Data Retention & Security Measures

We employ modern industry-standard security safeguards including TLS 1.3 transport encryption, AES-GCM data encryption, automated cryptographic audit trails, and strict PostgreSQL Row Level Security (RLS) policies.

We retain personal data only for as long as necessary to maintain your account, fulfill appointments, comply with financial audit obligations (South African SARS compliance), or until you request its deletion.

8. Contact Us & Information Officer

For any questions, concerns, or access requests regarding this Privacy Policy or our data handling practices, please contact: