Privacy policy
In short. Korrl is software that mobile pet grooming businesses use to take bookings, send WhatsApp messages about those bookings, and run their day. We collect what is needed to do that and nothing more. We do not sell personal information. If you booked a groom with a business that uses Korrl, that business decides how your information is used and we process it on their behalf.
This policy is written to meet the Protection of Personal Information Act, 4 of 2013 (POPIA). Questions go to privacy@korrl.co.za.
1. Who we are
Korrl (Pty) Ltd, registration number 2026/734118/07, George, Western Cape, South Africa ("Korrl", "we", "us"). Our Information Officer can be reached at privacy@korrl.co.za.
2. Two roles, two kinds of people
Korrl handles personal information in two different capacities, and your rights differ depending on which applies to you.
Grooming businesses and their staff
If you own or work for a grooming business that uses Korrl, we are the responsible party for your account information. We decide what we collect and why, and this policy governs it directly.
Pet owners who book with a business that uses Korrl
If you booked a groom through a business's Korrl booking page or received a WhatsApp message sent through Korrl, that business is the responsible party for your information and Korrl is its operator. We process your information only on the business's instructions and only to provide the service to them. For questions about how a business uses your information, or to exercise your rights, contact the business first. We will help them respond.
3. What we collect
| Who | What | Why |
|---|---|---|
| Business owners and staff | Name, email address, mobile number, password (stored hashed), role, the business's name, address, service area, services and prices, and the WhatsApp Business number connected to Korrl | To create and secure your account, run your calendar, send messages on your behalf, and notify you of new requests |
| Pet owners | Name, mobile number, the location or address where the groom happens, gate or access notes, your pets' names, breeds, sizes and care notes, the services and dates you asked for, and your replies to booking messages | So the business can accept your request, find you, groom your pet safely, and keep you informed |
| Pet owners, only with consent | A note that you agreed to be reminded when your pet is due for a groom | To send that reminder; you can stop it at any time |
| Everyone using the app or a booking page | Technical records such as IP address, browser type, device type, timestamps, and error reports | To keep the service working, secure, and fast |
We do not collect card numbers or bank details. When payments are added, they will be processed by a payment provider under its own terms, and Korrl will hold only the payment status and a reference.
The public website at korrl.co.za sets no cookies and collects nothing unless you email us.
4. WhatsApp messages
Korrl sends and receives WhatsApp messages using the WhatsApp Business Platform provided by Meta Platforms Ireland Limited. Messages are sent from the grooming business's own WhatsApp Business number, or from a number Korrl provides to that business. To do this, Korrl stores the messages sent and received through the platform, their delivery status, and your mobile number.
The first message about a booking is sent because you asked for the booking. Reminders about future grooms are sent only if you ticked the box asking for them, and every such message includes a way to stop them. Replying STOP to any message stops all non-essential messages from that business through Korrl.
Meta processes messages under its own privacy policy and may store data outside South Africa. Sending a message through WhatsApp therefore involves a transfer of your mobile number and message content to Meta, which is subject to binding data-protection commitments in its terms for the platform.
5. How we use information
- To provide the service: bookings, calendars, notifications, messages, and records.
- To secure accounts, prevent abuse, and investigate problems.
- To improve the product, using aggregated information that does not identify anyone.
- To meet legal obligations.
We do not sell personal information, and we do not use it for advertising.
6. Who we share it with
- The grooming business you booked with, which is the party you are dealing with.
- Meta Platforms, to send and receive WhatsApp messages, as described above.
- Service providers that host the software, deliver email, send push notifications, and report errors. Each is bound by contract to use information only to provide its service to us. We host the service in South Africa where a provider offers it.
- A payment provider chosen by the grooming business, once payments are offered.
- Authorities, where the law requires it.
7. Where information is kept and for how long
Korrl's database is hosted in South Africa. Some providers, including Meta, may process information outside South Africa under the safeguards described above.
We keep account information for as long as the account exists. When a business closes its account, we delete its customers, pets, bookings, and messages within 30 days, keeping only what the law requires us to keep, such as financial records. Pet owners can ask the business to delete their record at any time, and the business can do so in Korrl.
8. Security
Information is encrypted in transit and at rest. Access inside Korrl is restricted to the business that owns the data and to Korrl staff who need it to support that business, with every access recorded. Passwords are stored as hashes. Credentials for connected services are encrypted. If a breach affects you, we will notify you and the Information Regulator as POPIA requires.
9. Your rights
Under POPIA you may ask what personal information we hold about you, ask us to correct or delete it, object to processing, and withdraw consent you have given. If you booked through a business, send your request to that business or to us and we will make sure it reaches the right party. We respond within 30 days.
You may also complain to the Information Regulator of South Africa at inforegulator.org.za or complaints.IR@justice.gov.za.
10. Children
Korrl accounts are for businesses and their staff, who must be 18 or older. Booking pages are meant for adults booking on their own behalf. We do not knowingly collect information from children.
11. Changes to this policy
We will post changes here and update the date at the top. If a change affects how we use information already collected, we will tell account holders by email before it takes effect.
12. Contact
Korrl (Pty) Ltd, George, Western Cape. Information Officer: privacy@korrl.co.za.