Privacy Policy
1. Who is responsible
This website is operated by Nexus Logic (Pty) Ltd (registration number 2026/756972/07), trading as Mi Service Provider. Nexus Logic (Pty) Ltd (trading as Mi Service Provider, registration number 2026/756972/07) is the "responsible party" for personal information processed through the website, as defined in the Protection of Personal Information Act 4 of 2013 ("POPIA"). This policy should be read with our POPIA Notice and Terms of Service.
2. What we collect
2.1 Website visitors
- Search choices (town and service) are processed in your browser to show results. We do not link them to your identity.
- Technical data such as IP address, browser and device type, pages viewed and the time of your visit. Our hosting and security provider processes this automatically to deliver the site and protect it from abuse, and we may use aggregated, anonymous statistics to improve the site.
2.2 When you contact or rate a provider
Browsing and searching the website is open to everyone. Before you tap a provider's WhatsApp button or "Rate my Service" for the first time, we ask for your email address and for your acceptance of our Terms of Service and this Privacy Policy. We use it only to keep ratings honest (one rating per business per email address every 7 days) and, only if you tick the box, to email you a weekly update about new service providers. It is never shown to providers or the public. We also keep it on your own device so you are only asked once. If you start on a computer and scan our QR code to continue on your phone, the QR code carries a random one-time code, never your details. It works once, expires after 15 minutes, and lets your phone fetch your details so you are not asked again.
Clicking a WhatsApp button opens your own WhatsApp app with a pre-written message to that provider. When you tap the button we record a job reference (for example MSP-7K4Q2), the provider, and the date and time, so that providers can see how many enquiries they receive. The reference is placed in your WhatsApp message. The conversation itself goes directly between you and the provider through WhatsApp; we do not receive, store or see your WhatsApp messages or your WhatsApp number.
We also keep the job reference on your own device (in your browser's storage) so that we can remind you to rate the business. It is removed from your device after 60 days.
2.3 When you rate a provider
Ratings are powered by Service Sense, a product of Nexus Logic (Pty) Ltd, the same company that operates Mi Service Provider. When you rate a provider we collect your answers to the rating questions, an optional comment, an optional first name, and your email address. If you contacted the provider through our WhatsApp button, the job reference is linked to your rating.
- Your email address is used to prevent fake ratings (for example, to stop a provider rating themselves, and to allow one rating per business per email address every 7 days). They are never shown to the provider and are never sent to the AI service mentioned below.
- To detect suspicious rating patterns we also store a random ID that your browser creates, and a scrambled (hashed) form of your internet connection address. We cannot read your actual address from it, and neither is ever shown to anyone.
- Your first name is never published and is never sent to the AI service.
- We also record technical information about the device and connection used, to detect suspicious rating patterns.
- Your star ratings count towards the provider's public score. Your answers and your comment are shared with the provider anonymously in their dashboard and monthly report, and your star score and comment may be shown on the website under the provider's "See reviews" – never with your name or number.
2.4 Service providers who advertise
Business trading name, contact person, WhatsApp number, website (if supplied), email, service area, industry and categories, logo, and the billing and payment records for your advertising package. When you apply and while you are listed, we also collect publicly available information about your business and its owners (such as CIPC records, court records, complaint platforms, online reviews and social media) to assess suitability. We do not store card numbers; payments are processed by Paystack. We keep a record of past listings, including ended ones, so that each business receives only one free trial per town. If you enter a Nexus Logic Agent code, we check it with Nexus Logic's agent programme and, each time you pay (or a payment is refunded), we send that programme your listing number, business name, the agent code, the payment reference, amount and date, so that the agent who referred you can be paid commission. Nexus Logic (Pty) Ltd runs both Mi Service Provider and the agent programme; no contact details are sent.
2.5 Information we do not want
We do not ask for, and ask you not to send us, special personal information (such as health, religious or political information, or criminal records) or identity numbers. Please do not include them in reviews.
3. Why we use it, and on what basis
| Purpose | Lawful basis under POPIA (section 11) |
|---|---|
| Displaying provider listings and contact buttons | Performance of the advertising agreement with the provider |
| Calculating provider scores from ratings | Your consent when you submit a rating, and our legitimate interest in running an honest rating platform |
| Sharing ratings and anonymous comments with the provider in their dashboard and monthly report | Your consent when you submit a rating |
| Preparing each provider's monthly report summary with an AI service (comments and figures only, without names or contact details) | Our legitimate interest in helping providers improve their service |
| Preventing fake ratings (email address, job reference where available, device and connection checks) | Our legitimate interest and that of customers and providers in reliable ratings |
| Billing, account management and support for providers | Performance of the agreement and our legal obligations (tax and company records) |
| Assessing applications, including public-record checks, and monitoring ratings | Your consent on the application form, performance of the agreement, and our legitimate interest in protecting users and our reputation |
| Security, fraud and fake-review prevention | Our legitimate interest and that of our users |
| Improving the website | Our legitimate interest, using aggregated or de-identified data where possible |
| Complying with law, court orders and regulators | Legal obligation |
We do not use personal information for automated decisions that have legal or similarly significant effects on you.
4. Direct marketing
We will only send electronic marketing to providers who are our customers about similar services, with an opt-out in every message, or to anyone who has given us their consent, as required by section 69 of POPIA. Customers only receive our weekly update about new service providers if they ticked the box asking for it; the box is never ticked for you. Every update includes a way to unsubscribe, and you can also opt out at any time by emailing us.
5. Who we share it with
We do not sell, rent or trade personal information. We share it only:
- Publicly on the website: provider business details and each provider's overall score, number of ratings and "would use again" percentage;
- With the provider you rated: your answers and comment, anonymously, in their dashboard and monthly report – never your email address or first name;
- With Anthropic (an AI service in the USA), which analyses rating figures and comments to draft each provider's monthly summary. We send no names, mobile numbers or other contact details;
- With operators who process it on our behalf under written agreements requiring confidentiality and security, such as our website hosting, security and email providers, and our bank or payment processor;
- When required by law, a court order or a regulator, or to protect our rights, users or the public.
6. Information sent outside South Africa
Some of our operators (for example, our hosting and content-delivery provider) store or process data on servers outside South Africa. We only use providers that are subject to laws, binding rules or agreements that give a level of protection substantially similar to POPIA, as required by section 72. Rating comments and figures (without names or contact details) are processed by Anthropic in the United States of America to draft the monthly provider summaries. WhatsApp is operated by Meta Platforms outside South Africa under its own privacy policy.
7. Cookies
The website does not use advertising or tracking cookies. Our hosting and security provider may set strictly necessary cookies to protect the site against attacks and bots. When you tap WhatsApp, the job reference is saved in your browser's storage on your device so we can remind you to rate the business; they are removed after 60 days, and you can clear them at any time by clearing your browser data. If you open the website through a link shared by a Nexus Logic Agent, the agent's code is saved in your browser's storage (until you open another agent's link or clear your browser data) so that it can be filled in if you apply to list your business; it identifies the agent, not you, it is not sent to us unless you submit an application with it, and you can remove it from the application form or clear it with your browser data. Agents who enter their own code in the Share box have it saved on their device so that the links they share include it. If we add analytics or other cookies in future, we will update this policy and ask for consent where required.
8. How long we keep it
- Provider account and listing information: for the duration of the advertising relationship and up to 12 months after it ends;
- Billing and financial records: 5 years, as required by tax and company law;
- Job references, ratings and comments: while the provider is listed and up to 12 months after the listing ends;
- Email addresses used for rating checks: 12 months from the rating; for the weekly update, until you unsubscribe;
- Server and security logs: as short a period as practical, normally no longer than 90 days.
After that, we delete or de-identify the information unless the law requires us to keep it longer.
9. Security
We take appropriate, reasonable technical and organisational measures to protect personal information, including encrypted (HTTPS) connections, access restricted to people who need it, and security protection at our hosting provider. No system is completely secure. If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.
10. Children
The website is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has submitted information, please contact us and we will delete it.
11. Your rights
You may ask us to confirm whether we hold your personal information, to give you access to it, to correct or delete it, or to stop processing it. You may withdraw consent you have given (this does not affect processing before withdrawal) and object to processing based on our legitimate interest. Details and the complaints process are in our POPIA Notice; requests for records under PAIA are covered in our PAIA Manual.
12. Changes
We may update this policy. The effective date above shows the current version. Material changes affecting providers will be communicated to them directly.
13. Contact
| Responsible party | Nexus Logic (Pty) Ltd, trading as Mi Service Provider (registration number 2026/756972/07) |
|---|---|
| Address | 4 Cherry Creek, Blanco, George |
| Information Officer | NW Hunt |
| Information Officer email | info@nexuslogic.co.za |
| Information Officer telephone | 081 354 4840 |
| General enquiries | info@miserviceprovider.co.za |