Who we are
These apps are operated by Collett Brothers Water (Pty) Ltd, an Oasis Water franchisee registered in South Africa.
- Registration number: 2020/086143/07
- VAT number: 4240255077
- 41 Meyer Street, Louis Trichardt, 0920
We are the responsible party for your personal information under the Protection of Personal Information Act, 2013 (POPIA). Questions about this policy go to privacy@oasiswater.net or +27 73 892 4944.
What we collect, and why
We only collect what we need to take your order, deliver it, invoice it, and support you afterwards.
- Your account — name, email address, phone number and a password. Passwords are hashed by our authentication provider; we never see them.
- Delivery addresses — street address, suburb, city, province, postal code, GPS coordinates, an optional landmark note, and an optional contact name and phone number for that address. We need the coordinates to work out which branch can deliver to you and what the delivery fee is.
- Location — if you tap “Use my current location” or drop a pin, we read your device’s GPS position at that moment to fill in the address. We do not track your location in the background. In the Oasis Driver app, the driver’s GPS position is recorded when a delivery is confirmed, as proof of delivery.
- Orders — the items and quantities you order, prices, whether you chose delivery or collection, the branch, your delivery PIN, any notes you add, and your order history.
- Payments — card details are entered directly into Payfast’s own secure payment form. Your card number never reaches Oasis systems and we never store it. We store the Payfast reference for each payment, and for subscriptions a Payfast token that lets us charge the same card monthly. That token cannot be used to reconstruct your card number.
- Business accounts — if you apply for a credit account we also collect your company name, registration number, VAT number, contact person and role, trade references, and the credit limit you request. Once approved we hold your customer code, credit limit and outstanding balance from our accounting system.
- Bottles and subscriptions — how many refillable bottles you hold, and if you subscribe, your plan, billing history and payment outcomes.
- Driver app only — driver name, branch, a push-notification token, cash amounts collected at the door, and notes on any bottle-count discrepancy.
Who we share it with
We do not sell your personal information, and we do not share it for advertising. We use these service providers to run the apps:
- Supabase — hosting, database and login. Your account and order data is stored here.
- Payfast (South Africa) — card payments and subscription billing.
- IQ Retail — our accounting and point-of-sale system, where invoices are raised against your order.
- Google — address autocomplete and maps when you enter a delivery address, and push-notification delivery for the Oasis Driver app.
- Resend — sending your order confirmations, invoices and account emails.
- Expo — delivering push notifications and app updates.
Some of these providers process data outside South Africa. We only use providers that offer protection comparable to what POPIA requires. We may also disclose information where the law requires it.
What we do not do
- We do not sell or rent your personal information.
- We do not use advertising networks or cross-app tracking, and the apps contain no advertising.
- We do not track your location in the background.
- These apps are not directed at children.
How long we keep it
We keep your account information for as long as your account is open. South African tax law (VAT Act § 55) and the Consumer Protection Act require us to retain transactional records for five years, so invoices, orders and payment records are kept for that period even after an account is closed — with your name and contact details removed where we can.
Your rights
Under POPIA you may ask us to show you what we hold about you, correct anything wrong, or delete your information. You can also object to how we use it.
If you are unhappy with how we have handled your information, you may complain to the Information Regulator of South Africa.
Security
Traffic between the apps and our servers is encrypted. Access to customer data is restricted to the Oasis staff who need it to serve you, and every request is checked against per-user access rules. No system is perfectly secure, so if you believe your account has been compromised, contact us immediately.
Changes to this policy
If we change how we handle your information we will update this page and change the date below. Material changes will be communicated in the app or by email.
Last updated: 1 August 2026