Data Protection Policy
How we protect and handle your personal information
Effective Date: 2026
Auto.co.za (Pty) Ltd (we, us, our) is committed to protecting your personal information and upholding your right to privacy. This Data Protection Policy outlines how we collect, process, store, and safeguard your data when you use our AI-powered car marketplace.
Purpose of This Policy
This policy aims to:
- Ensure compliance with the Protection of Personal Information Act (POPIA)
- Inform users of their rights and how we protect their data
- Define internal and external data handling responsibilities
- Maintain transparency, accountability, and security across all data activities
Scope
This policy applies to:
- All users of Auto.co.za, including private individuals, car dealers, and business partners
- All personal data processed through our platform, systems, apps, APIs, and customer support channels
- Employees, contractors, and service providers handling personal data on behalf of Auto.co.za
What Personal Data We Collect
We collect and process personal data such as:
- Full name, email address, contact number
- Location and province
- ID number (when required for verification)
- Car listing details and ownership info
- Messages, uploads, photos, and voice inputs
- Browsing activity and device metadata
- Financial or loan-related information (where applicable)
Why We Collect Your Data
We use your personal data for:
- Account creation, verification, and communication
- Creating and managing car listings
- AI-based services like valuation, smart listing, and buyer matching
- Connecting you with buyers, sellers, or financial service providers
- Fraud detection, risk prevention, and trust scoring
- Customer support and service optimization
- Complying with legal, regulatory, and audit obligations
Lawful Basis for Processing
We rely on one or more of the following lawful bases:
- Consent: You have given clear permission to process your data
- Contractual Necessity: Processing is required to fulfill a service
- Legal Obligation: We are legally required to collect or retain certain data
- Legitimate Interest: For platform security, fraud prevention, and business operations
How We Protect Your Data
We use technical and organisational measures, including:
- Access controls and secure login protocols
- Regular vulnerability assessments and security audits
- POPIA-compliant vendor agreements with third parties
- AI-powered fraud detection to prevent misuse and identity theft
Data Sharing and Transfers
We do not sell your personal data. We may share your data:
- With verified buyers or dealers for communication and transactions
- With trusted partners for financing, warranties, or support services
- With law enforcement or regulators when required by law
- With third-party service providers (e.g. cloud storage, analytics), under strict confidentiality agreements
If data is transferred outside South Africa, we ensure the destination has adequate protection as required by POPIA.
Data Retention
We retain personal data only as long as necessary:
- To deliver services and support
- To comply with legal and tax obligations
- For record-keeping and fraud prevention
Once data is no longer required, it is securely deleted or anonymized.
Your Rights Under POPIA
As a data subject, you have the right to:
- Access your personal data
- Correct or update inaccurate data
- Object to the processing of your data
- Withdraw consent (where applicable)
- Lodge a complaint with the Information Regulator of South Africa
To exercise your rights, contact us at privacy@auto.co.za
Contact Information
For privacy inquiries, data access, or policy questions:
- 📧 privacy@auto.co.za
- 📍 Auto.co.za (Pty) Ltd, Johannesburg, South Africa
- 📞 0800 000 123
Auto.co.za – Built with Intelligence. Secured with Integrity.