Privacy Policy — Ride Protect SA

1. Introduction

Ride Protect SA ("Ride Protect", "we", "us" or "our") respects your right to privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share and safeguard your personal information when you use our website, mobile applications and insurance services (collectively, the "Services").

This Policy is issued in accordance with the Protection of Personal Information Act, 2013 (Act 4 of 2013) ("POPIA"), the Electronic Communications and Transactions Act, 2002 ("ECTA"), the Consumer Protection Act, 2008 ("CPA") and other applicable South African laws.

2. Responsible Party

Ride Protect SA is the Responsible Party (data controller) for the processing of your personal information. You can contact our Information Officer at privacy@rideprotect.co.za.

3. Information We Collect

We may collect and process the following categories of personal information:

Identity information (full name, ID or passport number, date of birth, gender).
Contact details (physical address, postal address, email, mobile number).
Vehicle information (make, model, year, engine size, VIN, registration number).
Riding and delivery information (platform/s used, areas serviced, hours, experience).
Driver's licence and PrDP details.
Financial information (banking details, payment history, debit order mandates).
Claims information, including incident reports, photographs, police case numbers and medical information where relevant.
Technical information (IP address, device, browser, app version, location data where you have enabled it).
Communication records (emails, calls, in-app messages and chat transcripts).

4. How We Collect Information

We collect personal information:

Directly from you when you request a quote, take out a policy, submit a claim or contact us.
Automatically through our website and apps (cookies, analytics, device data).
From third parties such as credit bureaus, fraud-prevention databases, the SAPS, the eNaTIS vehicle register, healthcare providers, repairers, assessors and your delivery platform/s, where lawful.

5. Purpose of Processing

We process your personal information to:

Assess risk, underwrite policies and calculate premiums.
Issue, administer, renew and cancel insurance policies.
Process and pay claims and recoveries.
Verify your identity and prevent fraud, money laundering and financial crime.
Comply with our legal and regulatory obligations (including FAIS, FICA and POPIA).
Communicate with you about your policy, claims and our Services.
Improve our products, customer experience and risk models.
Market additional products and services where you have consented or where the law permits.

6. Legal Basis for Processing

We rely on one or more of the following lawful bases under POPIA:

The conclusion or performance of a contract with you.
Compliance with a legal obligation.
Protection of your legitimate interests or those of a third party.
Pursuit of our legitimate interests, balanced against your rights.
Your consent, which you may withdraw at any time.

7. Sharing of Personal Information

We may share personal information with insurers, reinsurers, underwriting managers, brokers, claims assessors, panel-beaters, medical providers, attorneys, regulators, the SAPS, credit bureaus, fraud-prevention services, payment processors and our technology service providers. We require all third parties to keep your information confidential and to process it only for the agreed purpose.

8. Cross-Border Transfers

Some of our service providers process personal information outside South Africa. Where this happens we ensure that the receiving country provides an adequate level of protection or that appropriate safeguards (such as contractual protections) are in place, as required by section 72 of POPIA.

9. Security Safeguards

We implement reasonable technical and organisational measures to safeguard your personal information against loss, damage, unauthorised access, alteration or disclosure, including encryption in transit, access controls, audit logging and staff confidentiality undertakings. In the event of a security compromise, we will notify you and the Information Regulator as required by section 22 of POPIA.

10. Retention of Information

We retain personal information only for as long as is necessary to fulfil the purposes set out in this Policy, or for the retention periods required by law (including FICA, FAIS, the Long-Term and Short-Term Insurance Acts, and tax legislation). When no longer required, information is securely destroyed, de-identified or anonymised.

11. Your Rights

Subject to POPIA, you have the right to:

Be notified that your personal information is being collected or has been accessed without authorisation.
Request access to your personal information.
Request correction or deletion of inaccurate, irrelevant or outdated information.
Object to processing in certain circumstances.
Withdraw consent where processing is based on consent.
Lodge a complaint with the Information Regulator.

To exercise any of these rights, contact us at privacy@rideprotect.co.za.

12. Cookies

We use cookies and similar technologies to operate our website, remember your preferences and analyse traffic. You can disable cookies in your browser, but parts of the Services may not function properly as a result.

13. Direct Marketing

We will only send you electronic direct marketing where you have consented or where the law permits us to do so. You can opt out of direct marketing at any time by following the unsubscribe instructions in our messages or by contacting us.

14. Children

Our Services are not aimed at children under 18 and we do not knowingly collect personal information of children without the consent of a competent person.

15. Changes to this Policy

We may update this Policy from time to time. The latest version will always be available on our website and the "Last updated" date will reflect the most recent changes.

16. Complaints

If you believe we have processed your personal information unlawfully, you may lodge a complaint with the Information Regulator (South Africa):

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za