Effective Date: 3 August 2025
Shuttle Genie (Pty) Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, widgets, dashboards, APIs, and related services (collectively, the “Services”).
1. Personal Information We Collect
- Operators: company name, registration number, tax reference, bank details, driver details, vehicle licences, insurance certificates, user credentials, and log data.
- Customers (end-users): name, contact number, email, pickup/drop-off addresses, booking history, payment information, and location data.
- Automatically: IP addresses, browser type, device identifiers, usage logs, and cookies (see Section 8).
2. Legal Bases for Processing (POPIA Conditions)
We process personal information only when at least one POPIA condition is met, most commonly:
- With your consent (e.g., marketing emails).
- As necessary for a contract (e.g., creating a booking).
- To comply with legal obligations (e.g., tax records).
- For our legitimate interests in improving security and functionality, balanced against your rights.
3. How We Use Personal Information
- Provision of quotes, bookings, fleet management, payments, and customer support.
- Verification of licences and insurance.
- Fraud prevention and security monitoring.
- Service analytics and product improvement.
- Marketing, where consent has been obtained.
4. Disclosure of Personal Information
We do NOT sell your data. We may share it with:
- Payment gateways (PayFast, SnapScan, Ozow) for transaction processing.
- SMS & email delivery providers to send booking confirmations.
- Regulatory authorities when legally required.
- Professional advisers (auditors, lawyers) under confidentiality obligations.
All third parties are vetted to ensure adequate security safeguards.
5. Cross-Border Transfers
Personal information is stored on secure servers located in South Africa. Where we use sub-processors in other countries (e.g., cloud infrastructure), we ensure they comply with POPIA-equivalent standards and execute approved transfer agreements.
6. Data Retention
We retain personal information only as long as necessary to fulfil the purposes described above, including any legal, accounting, or reporting requirements. Typical retention periods:
- Booking & payment records: 5 years (SARS requirement).
- Marketing consent records: until consent is withdrawn.
- Inactive accounts: 2 years after last activity, then anonymised or securely deleted.
7. Information Security
We implement appropriate technical and organisational measures, including:
- TLS encryption in transit and AES-256 encryption at rest.
- Role-based access controls and two-factor authentication for staff.
- Regular vulnerability assessments and penetration testing.
8. Cookies & Similar Technologies
We use strictly necessary cookies for authentication and fraud prevention, and functional cookies for language preference. We do NOT use third-party advertising cookies. You can adjust cookie settings via your browser; however, disabling cookies may affect core functionality.
9. Your Rights Under POPIA
- Access: request confirmation and a copy of your personal information.
- Correction: update or rectify inaccurate data.
- Deletion: request deletion when no longer needed or when consent is withdrawn.
- Objection: object to processing for direct marketing or on reasonable grounds.
- Data portability: receive your data in a machine-readable format (where technically feasible).
To exercise any right, email privacy@shuttlegenie.co.za.
10. Children’s Privacy
Our Services are not directed to children under 18. We do not knowingly collect information from minors. If a parent or guardian becomes aware that a child has provided us with personal information, please contact us and we will promptly delete such data.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the Services. Your continued use after such notice constitutes acceptance.
12. Contact Information
Information Officer: Ms Z. Masitla
Shuttle Genie
Prchard Road, Savanna City
Email: privacy@shuttlegenie.co.za
Phone: 087 822 2455