POPIA Data Subject Rights Notice

Introduction

In terms of the Protection of Personal Information Act, 2013 (POPIA), VroomVroom acts as the "responsible party" for the personal information we collect and process. You, as the user, are the "data subject." This notice explains your rights under South African law and how you can exercise them.

Right to Access (Section 23)

You have the right to request confirmation of whether or not we hold personal information about you. You may also request a record or a description of the personal information we maintain, including information about the identity of any third parties who have had access to your information. We will provide this information within 30 days of a valid request.

Right to Correction or Deletion (Section 24)

You have the right to request that we correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully. You may also request the destruction or deletion of a record of personal information that we are no longer authorized to retain. We will process these requests within 30 days, unless we are legally required to keep certain records for tax, audit, or legal purposes.

Right to Object to Processing (Section 11(3))

You have the right to object, at any time, to the processing of your personal information for purposes such as analytics or direct marketing. If you object to processing that is necessary for the core functionality of the service, we may no longer be able to provide the service to you. However, you are always free to object to non-essential processing without affecting your access to the platform.

Right to Lodge a Complaint

If you feel that VroomVroom has not handled your personal information in accordance with POPIA, we encourage you to contact us first to resolve the issue. However, you have the right to lodge a formal complaint with the South African Information Regulator.

How to Exercise Your Rights

To exercise any of your rights listed above, please send an email to our privacy team.

In your email, please provide:

1. Your full name.
2. The email address associated with your VroomVroom account.
3. A clear description of which right you wish to exercise (e.g., Request for Access, Request for Deletion).

We will verify your identity before processing the request to ensure your data remains secure. We will respond to all requests within 30 days.

Information Officer

VroomVroom has appointed an Information Officer who is responsible for ensuring our platform complies with POPIA and for handling all data-related inquiries.