This Privacy Policy outlines how Crogal Capital (Pty) Ltd
("Company", "we", "us",
or "our") trading as Zamalyft collects, uses, shares, and protects personal information
of Users ("you",
"your") when using our ride and/or parcel courier service application
("App") and associated services in
compliance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) of South
Africa.
By accessing or using our App and Services, you agree to the terms of this Privacy Policy.
Information We Collect
We may collect and process the following categories of personal information:
Information You Provide Directly
- Full name
- ID number (where required for identity verification or high-value deliveries)
- Email address
- Phone number
- Delivery addresses (pickup and drop-off)
- Payment information (e.g., credit card details – processed via third-party secure gateways)
Automatically Collected Information
- Location data (real-time GPS during transportation tracking)
- Device information (e.g., device type, OS version)
- App usage data (e.g., access times, features used)
Purpose of Processing Personal Information
We process your personal information for the following purposes:
- To register and manage your user account
- To facilitate a ride or parcel courier service
- To verify your identity (when required)
- For payment processing and invoicing
- For service improvement and analytics
- To communicate with you (e.g., notifications, service updates, support)
- To comply with legal and regulatory obligations
Legal Basis for Processing
We process your personal information in accordance with POPIA under the following legal grounds:
- Consent: Where you voluntarily provide personal information and agree to our terms.
- Contractual necessity: To provide you with ride or parcel courier services you request.
- Legal obligation: Where we are required to process information by law.
- Legitimate interest: To improve our services, secure our systems, and conduct business operations, provided such processing does not override your privacy rights.
Sharing of Information
We may share your information with:
- Drivers/Bookers: To complete your ride or delivery, they receive necessary delivery and contact details.
- Service Providers: Payment processors, cloud service providers, analytics, and IT support who help us operate our App.
- Regulatory Authorities: When required by law or in response to valid legal requests.
- Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred accordingly.
We do not sell or rent your personal data to third parties for marketing purposes.
Cross-Border Transfers
Where personal information is transferred outside of South Africa, we ensure that the recipient country has adequate data protection laws or we enter into binding agreements to protect your information in line with POPIA standards.
Retention of Personal Information
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. When no longer required, we securely destroy or de-identify the information.
Your Rights under POPIA
As a data subject under POPIA, you have the right to:
- Access your personal information
- Correct or update your information
- Object to the processing of your information
- Request deletion of your personal data (subject to legal or contractual obligations)
- Lodge a complaint with the Information Regulator
To exercise these rights, contact us at the details provided in our Terms and Conditions of Use.
Security of Information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, or destruction. These include secure servers, encryption, access controls, and regular security assessments.
Children’s Privacy
Our services are not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a child without proper consent, we will delete it.
Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in law or service. Any updates will be posted on our App or website with a revised "Effective Date." We encourage you to review it regularly.
Contact Us
If you have any questions, concerns, or wish to exercise your rights under POPIA, please contact us on the details provided in our Terms and Conditions of Use section.
Information Regulator (South Africa)
If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator:
Website: https://www.justice.gov.za/inforeg
Email: complaints.IR@justice.gov.za
