PRIVACY
POLICY.

TrustArc (Pty) Ltd ("TrustArc", "we", "us", "our") is a Cape Town-based transport marketplace that connects passengers, independent drivers, and fleet owners. We are the Responsible Party as defined under POPIA.

TrustArc operates as a marketplace platform. We facilitate connections between service providers (drivers, fleet owners) and service recipients (passengers) — we do not ourselves provide transport services directly.

Contact: privacy@trustarc.co.za

Depending on your role on the platform, we may collect:

• Identity: Full name, ID/passport number (drivers & fleet owners)
• Contact: Email address, mobile number
• Location: Pick-up and drop-off addresses, real-time GPS during active trips (with consent)
• Payment: Billing details processed securely via third-party payment processors (we do not store full card numbers)
• Vehicle (drivers/fleet): Registration number, vehicle type, capacity, operator permit
• Usage data: Log files, device info, app interactions, booking history
• Communications: Messages sent through the platform's support channels

We process personal information for the following lawful purposes:

• Providing, managing, and improving the TrustArc marketplace
• Verifying identity and eligibility of drivers and fleet operators
• Processing bookings and payments
• Communicating booking confirmations, updates, and support
• Ensuring safety and security of all users
• Complying with legal and regulatory obligations
• Sending service-related notifications (with your consent for marketing)

We share your information only where necessary:

• Between users: Passengers receive driver name, vehicle info and contact number for active bookings. Drivers receive passenger pick-up details.
• Payment processors: Secure third-party processors to complete transactions
• Service providers: Hosting, analytics, and communications providers bound by data processing agreements
• Legal authorities: Where required by South African law, court order, or to protect safety

We do not sell your personal information to third parties.

We retain your personal information for as long as your account is active or as needed to provide services. Where we no longer have a lawful basis to retain data, we securely delete or anonymise it. Driver verification records are retained for the minimum period required by applicable transport regulations.

As a data subject, you have the right to:

• Access personal information we hold about you
• Correct inaccurate or outdated information
• Delete your information where there is no lawful basis for retention
• Object to processing for direct marketing
• Complain to the Information Regulator of South Africa if you believe your rights have been violated

Submit requests to privacy@trustarc.co.za. We will respond within 30 days as required under POPIA.

Our web platform uses essential cookies to operate correctly (session management, security). We may use analytics cookies to understand how users interact with the platform — you can decline non-essential cookies via your browser settings. We do not use tracking for third-party advertising.

We implement industry-standard technical and organisational measures to protect your data — including encryption in transit (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we encourage you to use strong passwords and to notify us immediately if you suspect unauthorised access.

TrustArc is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from minors. If we become aware of such collection, we will delete the information promptly.

We may update this policy from time to time. We will notify registered users of material changes via email or in-app notification at least 14 days before changes take effect. Continued use of the platform after the effective date constitutes acceptance.

If you are not satisfied with our response to a complaint, you may lodge a complaint with the Information Regulator (South Africa):

Website: inforegulator.org.za
Email: inforeg@justice.gov.za