Engine Finder Privacy Policy

Privacy Policy

Last Updated: August 2026 | POPIA Compliant

Introduction

Engine Finder (Pty) Ltd ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, our mobile application, our services, or interact with us. By using our services, you consent to the collection and use of your information as described in this policy.

Your Rights Under POPIA

You have specific rights regarding your personal information. See the "Your Rights" section below for details on how to exercise these rights.

Responsible Party

Company: Engine Finder (Pty) Ltd

Physical Address: 607 Voortrekker Rd, Maitland, Cape Town, South Africa

Phone: 010 288 6956

Email: info@enginefinder.co.za

Information Officer: Craig Sandeman (010 288 6956)

Website: https://www.enginefinder.co.za

Definitions

  • Personal Information: Information relating to an identifiable, living, natural person, and where applicable, an identifiable, existing juristic person
  • Special Personal Information: Personal information concerning religious or philosophical beliefs, race, ethnic origin, trade union membership, political persuasion, health, sex life, biometric information, or criminal behavior
  • Data Subject: The person to whom personal information relates
  • Processing: Any operation performed on personal information, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, making available, alignment, combination, restriction, erasure, or destruction
  • Responsible Party: Engine Finder (Pty) Ltd
  • Operator: A person who processes personal information for a responsible party in terms of a contract or mandate
  • POPIA: Protection of Personal Information Act 4 of 2013

Personal Information We Collect

Information You Provide Directly

  • Contact Information: Name, email address, phone number, city/location
  • Vehicle Information: Make, model, year, VIN number, engine number, parts required
  • Business Information: Business name, address, registration details (for suppliers)
  • Communication: Messages, enquiries, feedback, and correspondence
  • Marketing Preferences: Consent for marketing communications
  • Images: Photos of vehicles or parts (when uploaded)

Information Collected Automatically

  • Technical Information: IP address, browser type and version, device information, operating system
  • Usage Information: Pages visited, time spent on site, click patterns, referral sources
  • Location Information: General geographic location based on IP address
  • Cookies and Tracking: See our Cookie Policy section below

Special Personal Information

We do not intentionally collect special personal information as defined by POPIA. If such information is inadvertently provided, we will handle it with additional care and seek explicit consent where required.

Lawful Basis and Purpose for Processing

Purpose Lawful Basis Information Used
Providing vehicle parts matching services Legitimate interest / Contract performance Contact details, vehicle information
Connecting customers with suppliers Legitimate interest Contact details, location, vehicle requirements
Account management and authentication Contract performance Contact details, business information
Mobile app account creation and sign-in (including Google Sign-In) Contract performance Name, email address, phone number, city, and the name and email address on the Google account you choose to sign in with
Push notifications to suppliers about new enquiries (mobile app) Legitimate interest / Contract performance Device push token, device name, device platform, and the account the device is signed in to
Marketing communications Consent Contact details, preferences
Promotional communications from Engine Finder's supplier network Consent (upon enquiry submission) Contact details (email, WhatsApp number), vehicle preferences
Automated follow-up communications regarding your enquiry status Legitimate interest / Contract performance Contact details, enquiry details, vehicle information
Website improvement and analytics Legitimate interest Usage data, technical information
Advertising measurement and conversion tracking Legitimate interest Usage data, conversion events (page views, form submissions), device information
Legal compliance and dispute resolution Legal obligation All relevant information

Information Sharing and Disclosure

We may share your personal information with:

  • Registered Suppliers: Your name, contact details (phone number, email, WhatsApp), location, and vehicle requirements are shared with multiple registered suppliers who may be able to assist with your enquiry. Suppliers may contact you directly via phone, email, WhatsApp, or other channels to provide quotes. Each supplier is an independent responsible party for any personal information they receive and process. This sharing also happens through our mobile application: a supplier signed in to the Engine Finder app sees your name, phone number, email address, city and enquiry details on their device, and can call, WhatsApp or email you from it. The supplier viewing your details in the app is a separate business, not Engine Finder.
  • Service Providers: Third-party operators who assist in providing our services (see Operators section below)
  • Legal Authorities: When required by law, court order, or to protect our rights and safety
  • Business Transfers: In the event of a merger, acquisition, or sale of assets (with appropriate safeguards)

We do not sell personal information

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

Operators and Cross-Border Data Transfers

Our Operators

We work with the following operators who process personal information on our behalf:

  • Supabase Inc.: Database hosting and management (EU region)
  • Resend Inc.: Email delivery services (US-based)
  • Vercel Inc.: Website hosting and content delivery (Global)
  • Meta Platforms, Inc.: Advertising measurement and conversion tracking via Meta Pixel (US/Global). We use the Meta Pixel to measure the effectiveness of our advertising campaigns on Facebook and Instagram, and to understand how visitors interact with our website after viewing our ads. Data collected includes page views, button clicks, and form submissions. For more information, see Meta's Privacy Policy.
  • Google LLC: Website analytics via Google Analytics 4 (US/Global). Google also acts as the identity provider when you choose Google Sign-In in our mobile app, and delivers push notifications to Android devices via Firebase Cloud Messaging.
  • Expo (Exponent, Inc.): Push notification delivery for our mobile application (US-based). Notification text is passed to Expo, which relays it to Apple and Google for delivery to the device.
  • Apple Inc.: Push notification delivery to iOS devices via the Apple Push Notification service (US/Global), and app distribution via the App Store / TestFlight.

Cross-Border Transfers

Some of your personal information may be transferred to and processed in countries outside South Africa, including:

  • European Union: Database storage via Supabase (adequate level of protection)
  • United States: Email services via Resend, advertising measurement via Meta Platforms, analytics via Google (standard contractual clauses)

We ensure appropriate safeguards are in place for all cross-border transfers, including standard contractual clauses and adequacy decisions where applicable.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

  • Customer Enquiries and Leads: 7 years (for business records and warranty purposes)
  • Marketing Consent: 2 years (with periodic consent refresh)
  • Supplier Business Records: Duration of business relationship plus 7 years
  • Website Analytics: 12 months
  • Security Logs: 12 months
  • Legal Compliance: As required by applicable laws

After the retention period expires, personal information is securely deleted or anonymized. You can request earlier deletion subject to our legal obligations.

Automated Communications

When you submit an enquiry through our platform, you may receive the following automated communications:

  • Enquiry Confirmation: An immediate email confirming receipt of your enquiry
  • Quotes Ready Notification: An email when supplier quotes are available for your review
  • Follow-Up Email: A single follow-up email sent within 7-10 days of your enquiry to check if you were successfully assisted. This applies to engine enquiries only.
  • Feedback Request: An automated email requesting feedback on our service

These service-related communications are sent based on our legitimate interest in providing a complete service experience. They are distinct from marketing communications, which require your separate consent.

If you do not wish to receive follow-up emails, you can contact us at info@enginefinder.co.za to opt out of non-essential service communications.

Mobile Application

Engine Finder publishes a mobile application for Android and iOS. The app has two sides behind one login: customers register once and submit enquiries without re-typing their details, and suppliers view and respond to the enquiries sent to their business. Everything in this Privacy Policy applies to the app as well as the website. This section explains what is different about the app.

Information the App Collects

  • Account Details: Your name, email address, phone number and (optionally) your city, entered when you register. Your city is a free-text field you type yourself.
  • Enquiry Details: The vehicle make, whether you need an engine or parts, your message, and where applicable an engine number or VIN.
  • Device Information for Notifications: If you allow notifications, we store a push notification token for your device, together with the device name and platform (iOS or Android), linked to your account.

The app does not access your device location. It does not request GPS or location permission, and it does not read your contacts, camera, photos or microphone. Any city we hold is one you typed in yourself.

Signing In with Google

The app offers Google Sign-In as an alternative to an email address and password. If you use it, Google confirms your identity to us and we receive the email address and name associated with that Google account. We do not receive your Google password. Google's handling of that sign-in is governed by Google's Privacy Policy.

Information Stored on Your Device

When you sign in, the app stores an authentication token on your device so that you stay signed in between sessions. On Android and iOS this is held in the operating system's secure storage and in the app's own private storage; in the browser version of the app it is held in your browser's local storage. This token is what identifies you to Engine Finder — treat it like a password, and sign out on any device you no longer control. Signing out removes it, clears the enquiry details held in the app's memory, and stops notifications to that device.

Push Notifications

Suppliers can choose to receive a notification on their phone when a new enquiry arrives for their business. To do this we store a push notification token for the device on our servers, linked to the signed-in account, and pass notification text to Expo, Apple and Google for delivery (see the Operators section above).

  • Notifications deliberately carry no customer contact details. The alert names only the type of enquiry, the vehicle and the city — never a customer's name, phone number or email address — because a notification appears on a locked screen to whoever is holding the phone.
  • You can turn them off at any time in your device's notification settings, without affecting anything else in the app. Signing out also de-registers the device.

What Suppliers See in the App

When a supplier opens an enquiry in the app, they see the customer's name, phone number, email address, city and message, and can call, WhatsApp or email that customer directly. As set out in the "Information Sharing and Disclosure" section above, each supplier is a separate business and an independent responsible party for the personal information they receive. Supplier access is restricted: enquiries are only visible to the business they were sent to, sales agents see only the enquiries assigned to them, and contact details are hidden once an enquiry is more than 14 days old.

Deleting Your Account

Customers can delete their Engine Finder account themselves at enginefinder.co.za/delete-account. Deleting your account removes your login and your saved contact profile, and de-registers your devices from notifications. Enquiries you have already submitted, and any records we are required to keep for legal, tax or dispute-resolution purposes, are retained for the periods set out in the "Data Retention" section above; suppliers who already received your enquiry hold their own copy, and you would need to contact them directly.

Suppliers: please contact us

Supplier accounts cannot be self-deleted, because a supplier login is attached to a live business record with enquiry history, invoices and team members. Email info@enginefinder.co.za and we will handle the closure with you.

App Stores

The app is distributed through the Apple App Store (including TestFlight) and as an Android application. Apple and Google collect their own information about downloads and installations under their own privacy policies, which we do not control. The app itself contains no advertising software, no advertising identifier, and no third-party analytics or crash-reporting service.

Your Rights Under POPIA

As a data subject, you have the following rights regarding your personal information:

Right of Access

Request confirmation of whether we process your personal information and access to that information.

Right to Correction

Request correction or deletion of inaccurate or incomplete personal information.

Right to Deletion

Request deletion of your personal information where we no longer have a lawful basis to process it.

Right to Object

Object to the processing of your personal information on grounds relating to your particular situation.

Right to Data Portability

Request your personal information in a structured, commonly used, machine-readable format.

Right to Withdraw Consent

Withdraw consent for processing based on consent (e.g., marketing communications).

How to Exercise Your Rights

To exercise any of these rights, contact us at info@enginefinder.co.za. We will respond within 30 days as required by POPIA.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
  • Access Controls: Role-based access with multi-factor authentication
  • Regular Security Audits: Periodic assessment of security measures
  • Staff Training: Regular training on data protection and security
  • Incident Response: Procedures for detecting and responding to data breaches
  • Secure Development: Security-by-design principles in system development

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Regulator within 72 hours and affected individuals without undue delay.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Cookie Type Purpose Duration
Essential Required for basic website functionality and security Session/1 year
Functional Remember your preferences and settings 1 year
Analytics Help us understand website usage and improve our services (Google Analytics) 2 years
Advertising Track conversions from our advertising campaigns and measure ad effectiveness (Meta Pixel). These cookies help us deliver relevant ads and understand how users interact with our site after seeing an ad on Facebook or Instagram. 90 days

You can control cookie preferences through your browser settings. Note that disabling certain cookies may limit website functionality.

Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to remove that information from our systems.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending email notification to registered users for significant changes
  • Displaying a prominent notice on our website

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

Complaints and Regulatory Information

If you have concerns about how we handle your personal information, you can:

  1. Contact us directly at info@enginefinder.co.za
  2. Submit a complaint to the Information Regulator of South Africa:

Information Regulator South Africa

Email: inforeg@justice.gov.za

Phone: +27 12 406 4818

Website: https://www.justice.gov.za/inforeg/

Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Contact Us

For questions about this Privacy Policy or to exercise your rights under POPIA, contact us at:

General Enquiries

  • Email: info@enginefinder.co.za
  • Website: https://www.enginefinder.co.za

Privacy & Data Protection

  • Email: info@enginefinder.co.za
Whatsapp Us!