Privacy Policy
Last Updated: May 2025 | POPIA Compliant
Introduction
Engine Finder (Pty) Ltd ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, services, or interact with us. By using our services, you consent to the collection and use of your information as described in this policy.
Your Rights Under POPIA
You have specific rights regarding your personal information. See the "Your Rights" section below for details on how to exercise these rights.
Responsible Party
Company: Engine Finder (Pty) Ltd
Physical Address: 607 Voortrekker Rd, Maitland, Cape Town, South Africa
Phone: 087 135 2226
Email: info@enginefinder.co.za
Information Officer: Craig Sandeman (087 135 2226)
Website: https://www.enginefinder.co.za
Definitions
- Personal Information: Information relating to an identifiable, living, natural person, and where applicable, an identifiable, existing juristic person
- Special Personal Information: Personal information concerning religious or philosophical beliefs, race, ethnic origin, trade union membership, political persuasion, health, sex life, biometric information, or criminal behavior
- Data Subject: The person to whom personal information relates
- Processing: Any operation performed on personal information, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, making available, alignment, combination, restriction, erasure, or destruction
- Responsible Party: Engine Finder (Pty) Ltd
- Operator: A person who processes personal information for a responsible party in terms of a contract or mandate
- POPIA: Protection of Personal Information Act 4 of 2013
Personal Information We Collect
Information You Provide Directly
- Contact Information: Name, email address, phone number, city/location
- Vehicle Information: Make, model, year, VIN number, engine number, parts required
- Business Information: Business name, address, registration details (for suppliers)
- Communication: Messages, enquiries, feedback, and correspondence
- Marketing Preferences: Consent for marketing communications
- Images: Photos of vehicles or parts (when uploaded)
Information Collected Automatically
- Technical Information: IP address, browser type and version, device information, operating system
- Usage Information: Pages visited, time spent on site, click patterns, referral sources
- Location Information: General geographic location based on IP address
- Cookies and Tracking: See our Cookie Policy section below
Special Personal Information
We do not intentionally collect special personal information as defined by POPIA. If such information is inadvertently provided, we will handle it with additional care and seek explicit consent where required.
Lawful Basis and Purpose for Processing
| Purpose | Lawful Basis | Information Used |
|---|---|---|
| Providing vehicle parts matching services | Legitimate interest / Contract performance | Contact details, vehicle information |
| Connecting customers with suppliers | Legitimate interest | Contact details, location, vehicle requirements |
| Account management and authentication | Contract performance | Contact details, business information |
| Marketing communications | Consent | Contact details, preferences |
| Website improvement and analytics | Legitimate interest | Usage data, technical information |
| Legal compliance and dispute resolution | Legal obligation | All relevant information |
Information Sharing and Disclosure
We may share your personal information with:
- Registered Suppliers: Contact details and vehicle requirements to facilitate parts matching (with your consent)
- Service Providers: Third-party operators who assist in providing our services (see Operators section below)
- Legal Authorities: When required by law, court order, or to protect our rights and safety
- Business Transfers: In the event of a merger, acquisition, or sale of assets (with appropriate safeguards)
We do not sell personal information
We never sell, rent, or trade your personal information to third parties for their marketing purposes.
Operators and Cross-Border Data Transfers
Our Operators
We work with the following operators who process personal information on our behalf:
- Supabase Inc.: Database hosting and management (EU region)
- Resend Inc.: Email delivery services (US-based)
- Vercel Inc.: Website hosting and content delivery (Global)
Cross-Border Transfers
Some of your personal information may be transferred to and processed in countries outside South Africa, including:
- European Union: Database storage via Supabase (adequate level of protection)
- United States: Email services via Resend (standard contractual clauses)
We ensure appropriate safeguards are in place for all cross-border transfers, including standard contractual clauses and adequacy decisions where applicable.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:
- Customer Enquiries and Leads: 7 years (for business records and warranty purposes)
- Marketing Consent: 2 years (with periodic consent refresh)
- Supplier Business Records: Duration of business relationship plus 7 years
- Website Analytics: 12 months
- Security Logs: 12 months
- Legal Compliance: As required by applicable laws
After the retention period expires, personal information is securely deleted or anonymized. You can request earlier deletion subject to our legal obligations.
Your Rights Under POPIA
As a data subject, you have the following rights regarding your personal information:
Right of Access
Request confirmation of whether we process your personal information and access to that information.
Right to Correction
Request correction or deletion of inaccurate or incomplete personal information.
Right to Deletion
Request deletion of your personal information where we no longer have a lawful basis to process it.
Right to Object
Object to the processing of your personal information on grounds relating to your particular situation.
Right to Data Portability
Request your personal information in a structured, commonly used, machine-readable format.
Right to Withdraw Consent
Withdraw consent for processing based on consent (e.g., marketing communications).
How to Exercise Your Rights
To exercise any of these rights, contact us at info@enginefinder.co.za. We will respond within 30 days as required by POPIA.
Security Measures
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
- Access Controls: Role-based access with multi-factor authentication
- Regular Security Audits: Periodic assessment of security measures
- Staff Training: Regular training on data protection and security
- Incident Response: Procedures for detecting and responding to data breaches
- Secure Development: Security-by-design principles in system development
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Regulator within 72 hours and affected individuals without undue delay.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required for basic website functionality and security | Session/1 year |
| Functional | Remember your preferences and settings | 1 year |
| Analytics | Help us understand website usage and improve our services | 2 years |
You can control cookie preferences through your browser settings. Note that disabling certain cookies may limit website functionality.
Children's Privacy
Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to remove that information from our systems.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending email notification to registered users for significant changes
- Displaying a prominent notice on our website
Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.
Complaints and Regulatory Information
If you have concerns about how we handle your personal information, you can:
- Contact us directly at info@enginefinder.co.za
- Submit a complaint to the Information Regulator of South Africa:
Information Regulator South Africa
Email: inforeg@justice.gov.za
Phone: +27 12 406 4818
Website: https://www.justice.gov.za/inforeg/
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Contact Us
For questions about this Privacy Policy or to exercise your rights under POPIA, contact us at:
General Enquiries
- Email: info@enginefinder.co.za
- Website: https://www.enginefinder.co.za
Privacy & Data Protection
- Email: info@enginefinder.co.za