POPIA Compliance

Your data rights,
protected by law

Gazole Fleet is fully compliant with the Protection of Personal Information Act 4 of 2013 (POPIA). Here's exactly what that means for you.

POPIA Compliant Gazole (Pty) Ltd is fully compliant with the Protection of Personal Information Act 4 of 2013. Last reviewed: June 2025.

What is POPIA?

The Protection of Personal Information Act 4 of 2013 (POPIA) is South Africa's primary data protection legislation. It regulates how organisations collect, store, use, and share personal information about South African citizens and residents.

POPIA came into full effect on 1 July 2021. It applies to any organisation that processes personal information about people in South Africa, including Gazole (Pty) Ltd.

Our commitment to you

We take data protection seriously. Here is what we commit to as your fleet management provider:

Data minimisation

We only collect information that is necessary to provide our fleet management services.

Hosted in South Africa

All personal data is stored on servers located within South Africa.

No third-party selling

We never sell, rent, or share your personal information with third-party marketers.

Breach notification

In the unlikely event of a breach, we will notify you and the Information Regulator within 72 hours.

The 8 conditions for lawful processing

POPIA sets out eight conditions that must be met when processing personal information. Here is how Gazole Fleet satisfies each one:

1
Accountability

Gazole (Pty) Ltd has appointed an Information Officer who is responsible for ensuring our compliance with POPIA. Contact: support@gazole.co.za

2
Processing limitation

We process personal information only for the specific, lawful purpose of providing fleet management services. We collect only what we need and nothing more.

3
Purpose specification

Personal information is collected for clearly defined, specific purposes. We inform you of these purposes at the point of collection and do not use data for any other purpose without your consent.

4
Further processing limitation

Any further processing of your information is compatible with the original purpose. We do not repurpose your data without notifying you and obtaining fresh consent where required.

5
Information quality

We take reasonable steps to ensure that personal information is complete, accurate, not misleading, and kept up to date. You may update your information at any time through your account settings.

6
Openness

We maintain a PAIA Manual and document all processing activities. Our Privacy Policy discloses what information we collect, why, and how it is used. This page forms part of that openness obligation.

7
Security safeguards

We implement appropriate technical and organisational measures to protect personal information against loss, damage, or unauthorised access. All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

8
Data subject participation

You have the right to access, correct, and request deletion of your personal information. We will respond to all such requests within 30 days.

Your rights under POPIA

Right to access

Request a copy of all personal information we hold about you.

Right to correction

Request that inaccurate or outdated information be corrected or deleted.

Right to object

Object to the processing of your personal information at any time.

Right to complain

Lodge a complaint with the Information Regulator if you believe your rights have been violated.

Data security measures

We employ industry-standard security practices to protect your data:

  • Encryption in transit: All data transmitted between your browser and our servers uses TLS 1.3.
  • Encryption at rest: All stored data is encrypted using AES-256.
  • Access controls: Role-based access ensures staff only see data relevant to their function.
  • Regular audits: We conduct regular security audits and penetration testing.
  • South African hosting: All data remains on servers located within the Republic of South Africa.

Information Officer

Our Information Officer is responsible for POPIA compliance and can be contacted for any data protection queries or requests:

Information Officer
Gazole (Pty) Ltd
Johannesburg, South Africa
Email: support@gazole.co.za

The Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za
Website: www.justice.gov.za/inforeg/

Exercise your rights

To exercise any of your POPIA rights, or if you have any questions about how we process your personal information, contact us:

Contact Us About My Data Read Full Privacy Policy