Privacy Policy
DriveIQ Leads (Pty) Ltd — POPIA Compliant
Contents
Introduction
DriveIQ Leads ("DriveIQ", "we", "us", "our") operates a B2B automotive lead generation platform that connects prospective vehicle buyers ("Leads") with licensed motor vehicle dealerships ("Dealers") across South Africa.
This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and its associated regulations.
By using our platform — whether as a Dealer, a Lead, or a visitor to our website — you acknowledge that you have read and understood this policy.
Who We Are
| Responsible Party | DriveIQ Leads (Pty) Ltd |
| Registration | Company registration in progress |
| Address | South Africa |
| privacy@driveiqleads.co.za |
Our Information Officer will be registered with the Information Regulator of South Africa as required by POPIA. Full company registration details will be added to this policy upon completion of registration.
Scope of This Policy
This policy applies to:
- ▸Leads — Individuals who submit personal information via Meta (Facebook/Instagram) Lead Ads, TikTok Lead Ads, Google Lead Form Extensions, or our website landing page.
- ▸Dealers — Businesses and their representatives who subscribe to DriveIQ's lead generation services.
- ▸Website visitors — Anyone who visits driveiqleads.co.za or any associated subdomain.
Personal Information We Collect
4.1 Lead Information
When a prospective vehicle buyer submits an enquiry through any of our advertising channels, we may collect:
- Full name
- Mobile phone number
- Email address
- Vehicle of interest (make, model, or category)
- Budget range
- Finance pre-approval status
- Geographic location (city or region)
4.2 Dealer Information
When a dealership subscribes to our services, we collect:
- Business name and registration number
- VAT number
- Physical and postal address
- Contact person name, email address, and phone number
- Banking details (for billing purposes only)
- Platform identifiers (Meta Page ID, ad account IDs)
4.3 Technical Information
When you interact with our platform or website, we may automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referral source (UTM parameters, ad campaign identifiers)
- Cookies and similar tracking technologies
4.4 Information We Do Not Collect
We do not intentionally collect:
- Special personal information as defined in section 26 of POPIA (race, religion, health, biometric data, criminal history, political views, trade union membership, sexual orientation)
- Information from persons under the age of 18
- Financial account credentials or card numbers
How We Collect Personal Information
We collect personal information through:
- ▸Meta Lead Ads (Instant Forms) on Facebook and Instagram, run on behalf of Dealer partners
- ▸TikTok Lead Ads run on behalf of Dealer partners
- ▸Google Lead Form Extensions run on behalf of Dealer partners
- ▸Our website landing page at driveiqleads.co.za
- ▸Direct dealer onboarding via signed agreements and onboarding forms
When collecting Lead information via social media platforms, DriveIQ acts as an Operator processing personal information on behalf of the relevant Dealer (the Responsible Party for that Lead). This relationship is governed by a written Operator Agreement between DriveIQ and each Dealer.
Purpose for Processing Personal Information
We process personal information only for the following specific, lawful purposes:
6.1 For Leads
- To match a prospective buyer with a suitable licensed Dealer
- To verify contact information for quality assurance
- To send a confirmation of receipt of their enquiry
- To score and qualify the enquiry for appropriate Dealer routing
- To comply with our legal obligations
6.2 For Dealers
- To manage the dealer account and subscription
- To deliver qualified leads to the correct Dealer
- To send invoices and account notifications
- To provide platform access and support
- To comply with our legal obligations under POPIA and tax law (SARS)
6.3 For Website Visitors
- To analyse traffic and improve our website
- To serve relevant advertising (where consent has been obtained)
Legal Basis for Processing
| Processing Activity | Legal Basis |
|---|---|
| Delivering a Lead to a Dealer | Legitimate purpose — fulfilment of the Lead's enquiry |
| Communicating with a Lead about their enquiry | Legitimate purpose — service notification |
| Dealer account management | Contractual necessity |
| Billing and tax records | Legal obligation (SARS, VAT Act) |
| Verifying contact details for lead quality | Legitimate interest — lead quality assurance |
| Marketing to Dealers | Legitimate interest / consent |
| Analytics and platform improvement | Legitimate interest |
How We Share Personal Information
We do not sell personal information. We share it only in the following circumstances:
8.1 With Dealers
Lead information is shared exclusively with the Dealer whose advertising campaign generated the enquiry, or the Dealer assigned by our routing system. Dealers are contractually bound by POPIA obligations and may only use Lead information for the purpose of responding to the vehicle enquiry.
8.2 With Service Providers (Operators)
We engage trusted third-party service providers to help us operate our platform. These providers process personal information on our behalf under written agreements and may only use it for the specific purpose we've engaged them for. The categories of service providers we use include:
- ▸Cloud hosting and database infrastructure
- ▸Email and SMS communication services
- ▸Contact verification services (to confirm a Lead's details are valid before routing)
- ▸Customer relationship management (CRM) tools
- ▸Advertising platforms through which Leads are generated (e.g. social media and search advertising providers)
Some of these providers are located outside South Africa, including in the United States. Where personal information is transferred outside South Africa, we ensure appropriate safeguards are in place as required by section 72 of POPIA.
8.3 Legal Disclosure
We may disclose personal information if required to do so by law, court order, or a request from a competent authority including the Information Regulator of South Africa.
8.4 Business Transfer
In the event of a merger, acquisition, or sale of DriveIQ, personal information may be transferred as part of that transaction. Affected parties will be notified in accordance with POPIA.
Retention of Personal Information
| Category | Retention Period | Reason |
|---|---|---|
| Lead contact information | 12 months from date of collection | Industry standard for automotive lead lifecycle |
| Dealer account records | Duration of contract + 5 years | SARS and legal compliance |
| Billing and tax records | 5 years | SARS requirement |
| Technical logs and analytics | 90 days | Security and debugging |
| Unsubscribe records | Indefinitely | To honour opt-out requests |
After the applicable retention period, personal information is securely deleted or anonymised.
Security of Personal Information
We implement appropriate technical and organisational measures to protect personal information against loss, theft, unauthorised access, disclosure, copying, modification, or destruction. These include:
- ▸Encrypted data transmission (TLS/HTTPS)
- ▸Encrypted data storage
- ▸Role-based access controls limiting staff access to personal information
- ▸Secure data transfer protocols between our platform and Dealers
- ▸Regular security reviews
Despite these measures, no system is completely secure. In the event of a security compromise that affects your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA within the prescribed timeframes.
Your Rights Under POPIA
As a data subject, you have the following rights:
Right of access
You may request confirmation of whether we hold your personal information and request a copy of it.
Right to correction
You may request that we correct inaccurate, incomplete, or outdated personal information.
Right to deletion
You may request deletion of your personal information, subject to our legal retention obligations.
Right to object
You may object to the processing of your personal information on grounds relating to your particular situation.
Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint
You have the right to lodge a complaint with the Information Regulator of South Africa.
Information Regulator (South Africa)JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
complaints.IR@justice.gov.za · inforegulator.org.za
To exercise any of the above rights, contact us at privacy@driveiqleads.co.za. We will respond within 30 days as required by POPIA.
Cookies and Tracking
Our website uses cookies and similar technologies. We use:
Strictly necessary cookies
Required for the website to function (session management, authentication). These cannot be disabled.
Analytics cookies
To understand how visitors use our site (e.g. page views, referral sources). These are only placed with your consent.
Advertising cookies
Placed by Meta, TikTok, and Google for campaign tracking and retargeting. These are only placed with your consent.
You may manage cookie preferences through your browser settings or our cookie consent banner.
Direct Marketing
We may send marketing communications to Dealers and prospective Dealers who have expressed interest in our services. Every marketing communication includes an unsubscribe option. We will honour all unsubscribe requests within 5 business days.
We do not send unsolicited marketing communications to Leads. Lead contact information is used only to fulfil the specific vehicle enquiry.
Children
Our platform is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@driveiqleads.co.za and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- ▸Update the "Last updated" date at the top of this policy
- ▸Notify active Dealers via email
- ▸Display a notice on our website for 30 days
Continued use of our platform after the effective date of any change constitutes acceptance of the updated policy.
Contact Us
For any privacy-related queries, requests, or complaints:
Information Officer
DriveIQ Leads (Pty) Ltd
South Africa
We aim to respond to all queries within 5 business days and to formal requests within 30 days as required by POPIA.