LiftLink

Privacy Policy

Effective date: 1 June 2025  ·  Version: 2.0

FETCHR TECHNOLOGIES (PTY) LTD ("LiftLink", "we", "us", "our") is the Responsible Party as defined in the Protection of Personal Information Act 4 of 2013 (POPIA) in respect of personal information collected through the LiftLink mobile application and associated web services ("Platform"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how we protect it, and what rights you have.

1 · Our Commitment

LiftLink is committed to processing personal information lawfully, in a reasonable and responsible manner, and only for purposes that are adequate, relevant, and not excessive relative to those purposes, as required by POPIA.

2 · Information We Collect

Information You Provide

Full name, email address, mobile phone number, and password (stored as a secure hash); an optional profile photograph for in-app identification; emergency contact name and phone number; trip notes, chat messages, and ride ratings or reviews you submit on the Platform.

Driver-Specific Data

Identity document number, driver's licence number and code, Professional Driver's Permit (PrDP) number, vehicle registration details (make, model, colour, year, licence plate), copies of identity and verification documents, and bank account details where in-app earnings features are enabled.

Data Collected Automatically

Precise GPS coordinates while the Platform is in use; device model and operating system version; unique device identifiers (for push-notification delivery); app version; session logs (pages visited, timestamps); IP address, carrier, and connection type; and crash and performance diagnostics to identify software defects.

Data from Third Parties

Address geocoding and route data from Google Maps Platform; purchase tokens and subscription status from Google Play Billing (we do not receive full payment card details); and push-notification delivery tokens from Firebase Cloud Messaging (FCM).

3 · Purposes of Processing & Lawful Basis (POPIA s11)

Account creation and authenticationContractual necessity
Matching Passengers with available DriversContractual necessity
Live location sharing during active tripsContractual necessity; legitimate interest (safety)
Driver onboarding verification (identity, licence)Legal compliance; contractual necessity
Subscription billing and payment verificationContractual necessity
Safety features (emergency contact, SOS, incident reports)Legitimate interest; vital interest of data subject
Push notifications for trip updatesConsent (opt-in at device level)
Ratings and reviewsContractual necessity; legitimate interest (platform quality)
Customer support and dispute resolutionLegitimate interest; legal compliance
Platform improvement and analytics (aggregated)Legitimate interest
Legal and regulatory obligationsLegal compliance
Fraud detection and account securityLegitimate interest; legal compliance

4 · How We Share Your Information

Between Users (Trip-Related)

When a Driver accepts a Ride Request, their first name, vehicle details, and real-time location are shared with the Passenger for the duration of the trip. Pickup address, destination, passenger count, and fare are shared with Drivers in the search radius. After a trip, both parties can view each other's first name, average rating, and route summary.

Service Providers (Operators)

We share data with vetted third-party operators who process data on our behalf under data processing agreements: our cloud hosting provider (server infrastructure and database), Google LLC (Maps, Firebase, Play Billing), a document verification service (driver onboarding), and email/SMS transactional providers.

Legal and Safety Disclosures

We may disclose personal information where required or permitted by law — including to law enforcement agencies, courts, or regulators; to investigate and prevent fraud or criminal activity; to protect the vital interests of a person; or to enforce our Terms of Use.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring entity, who will be bound to honour this Privacy Policy or notify you of any material change.

We do not sell personal information to third parties.

5 · Cross-Border Transfers

Your information may be processed on servers located outside South Africa (including within the European Economic Area and the United States). LiftLink ensures that any such transfer complies with section 72 of POPIA by implementing appropriate safeguards, including standard contractual clauses or transferring only to countries that provide an adequate level of protection for personal information.

6 · Retention of Personal Information

Active account dataRetained for the duration of the account.
Trip records and chat messages5 years from the date of the trip, to comply with potential legal proceedings and statutory requirements.
Driver verification documents7 years from the date of submission or account deactivation, whichever is later.
Precise GPS location logsNot stored beyond the duration of the trip. Aggregated or anonymised location data may be retained indefinitely.
Billing records5 years in accordance with South African Revenue Service requirements.
Deactivated account dataAnonymised within 90 days of deactivation, except where legal obligations require longer retention.

7 · Information Security

TLS / HTTPS encryptionAll data in transit is protected by TLS encryption.
Encryption at restSensitive fields (identity numbers, passwords) are encrypted at rest.
Role-based access controlInternal access to personal data is restricted to those with a legitimate operational need.
Security assessmentsRegular vulnerability testing and security reviews are conducted.
Secure deletionData no longer required is removed using secure deletion protocols.

Despite these measures, no security system is impenetrable. If you discover a security vulnerability, please report it immediately to security@fetchr.tech.

8 · Cookies & Local Storage

The application does not use cookies. Certain data is stored locally on your device to maintain your session and improve performance. This data is not transmitted to third parties. You may clear it at any time through your device's app settings.

9 · Children's Privacy

The Platform is not directed at persons under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a person under 18 has registered without verifiable parental consent, we will promptly delete their information. Contact privacy@fetchr.tech if you believe a minor has registered.

10 · Your Rights Under POPIA

Access

Request confirmation of whether we hold personal information about you, and a copy of that information.

Correction

Request that we correct inaccurate, incomplete, or outdated personal information.

Deletion / Erasure

Request deletion of personal information we hold where we no longer have a lawful basis to retain it.

Objection

Object to the processing of your personal information on grounds of legitimate interest.

Restriction

Request that we restrict processing while we verify the accuracy of information or investigate an objection.

Portability

Request personal information you provided to us in a structured, commonly used, and machine-readable format.

Withdraw Consent

Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

Lodge a Complaint

Lodge a complaint with the Information Regulator of South Africa at www.inforegulator.org.za.

To exercise any of these rights, contact our Information Officer at privacy@fetchr.tech. We will respond within 30 days and may verify your identity before processing a request.

11 · Push Notifications

With your permission, we send push notifications relating to trip status updates, chat messages, and important account alerts. You may revoke notification permission at any time through your device settings. Revocation will not affect transactional emails we are required to send.

12 · Third-Party Links & Services

The Platform may contain links to third-party services (e.g., Google Maps, emergency services). This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you access.

13 · Changes to This Policy

We may update this Privacy Policy periodically. Where changes are material we will notify you through the Platform or by email at least 14 days before the changes take effect. The date at the top of this document reflects when it was last revised. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

14 · Contact & Information Officer

FETCHR TECHNOLOGIES (PTY) LTDCompany No. 2026/080890/07 — Eastern Cape, South Africa
Privacy & Data Requestsprivacy@fetchr.tech
General Supportsupport@fetchr.tech
Security Vulnerabilitiessecurity@fetchr.tech
Information Regulator (South Africa)

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
www.inforegulator.org.za