Lift Link
LiftLink

Privacy Policy

Effective date: 1 June 2025  ·  Version: 2.0

Fetchr Technologies (Pty) Ltd ("LiftLink", "we", "us", "our") is the Responsible Party as defined in the Protection of Personal Information Act 4 of 2013 (POPIA) in respect of personal information collected through the LiftLink mobile application and associated web services ("Platform"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how we protect it, and what rights you have.

LiftLink is committed to processing personal information lawfully, in a reasonable and responsible manner, and only for purposes that are adequate, relevant, and not excessive relative to those purposes, as required by POPIA.

Information You Provide

Full name, email address, mobile phone number, and password (stored as a secure hash); an optional profile photograph for in-app identification; emergency contact name and phone number; trip notes, chat messages, and ride ratings or reviews you submit on the Platform.

Driver-Specific Data

Identity document number, driver's licence number and code, Professional Driver's Permit (PrDP) number, vehicle registration details (make, model, colour, year, licence plate), copies of identity and verification documents, and bank account details where in-app earnings features are enabled.

Data Collected Automatically

Precise GPS coordinates while the Platform is in use; device model and operating system version; unique device identifiers (for push-notification delivery); app version; session logs (pages visited, timestamps); IP address, carrier, and connection type; and crash and performance diagnostics to identify software defects.

Data from Third Parties

Address geocoding and route data from Google Maps Platform; purchase tokens and subscription status from Google Play Billing (we do not receive full payment card details); and push-notification delivery tokens from Firebase Cloud Messaging (FCM).

Account creation and authentication Contractual necessity
Matching Passengers with available Drivers Contractual necessity
Live location sharing during active trips Contractual necessity; legitimate interest (safety)
Driver onboarding verification (identity, licence) Legal compliance; contractual necessity
Subscription billing and payment verification Contractual necessity
Safety features (emergency contact, SOS, incident reports) Legitimate interest; vital interest of data subject
Push notifications for trip updates Consent (opt-in at device level)
Ratings and reviews Contractual necessity; legitimate interest (platform quality)
Customer support and dispute resolution Legitimate interest; legal compliance
Platform improvement and analytics (aggregated) Legitimate interest
Legal and regulatory obligations Legal compliance
Fraud detection and account security Legitimate interest; legal compliance
Between Users (Trip-Related)

When a Driver accepts a Ride Request, their first name, vehicle details, and real-time location are shared with the Passenger for the duration of the trip. Pickup address, destination, passenger count, and fare are shared with Drivers in the search radius. After a trip, both parties can view each other's first name, average rating, and route summary.

Service Providers (Operators)

We share data with vetted third-party operators who process data on our behalf under data processing agreements: our cloud hosting provider (server infrastructure and database), Google LLC (Maps, Firebase, Play Billing), a document verification service (driver onboarding), and email/SMS transactional providers.

Legal and Safety Disclosures

We may disclose personal information where required or permitted by law — including to law enforcement agencies, courts, or regulators; to investigate and prevent fraud or criminal activity; to protect the vital interests of a person; or to enforce our Terms of Use.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring entity, who will be bound to honour this Privacy Policy or notify you of any material change.

We do not sell personal information to third parties.

Your information may be processed on servers located outside South Africa (including within the European Economic Area and the United States). LiftLink ensures that any such transfer complies with section 72 of POPIA by implementing appropriate safeguards, including standard contractual clauses or transferring only to countries that provide an adequate level of protection for personal information.

Active account data Retained for the duration of the account.
Trip records and chat messages 5 years from the date of the trip, to comply with potential legal proceedings and statutory requirements.
Driver verification documents 7 years from the date of submission or account deactivation, whichever is later.
Precise GPS location logs Not stored beyond the duration of the trip. Aggregated or anonymised location data may be retained indefinitely.
Billing records 5 years in accordance with South African Revenue Service requirements.
Deactivated account data Anonymised within 90 days of deactivation, except where legal obligations require longer retention.
TLS / HTTPS encryption All data in transit is protected by TLS encryption.
Encryption at rest Sensitive fields (identity numbers, passwords) are encrypted at rest.
Role-based access control Internal access to personal data is restricted to those with a legitimate operational need.
Security assessments Regular vulnerability testing and security reviews are conducted.
Secure deletion Data no longer required is removed using secure deletion protocols.

Despite these measures, no security system is impenetrable. If you discover a security vulnerability, please report it immediately to security@fetchr.tech.

The application does not use cookies. Certain data is stored locally on your device to maintain your session and improve performance. This data is not transmitted to third parties. You may clear it at any time through your device's app settings.

The Platform is not directed at persons under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a person under 18 has registered without verifiable parental consent, we will promptly delete their information. Contact privacy@fetchr.tech if you believe a minor has registered.

Access

Request confirmation of whether we hold personal information about you, and a copy of that information.

Correction

Request that we correct inaccurate, incomplete, or outdated personal information.

Deletion / Erasure

Request deletion of personal information we hold where we no longer have a lawful basis to retain it.

Objection

Object to the processing of your personal information on grounds of legitimate interest.

Restriction

Request that we restrict processing while we verify the accuracy of information or investigate an objection.

Portability

Request personal information you provided to us in a structured, commonly used, and machine-readable format.

Withdraw Consent

Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

Lodge a Complaint

Lodge a complaint with the Information Regulator of South Africa at www.inforegulator.org.za.

To exercise any of these rights, contact our Information Officer at privacy@fetchr.tech. We will respond within 30 days and may verify your identity before processing a request.

With your permission, we send push notifications relating to trip status updates, chat messages, and important account alerts. You may revoke notification permission at any time through your device settings. Revocation will not affect transactional emails we are required to send.

The Platform may contain links to third-party services (e.g., Google Maps, emergency services). This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you access.

We may update this Privacy Policy periodically. Where changes are material we will notify you through the Platform or by email at least 14 days before the changes take effect. The date at the top of this document reflects when it was last revised. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

Fetchr Technologies (Pty) Ltd Eastern Cape, South Africa
Privacy & Data Requests privacy@fetchr.tech
General Support support@fetchr.tech
Security Vulnerabilities security@fetchr.tech
Information Regulator (South Africa)

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
www.inforegulator.org.za

© 2025 Fetchr Technologies (Pty) Ltd. All rights reserved.