Privacy Policy
Lepas Tzaneen
1. Introduction
1.1. Lepas Tzaneen (“we”, “us”, “our”) is an authorised motor vehicle dealership operating in South Africa, providing vehicle sales, servicing, parts, finance assistance, warranties, and related automotive products and services to customers and business partners.
1.2. We value our customers, clients, employees, and business partners and recognise the sensitive nature of the personal information we process. Protecting your personal information is a priority for us, and we are committed to handling it lawfully, responsibly, and transparently in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).
1.3. This Privacy Policy explains:
- how we collect, use, store, share, and protect your personal information; and
- the rights you have in relation to your personal information.
1.4. This Privacy Policy may be updated from time to time to reflect changes in legislation or our business operations. The most recent version will be available on our website and may be provided upon request.
2. What Is Personal Information
2.1. In terms of POPIA, personal information is information relating to an identifiable, living natural person or an identifiable juristic person.
2.2. This may include, but is not limited to:
- name and surname
- identity or registration numbers
- contact details
- financial and banking information
- age and language
- information relating to race, gender, or health (where permitted or required by law)
- vehicle and service-related information
3. Personal Information We Collect
3.1. We collect personal information directly or indirectly when you enquire about or make use of our products or services, whether in writing, through our website, over the telephone, via social media, or through authorised third parties where there is a legitimate business purpose.
3.2. The categories of personal information we may collect include:
Identification and Contact Information
- full name
- physical and postal address
- email address
- telephone number
- date of birth
- identity or registration number
Vehicle and Transaction Information
- vehicle registration number and VIN
- service, maintenance, mileage, warranty, and repair records
- transaction history and appointment details
Online and Technical Information
- IP address
- browser and device information
- website usage data
- cookies, pixels, and beacon data (refer to our Cookie Policy)
- GPS location (where permission is granted)
Financial Information
- banking and account details
- credit-related information obtained from finance providers
Communication and Marketing Information
- call recordings (where applicable)
- correspondence, enquiries, and feedback
- competition entries
- social media interactions and preferences
- marketing consent and communication preferences
3.3. Where you engage with us in a business or fleet capacity, we may also collect your job title, company name, contact details, and fleet-related information.
3.4. We will inform you where the provision of personal information is mandatory or voluntary and explain the consequences of not providing it, where reasonably possible.
4. How We Collect Personal Information
We collect personal information:
- directly from you;
- from finance institutions, insurers, or authorised service providers;
- from referrals or representatives acting on your behalf;
- automatically through website usage and cookies;
- from publicly available sources; or
- from third parties where consent has been provided or where permitted by law.
5. Use of Personal Information
We use personal information for legitimate business purposes, including:
- providing and administering products and services
- processing transactions, payments, and finance applications
- responding to enquiries and complaints
- managing customer relationships
- administering warranties, service plans, and after-sales support
- market research and service improvement
- sending service-related, contractual, or legally required communications
- marketing communications, where consent has been given or permitted by law
- compliance with legal and regulatory obligations
- internal administration, auditing, IT systems, and record keeping
6. Sharing of Personal Information
6.1. Access to personal information within Lepas Tzaneen is restricted to authorised personnel who require it for legitimate business purposes.
6.2. We may share personal information with:
- finance providers and banks
- insurers and warranty administrators
- authorised service providers and suppliers
- manufacturer or brand partners
- regulatory authorities where required by law
6.3. Personal information will only be shared to the extent necessary and for lawful purposes.
6.4. All third parties are required to protect personal information and may only use it for the purpose for which it was disclosed.
7. Security of Personal Information
7.1. We implement reasonable technical and organisational safeguards to protect personal information against unauthorised access, loss, misuse, or disclosure.
7.2. While we take appropriate measures to secure personal information, no system is entirely secure, and we cannot guarantee absolute protection against data breaches.
7.3. Where required by law, affected individuals will be notified of any data breach.
8. Access, Correction, and Deletion of Personal Information
8.1. You may request access to your personal information or request that it be corrected or deleted, subject to legal retention obligations.
8.2. Proof of identity may be required before such requests are processed.
8.3. Requests may be refused if they are unreasonable, repetitive, or infringe on the rights of others.
8.4. Access and correction requests are generally provided free of charge unless excessive effort is required.
9. Data Retention
9.1. We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law.
9.2. Once no longer required, personal information will be securely deleted or destroyed.
10. Cross-Border Transfers
Where personal information is transferred outside South Africa, we ensure appropriate safeguards are in place to provide a level of protection equivalent to POPIA.
11. Your Rights as a Data Subject
You have the right to:
- access your personal information
- request correction or deletion
- object to processing on reasonable grounds
- withdraw consent where processing is based on consent
- opt out of direct marketing communications
- lodge a complaint with the Information Regulator of South Africa
Information Regulator Contact Details:
Website: https://www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:
Lepas Tzaneen
Email: info@lepastzaneen.co.za
