POPIA / Data Privacy

Who we are

Novavance (Pty) Ltd ("Novavance", "we") is the responsible party for personal information collected through this website.

Our Information Officer is Pierre Joubert, who can be reached at pierre@novavance.co.za or on +27 63 758 3701.

What we collect

• When you send the contact form: your name, company, email address, phone number if you give it, the areas you are interested in, your message and your consent.
• When you email us: your email address and anything you include in the message.
• When you visit the site: our hosting provider keeps standard server logs, such as IP address, browser type, the page requested and the time, to keep the site secure and working.

We do not use analytics, advertising or tracking cookies. When you send the contact form, the site sets one strictly necessary session cookie that limits repeated submissions. It expires when you close your browser.

We do not ask for special personal information, such as health, religious or biometric information. Please do not include it in a message.

Why we use it

• To respond to your enquiry and arrange the conversation or demonstration you asked for.
• To keep a record of our correspondence with you.
• To protect the website against spam and misuse.

We process this information with your consent, which you give when you send the form, and where it is needed to respond to a request you have made or to keep the website secure.

We do not sell personal information. We do not use it for direct marketing unless you have agreed to receive marketing, and you can withdraw that agreement at any time.

What you have to give us

Name, company and email address are required so that we can reply. Everything else is optional. If you would rather not use the form, you can email us at pierre@novavance.co.za.

Who we share it with

Only the people at Novavance who need it to respond to you. Our website and email hosting providers process information on our behalf as operators, under agreements that require them to keep it confidential and secure. We will disclose information where the law requires it.

If a provider stores information outside South Africa, we only use one that is bound by law or by agreement to protect it to a standard substantially similar to POPIA.

How long we keep it

We keep enquiry records for as long as we need them to respond and follow up, and for no longer than two years after our last contact with you, unless the law requires us to keep them longer. We then delete them or remove anything that identifies you. Server logs are kept by our hosting provider for a limited period under its own policy.

How we protect it

We use reasonable technical and organisational measures to protect personal information against loss, damage and unauthorised access. The site is served over an encrypted connection, enquiry records are stored where the public cannot reach them, and access is limited to the people who need it.

If we have reason to believe your personal information has been accessed by someone without authority, we will tell you and the Information Regulator as POPIA requires.

Your rights

Under POPIA you may:

• ask whether we hold personal information about you, and ask for a copy of it;
• ask us to correct or delete information that is inaccurate, out of date, incomplete or no longer needed;
• object to our processing of your information, on reasonable grounds;
• withdraw your consent at any time, without affecting processing that has already taken place;
• object to direct marketing;
• complain to the Information Regulator.

To use any of these rights, email pierre@novavance.co.za. We will confirm your identity before acting on a request and reply within a reasonable time.

You can contact the Information Regulator at inforegulator.org.za. Complaints go to POPIAComplaints@inforegulator.org.za and general enquiries to enquiries@inforegulator.org.za.

POPIA and the Radix platform

Radix is in development and is being designed with POPIA's conditions for lawful processing in mind. Access to a verified vehicle record is permissioned: each authorised party receives only the information relevant to its entitlement and legitimate purpose.

Vehicle data that can identify a person, such as how or where a driver uses a vehicle, is personal information under POPIA and will be treated that way. Before any real vehicle data is processed, the roles and terms for each pilot, including who is the responsible party and who is an operator, will be agreed in writing with the organisations involved.

Changes to this notice

We may update this notice. The date at the top of the page shows when it last changed.