Draft for attorney review
Privacy Notice (POPIA)
1. Who is responsible
Rolla is operated by [Company name] (Pty) Ltd, the responsible party under the Protection of Personal Information Act, 2013 (POPIA). Information Officer: privacy@rolla.taxi. Registered address: [registered office address].
2. What we collect
Account: your email address, a generated handle, and the date you accepted these terms. Reports: the plate, categories, an approximate location rounded to about 500 metres, the time, and any private note. Security: device and browser type, error logs and rate-limit events. Complaints and requests you send us.
3. What we never collect
Driver names or photos, your exact GPS position, your contacts, or payment details.
4. Why
To run Rolla and show aggregated safety information about vehicles; to prevent spam, abuse and false reports; to respond to complaints, disputes and legal requests.
5. Lawful basis
Your consent (section 11(1)(a)) and our legitimate interest in road safety (section 11(1)(f)). A registration number can relate to a vehicle's owner; we process plates only for safety purposes and show them only in aggregate after the minimum report threshold.
6. What the public sees
The plate, report categories, a rounded area and time, and a rating only after 3 reports from 3 different accounts within 30 days. Never your email or anything that identifies you.
7. Who we share with
We never sell personal information. Service providers that host Rolla and send emails, under written agreements. Authorities, only where the law requires it, for example under a court order.
8. Transfers outside South Africa
Our hosting provider may store data outside South Africa. Where it does, we rely on the safeguards in section 72 of POPIA.
9. How long we keep it
Account data until you delete your account. Reports for [period], then only in aggregated form. Security logs 90 days. Private notes are deleted after moderation.
10. Security
Encryption in transit and at rest, access limited to authorised moderators using two-factor authentication, and a log of every administrative action.
11. Your rights
Access, correct or delete your information (Delete my account is in Profile); object to processing or withdraw consent; complain to us through the app or to the Information Regulator at inforegulator.org.za.
12. Age
Rolla is for people aged 18 and over.
13. Changes
We will tell you in the app before material changes take effect.