1. Introduction

LisaCars.co.za (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA), the Promotion of Access to Information Act, 2000 (PAIA), and other applicable laws in South Africa. It applies to all users, customers, and visitors of our website and services.

By using our website or services, you consent to the practices described in this policy.

2. Information We Collect

We collect personal information necessary to operate our business and provide services, including:

2.1 Personal and Contact Information

• Full name, date of birth, gender, and nationality
• Residential or business address
• Email address and phone numbers

2.2 Vehicle Information

• Vehicle identification number (VIN), registration details, and service history
• Purchase, leasing, or finance records

2.3 Financial Information

• Banking details, credit history, income information, and payment records

2.4 Employment Information

• Employer name, employment status, and income details for finance applications

2.5 Communication and Online Information

• Correspondence via email, phone, or chat
• IP address, browser type, cookies, and website usage patterns

2.6 Third-Party Sources

• Credit bureaus, vehicle history databases, and other service providers with your consent

3. Purpose of Processing

We process personal information for the following purposes:

• Vehicle sales, leasing, and finance processing
• Service, maintenance, and warranty administration
• Customer support and complaint resolution
• Marketing and promotional communications
• Compliance with legal obligations
• Fraud prevention and credit checks
• Improving products, services, and website functionality

4. Legal Basis for Processing

We process personal information based on:

• Consent: You have provided explicit consent
• Contractual Necessity: Required to fulfill our contractual obligations
• Legal Obligation: Compliance with South African law
• Legitimate Interests: Pursuit of legitimate business interests that do not override your rights

5. Marketing Communications

With your consent, we may send promotional emails, SMS, or newsletters. You may opt out at any time by clicking “unsubscribe” in communications or contacting us at support@lisacars.co.za.

We do not share your personal information for direct marketing without your consent.

6. Sharing and Disclosure

We may share your personal information with:

• Service providers and partners who assist us in providing services
• Financial institutions and credit bureaus
• Regulatory and government authorities as legally required
• Affiliated dealerships for servicing, warranty, or trade-ins

All third parties are required to handle your personal information securely and comply with data protection laws.

8. Data Security

We implement strict security measures including:

• Data encryption and secure storage
• Firewalls and intrusion detection systems
• Access controls and regular employee training
• Routine security audits

Despite these measures, no method of transmission over the internet is 100% secure.

9. Data Retention and Disposal

We retain personal information only as long as necessary to:

• Fulfill contractual or service obligations
• Comply with legal or regulatory requirements
• Resolve disputes or enforce agreements

When information is no longer needed, it is securely deleted or anonymized. 9. Data Retention and Disposal

We retain personal information only as long as necessary to:

• Fulfill contractual or service obligations
• Comply with legal or regulatory requirements
• Resolve disputes or enforce agreements

When information is no longer needed, it is securely deleted or anonymized.

10. Children’s Privacy

Our services are not directed at children under 18. We do not knowingly collect information from minors. If we become aware that we have inadvertently collected information from a minor, we will take steps to delete it.

11. Automated Decision-Making

We may use automated systems for credit assessment or vehicle finance approvals. Decisions are reviewed by qualified staff to ensure fairness, accuracy, and compliance with the law.

12. Cookies and Tracking

We use cookies and similar technologies to:

• Enhance website functionality
• Track user interactions for analytics
• Deliver personalized content

You may adjust your browser settings to refuse cookies, but some features may not function properly.

13. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these
websites. We encourage you to review their privacy policies before providing personal information.

14. Data Breach Response

In the event of a data breach:

• We will promptly investigate and contain the breach
• Notify affected users where required by law
• Take corrective action to prevent recurrence

15. Your Rights

Under POPIA, you have the right to:

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion, subject to legal limitations
• Objection: Object to processing for certain purposes
• Consent Withdrawal: Withdraw previously given consent

To exercise your rights, contact support@lisacars.co.za.

16. Complaints and Dispute Resolution

If you are dissatisfied with how we handle your personal information:

1. Contact our Data Protection Officer at support@lisacars.co.za
2. Escalate to the Information Regulator of South Africa if unresolved:
• Website: https://www.justice.gov.za/inforeg/
• Phone: +27 12 366 8000

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in practices, legal requirements, or business operations.

The updated policy will be posted on our website with the revised effective date.