Privacy policy
What we collect, why we have it, and what you can make us do about it.
Draft wordingA draft written against the Protection of Personal Information Act. It describes what this website actually does, but it has not been reviewed by the business’s attorney or its Information Officer.
Who is responsible
The responsible party for your personal information, in POPIA’s terms, is the business below.
- Trading name
- 24/7 Adventure
- Registered name
- Not yet published
- Company registration
- Not yet published
- VAT number
- Not yet published
- Address
- Not yet published
- Trading hours
- Not yet published
- Phone
- Not yet published
What we collect
Only what the job needs:
- Your details — name, email address, phone number and delivery address, so we can take an order and get it to you.
- Your vehicle — make, model, year and registration number, so we can tell you what fits and record what we worked on.
- Your orders and bookings — what you bought, what you paid, and when you came in.
- Photographs of work we do — before and after pictures of your vehicle in our workshop, which may show your registration plate.
- Your account — an email address and a password we never see, held by Firebase Authentication.
We do not take card details. Payment is by EFT directly into our bank account, so no card number ever reaches this website.
Why we have it
To sell you things and fit them: taking payment, arranging delivery, booking workshop slots, keeping a service history, and handling returns and warranties. We also keep records the law requires us to keep, such as tax invoices.
Marketing
We only send marketing to customers who have ticked the box asking for it. If you have, we may contact you about products that fit a vehicle you have saved. You can withdraw that consent at any time — tell us and we will stop.
Who else sees it
- Google (Firebase) — hosts this website and stores its data.
- Our courier — gets your name, address and phone number, and only for orders being delivered.
- Our bank — sees the reference on your EFT payment.
- SARS and other authorities — where the law requires it.
We do not sell your personal information. To anyone. Ever.
Where it is stored
On Google’s infrastructure in the Netherlands (europe-west4), because Google offers no African region for this service. That makes it a cross-border transfer under section 72 of POPIA. The European Union’s data protection law provides protection comparable to POPIA, and Google is contractually bound to safeguard it.
How long we keep it
Order and invoice records for five years, because tax law requires it. Your account, garage and service history for as long as you have an account — a service history is only useful if it goes back. Work photographs for as long as the job record they belong to. Ask us to delete your account and we will, apart from records we are legally obliged to keep.
Keeping it safe
Your session is held in a cookie your browser cannot read from JavaScript. Our database denies access by default — order, price and stock data can only be written by our own server. Photographs of your vehicle are stored privately and are visible only to the workshop and to you, signed in; they are not on a public web address.
Your rights
Under POPIA you may:
- ask what personal information we hold about you
- ask us to correct or delete it
- object to us processing it
- withdraw consent to marketing
- complain to the Information Regulator
Start with us — send a message and we will deal with it. If we do not, the Information Regulator of South Africa can be reached at inforegulator.org.za.
Cookies
We use cookies to keep you signed in and to remember your cart. That is all — there is no advertising tracking on this site, and no third-party analytics following you around the internet.
Changes
If this policy changes we will publish the new version here. Material changes affecting how we use your information will be told to you directly.