Privacy Policy (POPIA)

1. Responsible party

CARVEXA is the responsible party for personal information processed on the platform. Contact ask@carvexa.co.za for any privacy matter, including our Information Officer.

2. What we collect

• Account and profile information: name, email, mobile number, location, gender (optional), preferred contact method.
• Listing information: vehicle details, photos and pricing.
• Verification information: identity documents, extracted identity details and facial images (see the Identity Verification & Biometric Data Notice).
• Communication and transaction information: enquiries, chat messages, offers, audit records.
• Device and usage information: views, interactions and analytics events.

3. Why we process it (POPIA lawful basis)

• To perform under our contract with you (operating your account, listings and enquiries).
• To comply with legal obligations (records, lawful requests).
• To protect legitimate interests (fraud prevention, safety, audit trails).
• With your consent, for special personal information including biometrics — which you may withdraw at any time.

4. Who we share it with

Trained CARVEXA verification staff (verification cases only); organisations you are authorised by (limited to what they need to manage your authorisation); service providers under contract; and authorities where the law requires. We never sell personal information.

5. Retention

Account and listing data is retained while your account is active and for a reasonable period afterwards for records and disputes. Verification documents and facial images are deleted after the verification decision and any appeal period (see the Biometric Notice for the specific period). Audit records are retained for fraud prevention and legal compliance.

6. Security

Sensitive documents are stored in secure private storage with access limited to authorised verification staff via short-lived secure links. ID numbers, passport numbers, dates of birth and biometric data are never displayed publicly — only verification statuses are.

7. Your rights

• Access the personal information we hold about you.
• Correct or update it.
• Request deletion where retention is not legally required.
• Object to or withdraw consent for optional processing.
• Lodge a complaint with CARVEXA and, if unresolved, with the Information Regulator of South Africa.