This document is a draft template. Have a qualified attorney review it before relying on it for live customer relationships.

Privacy Policy

How we collect, use, store, and protect your personal information, POPIA and GDPR aligned.

Version 1.0.0-draft·Effective 15 May 2026·POPIA (South Africa) · GDPR (EU/UK) · applicable African data laws

1. Who We Are

Afrika Cargo Flow Logistics (Pty) Ltd ("we", "us") is the responsible party / data controller for personal information processed via the afrikacargoflow.com platform. Our Information Officer is [Information Officer name, to be appointed], contactable at infoofficer@afrikacargoflow.com.

2. Personal Information We Collect

  • Identity: full name, surname, ID/passport, date of birth.
  • Contact: email, mobile, physical address.
  • Company: registration number, VAT number, trading address.
  • Financial: banking details, payment references, FICA documents.
  • Operational: cargo descriptions, declared values, pickup and delivery addresses, GPS data.
  • Technical: IP address, browser, device, cookies, session logs.

3. Why We Process It (Lawful Basis)

  • Performance of contract: to provide quotes, bookings, tracking, invoicing.
  • Legal obligation: FICA, tax, customs, and POPIA / GDPR record-keeping.
  • Legitimate interest: fraud prevention, route optimisation, service improvement.
  • Consent: marketing communications, optional analytics cookies.

4. Who We Share It With

  • Verified transporters and warehouse operators executing your booking.
  • Cross-border clearing agents and customs authorities.
  • Payment processors (PayFast, banks for SWIFT settlements).
  • KYC providers (e.g. Smile ID for ID verification).
  • Cloud and infrastructure providers (Lovable Cloud / Supabase, Cloudflare).
  • Regulators and law enforcement when legally required.

5. International Transfers

Data may be transferred to other African countries to fulfil cross-border freight services. Where transfers occur to or from the EU/UK, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards.

6. How Long We Keep It

We retain personal information only as long as necessary. See our Data Retention Policy for category-by-category periods. In summary: tax and customs records for 5 to 7 years; KYC for 5 years after relationship ends; tracking data for 24 months; marketing consent until withdrawn.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction or deletion (right to be forgotten).
  • Object to or restrict processing.
  • Withdraw consent at any time.
  • Receive a copy of your data in a portable format (data portability).
  • Lodge a complaint with the Information Regulator (SA) or your local supervisory authority (EU/UK).

Exercise these rights via your account at /account/privacy or email privacy@afrikacargoflow.com.

8. Security

We use industry-standard safeguards including encryption in transit (HTTPS/TLS), encryption at rest, role-based access control, audit logging of all sensitive actions, and regular security reviews.

9. Cookies

See our Cookie Policy for details on what cookies we use and how to manage them.

10. Children

Our services are not directed to persons under 18. We do not knowingly collect data from children.

11. Changes

We will notify you of material changes by email and post the updated policy on this page.

12. Contact

Information Officer: [Information Officer name, to be appointed]
Email: infoofficer@afrikacargoflow.com
Regulator: Information Regulator (South Africa) inforegulator.org.za