Privacy Notice

This notice explains how Fleet Telemetry Risk Advisory (Pty) Ltd (“FTRA”, “we”, “us”) processes personal information collected through www.ftra.co.za, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Responsible party

FTRA is the responsible party for personal information collected through this website.

• Trading name: FTRA
• Registered name: Fleet Telemetry Risk Advisory (Pty) Ltd
• Registration number: 2021/720186/07
• Physical address: 1026A Hyde Avenue, Eldoraigne, Centurion
• Email: info@ftra.co.za
• Telephone: 060 546 5590
• Website: www.ftra.co.za

2. Information Officer

Information Officer: Elka Du Piesanie
Email: info@ftra.co.za

Contact the Information Officer about any privacy request or concern described in this notice.

3. Personal information we collect

• Contact details: name, email address, telephone number, organisation and role, from any form.
• Quick Fleet Risk Audit: business and contact details, fleet size, telematics provider and your answers to the quick diagnostic. After payment, the files you share through our secure upload link: your telematics provider invoice, fleet asset list and monthly driver exception summary. Exception summaries can use driver codes instead of names. We do not request ID numbers, exact live locations, passwords or API keys.
• Business plan submissions: founder and business details, and the information you provide about your business idea, plans and resources.
• Award nominations: nominee and nominator names, contact details, organisation and contribution statements.
• Orders: the product or service bought, the amount paid, and the name, email address and payment reference that Payfast shares with us. Your card details are entered on Payfast's secure page and are never seen or stored by FTRA.
• Technical information: limited server logs (such as IP address and request time) used for security and preventing abuse.

4. Why we process it and our lawful basis

• To respond to enquiries and nominations — with your consent and in our legitimate interest in responding.
• To provide audits, feedback and digital products you buy — necessary to perform our contract with you.
• To receive payment and keep financial records — to perform the contract and comply with law.
• To keep the website and submissions secure and prevent fraud — our legitimate interest.

We do not sell personal information or use it for direct marketing without your separate consent.

5. Voluntary and required fields

Fields marked with an asterisk (*) are required to provide the service you request. Other fields are voluntary. If you do not provide required information, we may not be able to process your request.

6. Who receives it

Access is limited to authorised FTRA personnel who need it for the purpose concerned. We use service providers (operators) to run the website and handle form submissions, such as our website hosting provider (Vercel), our payment provider (Payfast) and our email provider, under terms that require them to protect the information.

We may also disclose information where the law requires it.

7. Cross-border processing

Some of our service providers store or process information outside South Africa, for example in the European Union or United States. We only use providers that are subject to laws, binding agreements or policies that give an adequate level of protection, as required by section 72 of POPIA.

8. Security safeguards

The safeguards currently in place include:

• HTTPS encryption for all pages and forms.
• Server-side validation and spam protection on all forms.
• Payments are processed by Payfast; FTRA never sees or stores card details.
• Access to submissions is limited to the FTRA team members who need it.

No system is completely secure. We review these measures regularly and will notify you and the Information Regulator as required by POPIA if there is a security compromise affecting your personal information.

9. How long we keep it

• Enquiries and unsuccessful award nominations: up to 12 months after our last contact.
• Audit submissions and business plan submissions: up to 24 months after the service is completed.
• Orders and payment records: 5 years, as required by South African tax law.

When information is no longer needed, it is deleted or de-identified.

10. Cookies and analytics

This website does not use advertising or analytics cookies.

11. Your rights

Subject to POPIA, you may:

• ask whether we hold personal information about you and request a copy of it;
• ask us to correct, update or delete it;
• object to processing based on our legitimate interests;
• withdraw consent where processing is based on consent; and
• lodge a complaint with the Information Regulator.

Send requests to the Information Officer or through our contact form. We may need to confirm your identity before acting on a request.

12. Complaints

If you are unhappy with how we have handled your information, please contact the Information Officer first. You may also complain to the Information Regulator (South Africa): www.inforegulator.org.za.

13. Children's information

This website is intended for businesses and adults. We do not knowingly collect personal information about children. If you believe a child's information has been submitted, please contact us so we can delete it.

14. Changes to this notice

We may update this notice. The “last updated” date at the top shows when it last changed.