Cathy's Q4U Fairland
POPIA Compliant

Privacy Policy

Protection of Personal Information Act (POPIA) Compliance

Last updated: June 2026

1. Introduction

Cathy's Q4U Fairland ("we", "us", "our") is committed to protecting your personal information in compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and all applicable South African data protection legislation. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our number plate ordering services and website.

2. Information We Collect

We collect the following categories of personal information: • Identity Information: Full name, South African ID number, date of birth • Contact Information: Email address, phone number, physical address • Vehicle Information: Vehicle registration number, make, model, year, province of registration • Transaction Information: Order details, payment method, payment references, order history • Technical Information: IP address, browser type, device information, cookies and usage data We collect this information directly from you when you place an order, create an account, or interact with our website.

3. Purpose of Processing

We process your personal information for the following lawful purposes: • Order Fulfilment: To process and fulfil your number plate orders in accordance with South African vehicle registration requirements • Legal Compliance: To comply with the National Road Traffic Act and related regulations requiring identity verification for number plate manufacturing • Communication: To send order confirmations, status updates, and respond to your enquiries • Account Management: To manage your customer account and provide personalised services • Service Improvement: To analyse usage patterns and improve our website and services • Fraud Prevention: To detect and prevent fraudulent transactions

4. Legal Basis for Processing

We process your personal information based on the following legal grounds under POPIA: • Consent: Where you have given us explicit consent to process your information • Contractual Necessity: Processing necessary for the performance of a contract (your order) • Legal Obligation: Processing necessary to comply with vehicle registration laws • Legitimate Interest: Processing necessary for our legitimate business interests, balanced against your rights

5. Your Rights Under POPIA

As a data subject under POPIA, you have the right to: • Access: Request a copy of your personal information we hold • Correction: Request correction of inaccurate or incomplete personal information • Deletion: Request deletion of your personal information where legally permissible • Objection: Object to the processing of your personal information • Restriction: Request restriction of processing in certain circumstances • Data Portability: Request your data in a structured, commonly used format • Withdraw Consent: Withdraw previously given consent at any time • Complaint: Lodge a complaint with the Information Regulator of South Africa To exercise any of these rights, please contact our Information Officer using the details provided below.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal information, including: • Encryption of data in transit (SSL/TLS) and at rest • Secure password hashing using industry-standard algorithms • Access controls limiting data access to authorised personnel only • Regular security assessments and monitoring • Secure backup procedures Despite our best efforts, no method of transmission or storage is 100% secure. We will notify you and the Information Regulator of any data breach as required by POPIA.

7. Data Retention

We retain your personal information only for as long as necessary to: • Fulfil the purposes for which it was collected • Comply with legal obligations (including tax and vehicle registration record-keeping requirements) • Resolve disputes and enforce agreements Order records are retained for a minimum of 5 years in accordance with tax legislation. You may request earlier deletion of non-essential data by contacting our Information Officer.

8. Third-Party Sharing

We may share your personal information with: • Service Providers: Third-party services that assist in processing orders and payments, subject to strict data processing agreements • Government Authorities: Where required by law, such as the Department of Transport for number plate registration purposes • Payment Processors: To process your payment transactions securely We do not sell, rent, or trade your personal information to any third party for marketing purposes.

9. Cookies

Our website uses cookies and similar technologies. For detailed information about our use of cookies, please refer to our Cookie Policy page. You can manage your cookie preferences through your browser settings or via our cookie consent banner.

10. Information Officer Contact

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how your personal information is handled, please contact our Information Officer: • Business: Cathy's Q4U Fairland • Address: Shop 5, Fairland Centre, Beyers Naudé Dr, Fairland, Johannesburg • Email: [email protected] • Phone: 011 678 1234 You may also lodge a complaint with the Information Regulator of South Africa: • Website: www.justice.gov.za/inforeg • Email: [email protected]

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a revised effective date. We encourage you to review this policy periodically.