Privacy Policy

Auto-Go (Pty) Ltd (“Auto-Go”, “we”, “us”, or “our”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and general data protection best practices.

This Privacy Policy applies to all workshops, suppliers, and visitors using the Auto-Go platform, website, and related services. By registering or using our platform, you acknowledge that you have read and understood this policy.

Workshop Information

• Business name, trading name, and company registration number
• VAT number and RMI member number
• Contact person details: full name, position, phone, WhatsApp, email address
• Physical address: street, suburb, city, province, postal code
• Workshop profile: number of bays, specialisations, monthly parts spend
• Payment preferences and referral source

Supplier Information

• Company name, registration number, VAT number, and type of supplier
• Contact person details and business location
• Parts categories, brands carried, SKU range, and trade terms
• Banking institution (institution name only — no account numbers stored on our platform)

Usage Data

• Login timestamps and session activity
• Search queries and parts viewed
• Order history and transaction records
• Device type, browser, and approximate location (city level)

We use your personal information to:

• Process orders, confirmations, and deliveries
• Manage credit accounts and payment terms
• Send order notifications, invoices, and statements
• Verify business identity and conduct KYC checks during onboarding
• Route deliveries via our logistics partner
• Improve our platform, resolve disputes, and provide customer support
• Comply with legal and regulatory obligations (SARS, Companies Act)
• Send service communications (not marketing without consent)

We do not sell your personal information to third parties. Information is shared only as follows:

• Logistics partners: Delivery address is shared with UrgentGo or equivalent courier services solely for the purpose of completing the delivery. No other information is shared.
• Workshop anonymity: Workshop business names and contact details are shared with suppliers only as necessary to fulfil orders (e.g. delivery address and contact name).
• Supplier confidentiality: Supplier identities, pricing, and trade terms are never disclosed to workshops.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of Auto-Go, its users, or the public.

• All data is encrypted in transit using SSL/TLS
• Data is stored on Supabase infrastructure with enterprise-grade security controls
• Access is governed by role-based permissions — no employee can access data beyond their role
• Admin access is protected by access codes and secure role-based authentication
• We conduct regular security reviews and vulnerability assessments

As a data subject, you have the following rights:

• Right of access: Request a copy of all personal information we hold about you
• Right to correction: Request that inaccurate or incomplete information be corrected
• Right to deletion: Request deletion of your information, subject to legal retention requirements (see Section 7)
• Right to object: Object to the processing of your information for specific purposes
• Right to lodge a complaint: Lodge a complaint with the Information Regulator (South Africa) at inforeg.org.za

To exercise any of these rights, contact us at privacy@auto-go.co.za. We will respond within 30 days.

• Account data: Retained for the duration of your relationship with Auto-Go, plus 5 years after account closure
• Order and transaction records: Retained for 7 years (required for SARS tax compliance)
• Usage logs: Retained for 90 days
• Support communications: Retained for 3 years

Auto-Go uses only essential cookies required for authentication and session management. We do not use tracking, analytics, or advertising cookies. No third-party tracking scripts are loaded on our platform.

We may update this Privacy Policy from time to time. We will notify all registered users of material changes via email at least 14 days before the changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

For privacy-related queries, requests, or complaints: