🔒 Privacy Policy

Luu Travels & Logistics (Pty) Ltd ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

1. Information We Collect

1.1 Personal Information

• Full Name: For identification and communication purposes.
• Email Address: For account management, booking confirmations, and communications.
• Phone Number: For trip coordination, driver communication, and emergency contact.
• Physical Address: For pickup and drop-off locations.
• Payment Information: Processed securely through Paystack; we do not store card details.
• Date of Birth: For age verification when required.
• Government ID: For driver verification (drivers only).

1.2 Usage Data

• Location Data: GPS location for trip tracking and driver assignment.
• Device Information: IP address, browser type, operating system, and device type.
• Usage Patterns: Pages visited, features used, and interaction with our platform.
• Cookies: Small data files stored on your device to enhance your experience.
• Log Files: Server logs that record your activity on our platform.

2. How We Use Your Information

• Service Provision: To book and manage your trips.
• Communication: To send booking confirmations, updates, and notifications.
• Driver Coordination: To match you with available drivers.
• Payment Processing: To process your payments securely through Paystack.
• Customer Support: To assist you with inquiries and resolve issues.
• Service Improvement: To analyze usage patterns and improve our services.
• Legal Compliance: To comply with applicable laws and regulations.
• Marketing: To send promotional offers (with your consent).

3. Legal Basis for Processing

• Consent: You have given us explicit consent to process your data.
• Contract: Processing is necessary for the performance of a contract with you.
• Legal Obligation: Processing is necessary to comply with legal requirements.
• Legitimate Interest: Processing is necessary for our legitimate business interests.
• Vital Interest: Processing is necessary to protect your vital interests.

4. Information Sharing and Disclosure

• Drivers: We share your pickup location, phone number, and special requests with your assigned driver.
• Paystack: We share payment information with Paystack for secure payment processing.
• Service Providers: We may share data with trusted third-party service providers who assist us in operating our platform.
• Legal Requirements: We may disclose information if required by law or in response to legal proceedings.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred.
• With Your Consent: We may share information with third parties with your explicit consent.

5. Data Security

• Encryption: All data is encrypted during transmission using SSL/TLS protocols.
• Access Control: Access to personal data is restricted to authorized personnel only.
• Secure Storage: Data is stored in secure servers with industry-standard security measures.
• Regular Audits: We conduct regular security audits to identify and address vulnerabilities.
• Incident Response: We have protocols in place to respond to data breaches promptly.
• Data Minimization: We only collect and retain data necessary for our services.

6. Your Rights Under POPIA

• Right to Access: You have the right to request access to your personal data.
• Right to Rectification: You have the right to correct inaccurate or incomplete data.
• Right to Deletion: You have the right to request deletion of your personal data.
• Right to Object: You have the right to object to the processing of your data.
• Right to Restrict: You have the right to restrict the processing of your data.
• Right to Data Portability: You have the right to receive your data in a portable format.
• Right to Withdraw Consent: You have the right to withdraw consent at any time.
• Right to Complain: You have the right to lodge a complaint with the Information Regulator.

7. Data Retention

• Active Accounts: We retain your data for as long as your account is active.
• Inactive Accounts: We retain data for 5 years after account deactivation for legal and operational purposes.
• Transaction Data: We retain transaction data for 7 years to comply with tax and legal requirements.
• Driver Data: We retain driver data for 7 years after deactivation.
• Deleted Data: When you delete your account, we anonymize your data within 30 days.
• Cookie Data: Cookie data is retained for 12 months from your last visit.

8. International Data Transfers

• Your data is stored on servers located in South Africa.
• We do not transfer your personal data outside of South Africa without your consent.
• If we do transfer data internationally, we ensure appropriate safeguards are in place.
• Paystack processes payments and may transfer data internationally in compliance with applicable laws.

9. Cookies and Tracking Technologies

• Essential Cookies: Necessary for the platform to function properly.
• Performance Cookies: Help us understand how you use our platform.
• Functionality Cookies: Remember your preferences and settings.
• Marketing Cookies: Used to deliver relevant advertisements (with your consent).
• You can manage cookie preferences in your browser settings.
• Disabling cookies may affect the functionality of our platform.

10. Third-Party Services

• Paystack: Processes payments securely. Read their privacy policy at https://paystack.com/privacy.
• Google Maps: Provides mapping and location services. Read their privacy policy at https://policies.google.com/privacy.
• OpenRouteService: Provides routing and geocoding services. Read their privacy policy at https://openrouteservice.org/privacy.
• Supabase: Provides database and authentication services. Read their privacy policy at https://supabase.com/privacy.
• WhatsApp: Used for communication. Read their privacy policy at https://www.whatsapp.com/legal/privacy-policy.

11. Children's Privacy

• Our services are not directed at children under the age of 18.
• We do not knowingly collect personal information from children.
• If you are a parent or guardian and believe your child has provided us with personal data, please contact us.
• If we learn that we have collected data from a child, we will delete it promptly.

12. Changes to This Privacy Policy

• We may update this Privacy Policy from time to time.
• Changes will be communicated via email or on our website.
• The date of the latest revision is indicated at the top of this policy.
• Continued use of our services constitutes acceptance of the updated policy.
• If you do not agree to the updated policy, you must cease using our services.

13. Information Regulator

• Information Regulator (South Africa): https://www.justice.gov.za/inforeg/
• You have the right to lodge a complaint with the Information Regulator if you believe your privacy rights have been violated.
• Contact the Information Regulator at inforeg@justice.gov.za or 012 406 4818.

14. Contact Us

• Company: Luu Travels & Logistics (Pty) Ltd
• Email: LuuTravels611@gmail.com
• Phone: 076 845 7061
• Address: Windmill Park Ext 32, Boksburg, Gauteng, South Africa
• Data Protection Officer: Prince Mahapa
• Business Hours: Monday to Friday, 08:00 - 17:00

← Back to Home