Privacy Policy

Last updated: 25 October 2026

1. Who we are

This policy explains how Sayless Logistics (Pty) Ltd (registration number [CIPC registration number]), trading as Sayless Logistics ("we", "us", "our"), processes personal information. We are the responsible party under the Protection of Personal Information Act 4 of 2013 ("POPIA") for the information described here.

Our address is [Street address], Foreshore, Cape Town, 8001, Western Cape, South Africa. Our Information Officer is [Information Officer name], who can be reached at privacy@saylesslogistics.co.za or on 0XX XXX XXXX.

This policy covers our website at https://saylesslogistics.pages.dev, our quote and driver application forms, and the transport services we provide to commuters and business clients. Our use of browser storage is explained separately in our Cookie Policy.

2. The information we collect

Quote and contact requests

When you ask for a quote or contact us through the website, we collect:

• your name and mobile number;
• your email address, if you choose to give it;
• the type of enquiry, your collection area and your drop-off area;
• for business enquiries, your company name and the number of staff to be transported;
• anything you write in the message box; and
• a record that you ticked the consent box.

Driver applications

When you apply to drive with us, we collect your name, mobile number, email address, the area you live in, how many years you have driven professionally, the routes you want, whether you will use your own vehicle or a fleet vehicle, your licence code, whether you hold a Professional Driving Permit (PrDP), whether you have held your licence for three years or more, your preferred call time, any notes you add, and your consent to be contacted and to vetting checks.

If your application goes further, and only with your explicit consent at that stage, we carry out vetting offline. This may include verifying your identity document, driver's licence and PrDP, a criminal record check, confirming your right to work in South Africa, contacting your references and, if you drive your own vehicle, inspecting it and checking its roadworthy and insurance documents.

Passengers and business clients

To run the service, we keep the details needed to collect and drop off each passenger: name, mobile number, collection and drop-off points, booked times, trip records (including missed collections and credits) and, for business clients, the contact and billing details of the person who manages the account.

Information collected automatically

Every form submission also stores:

• a salted hash of your IP address, used only to limit repeated or automated submissions. We never store your raw IP address, and the hash cannot practically be turned back into it;
• your browser's user-agent (the browser and device type it reports); and
• the page you were on when you submitted the form.

When you use the savings calculator's WhatsApp button, we receive an anonymous record of the figures you priced: the route areas, distance, package and monthly cost. It contains no name or contact details.

We do not use analytics, advertising or tracking cookies, and we do not use social media pixels.

3. Why we use it, and our lawful basis

POPIA allows us to process personal information only where we have a lawful reason (section 11). We rely on the following:

• To answer your enquiry and prepare a quote — your consent, and steps you asked us to take before a contract.
• To provide transport — planning routes, collecting and dropping off passengers, and keeping trip records. This is needed to perform our contract with you or your employer.
• To bill and collect payment — performance of the contract, and our legal duties to keep financial records.
• To assess and vet driver applicants — your consent, and our legitimate interest and duty of care in making sure only suitable people carry passengers.
• To keep passengers and drivers safe and to deal with incidents, complaints and claims — our legitimate interests and legal obligations.
• To protect our website from abuse — our legitimate interest in preventing spam and automated attacks, using the hashed IP address.
• To comply with the law — for example tax, transport and labour laws, and lawful requests from authorities.

We collect information for these specific purposes only (section 13) and will not use it for something unrelated without telling you and, where required, asking for your consent again.

4. Special personal information and criminal records

POPIA gives extra protection to special personal information, which includes information about a person's criminal behaviour (sections 26 and 27). We only process this kind of information about driver applicants and drivers, and only for the criminal record check.

We do this only with your explicit consent, given at the vetting stage, and because carrying passengers safely, often late at night, requires it. The result is seen only by the people who make the hiring decision, is kept securely, and is not used for any other purpose. You may withdraw your consent, but we cannot then assign you to drive passengers.

We do not ask quote or contact enquirers for special personal information. Please do not include health, religious or similar details in the message box unless they are needed for your transport (for example, an accessibility need), in which case you consent to us using them for that purpose.

5. Direct marketing

We will only send you marketing messages about our services if you are an existing customer and the messages are about similar services, or if you have given us your consent (section 69). Every marketing message tells you how to opt out, and you can object at any time by emailing privacy@saylesslogistics.co.za. Opting out does not affect messages we must send to run your service, such as trip and billing notices.

6. Who we share it with

We do not sell or rent personal information. We share it only where needed:

• Our drivers receive the name, mobile number and collection and drop-off points of the passengers on their route, and nothing more.
• Business clients receive trip records for their own staff, so they can check what they are billed for.
• Service providers (operators) who process information on our behalf, such as our website and database host, under written terms that require them to keep it confidential and secure (sections 20 and 21).
• Vetting and verification providers, for driver checks you have consented to.
• Professional advisers, insurers and authorities, where needed for a claim, an incident, or where the law requires it.

WhatsApp

Our WhatsApp links open WhatsApp, a service run by Meta. Anything you send us through WhatsApp is also handled under WhatsApp's own terms and privacy policy, which we do not control.

7. Transfers outside South Africa

Our website and form database are hosted by Cloudflare, Inc. The database is stored in Western Europe, so information you submit through our forms is transferred outside South Africa.

Section 72 of POPIA allows this where the recipient is bound by law, binding corporate rules or a binding agreement that gives an adequate level of protection, substantially similar to POPIA. Cloudflare is bound by its data processing terms, which include contractual safeguards for personal information. Information in Western Europe is also protected by the European Union's General Data Protection Regulation.

Pages on our site also load fonts from Google and an animation library from Cloudflare's content network. These requests reveal your IP address to those providers, as explained in our Cookie Policy.

8. How we protect it

We take appropriate, reasonable technical and organisational measures to prevent loss, damage, unauthorised access and unlawful processing (section 19). These include encrypted connections (HTTPS) for the whole site, storing only a salted hash of IP addresses, limiting access to staff who need it, a protected staff sign-in for our admin tools, and giving drivers only the details of passengers on their own route.

No system is completely secure. If we have reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you as soon as reasonably possible, as section 22 requires, and tell you what we know and what you can do to protect yourself.

9. How long we keep it

We keep personal information only for as long as the purpose needs, or as long as the law requires or allows (section 14). In practice:

• quote and contact enquiries that do not become a service are deleted once they are no longer needed to follow up;
• passenger and trip records are kept for the length of the service and afterwards for as long as needed to deal with billing questions, claims and legal record-keeping duties;
• financial records are kept for the periods set by tax and company law;
• unsuccessful driver applications, including any vetting results, are deleted once the decision is made and any reasonable period to answer questions about it has passed; and
• records of drivers we engage are kept for the length of the engagement and afterwards as labour and tax laws require.

When information is no longer needed, we delete or destroy it, or de-identify it so it can no longer be linked to you.

10. Your rights

Under POPIA you have the right to:

• Know whether we hold personal information about you, and access it (section 23);
• ask us to correct information that is inaccurate, out of date, incomplete or misleading, or to delete information we are no longer allowed to keep (section 24);
• object to processing based on our legitimate interests, and object at any time to direct marketing (section 11(3));
• withdraw your consent where we rely on it, without affecting processing that took place before; and
• complain to the Information Regulator.

To use any of these rights, email privacy@saylesslogistics.co.za. We may ask you to prove your identity first so we do not give your information to someone else. We will respond within a reasonable time. Formal requests for records can also be made under our PAIA Manual.

Complaints to the Information Regulator

Please contact us first so we can try to put things right. If you are not satisfied, you may complain to the Information Regulator (South Africa):

• Website: inforeg.org.za
• Complaints: complaints.IR@inforeg.org.za
• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

11. Children

Our website is not aimed at children, and we do not knowingly collect information from anyone under 18 through it. If a minor travels with us, a parent, guardian or the business client arranging the trip provides and consents to the information we need.

12. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last updated. If a change materially affects how we use your information, we will tell current customers directly.

13. Contact us

For any question about this policy or your information, contact our Information Officer at privacy@saylesslogistics.co.za, call 0XX XXX XXXX, or use our contact page. See also our Terms of Service, Cookie Policy and PAIA Manual.