Privacy Policy

Last updated: 6 March 2026

GetVooma ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation. This Privacy Policy explains what information we collect, how we use it, and your rights as a data subject.

1. Information We Collect

We collect the following categories of personal information:

  • Account information: Name, email address, phone number, and password (hashed) when you register
  • Vehicle details: Make, model, year, VIN, licence plate, and odometer readings
  • Location data: Your area or suburb, used to match you with nearby garages
  • Service history: Records of services requested, quotes received, bookings made, and reviews submitted
  • Communication data: Messages exchanged through the platform between you and garages
  • Usage data: Pages visited, features used, and performance metrics (collected via privacy-friendly analytics with no personal identifiers)

2. How We Use Your Information

We use your personal information to:

  • Provide, maintain, and improve the GetVooma platform
  • Match you with garages and facilitate the quoting and booking process
  • Send you notifications about your service requests, bookings, and reminders via email
  • Generate anonymised analytics to improve the platform
  • Comply with legal obligations

3. Legal Basis for Processing (POPIA)

We process your personal information on the following grounds:

  • Consent: You provide consent when you register and agree to these terms
  • Contract performance: Processing is necessary to provide the services you have requested
  • Legitimate interest: To improve our platform, prevent fraud, and ensure security
  • Legal obligation: Where we are required to retain or disclose information by law

4. Sharing Your Information

We share your personal information only in the following circumstances:

  • With garages: When you request a quote or make a booking, we share relevant vehicle and contact details with the garage so they can provide the service
  • Notification providers: We use Resend to deliver email notifications on your behalf
  • Hosting and infrastructure: Our platform is hosted on Vercel and uses Supabase for data storage, both of which maintain appropriate security standards
  • Legal requirements: Where required by law, regulation, or court order

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as your account is active and as necessary to provide our services. If you request deletion of your account, we will delete or anonymise your personal information within a reasonable period, except where we are required to retain it by law (e.g. for tax or accounting purposes).

6. Your Rights Under POPIA

As a data subject under POPIA (Section 11 and related provisions), you have the right to:

  • Access: Request confirmation of whether we hold your personal information and obtain a copy of it
  • Correction: Request that inaccurate or incomplete information be corrected
  • Deletion: Request deletion of your personal information where it is no longer necessary
  • Objection: Object to the processing of your personal information on reasonable grounds
  • Data portability: Request your personal information in a structured, commonly used format
  • Withdraw consent: Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal

To exercise any of these rights, contact our Information Officer using the details below.

7. Information Officer

Our designated Information Officer is responsible for ensuring compliance with POPIA. You may contact them for any privacy-related requests:

Email: privacy@getvooma.co.za

You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been mishandled.

8. Cookies

GetVooma uses essential session cookies for authentication purposes. These are necessary for the platform to function and cannot be disabled. We use privacy-friendly analytics (Vercel Web Analytics) that do not use cookies and do not track individual users across sites.

9. Security

We take reasonable technical and organisational measures to protect your personal information, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Row-level security (RLS) ensuring users can only access their own data
  • Secure authentication via Supabase Auth with hashed passwords
  • Token-based access for public-facing pages (no authentication data exposed)

10. Children

GetVooma is not intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users via email or an in-app notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

For questions about this Privacy Policy or how we handle your personal information, please contact us at privacy@getvooma.co.za.