FuelSync · Legal
Privacy Policy
Last updated · 6 June 2026
FuelSync Africa (Pty) Ltd is the responsible party for the personal information processed through the platform. This policy describes what we collect, why, with whom we share it, how long we keep it, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Information we collect
- Identity & contact: full name, ID or passport number, business registration, VAT number, addresses, phone, email.
- Commercial: orders, quotes, invoices, payment references, wallet balances, dispute history.
- Operational: depot locations, vehicle registrations, driver IDs, GPS traces, meter telemetry, photographs from POD.
- Technical: IP address, browser fingerprint, device identifiers, cookie identifiers, session logs.
- Communications: messages exchanged through the FuelSync inbox, WhatsApp, SMS and email.
2. Why we process it (lawful basis)
- Performance of contract — running the marketplace, processing orders and payments.
- Legal obligation — KYC, AML, tax (VAT, customs and excise), DMRE/NERSA reporting.
- Legitimate interest — fraud prevention, Trust Score modelling, security monitoring, product analytics.
- Consent — direct marketing communications (you can withdraw consent at any time).
3. Who we share with
Supplier and buyer counterparties to your transactions, transporters and brokers you transact with, payment processors (Ozow and other licensed PSPs), KYC / verification vendors, cloud infrastructure providers (Supabase, Cloudflare, AWS), regulators and law-enforcement bodies where legally compelled, and our professional advisors under confidentiality.
We do not sell your personal information.
4. Cross-border transfer
Some processors are located outside South Africa. We rely on Section 72 of POPIA — they are subject to binding rules or laws that provide an adequate level of protection, or we have your consent.
5. Retention
We keep records as long as you have an account plus the period required by tax, customs and commercial law (typically 5 years after the last transaction). POD telemetry and dispute evidence are retained for 7 years.
6. Your rights
You may request access, correction, or deletion of your personal information; object to processing; withdraw consent; and lodge a complaint with the Information Regulator (South Africa) at inforeg@justice.gov.za.
Contact our Information Officer at privacy@fuelsync.africa.
7. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access is least-privilege and audited. Suspected breaches are reported to the Information Regulator and affected users without undue delay, in line with POPIA Section 22.
Questions about this policy?
Email legal@fuelsync.africa or visit our contact page. FuelSync Africa (Pty) Ltd · Johannesburg, South Africa.
