Privacy notice
How Lotsure handles personal information under the Protection of Personal Information Act (POPIA).
Draft for legal review. This notice has not been checked by a lawyer and is not in force.
Items marked TBC need a decision from The House Edge before it is published.
Who we are
Lotsure is a product of The House Edge registered name and number TBC. Our Information Officer is name and contact TBC, registered with the Information Regulator.
Two roles, depending on the information
| Information | Who decides how it’s used |
|---|---|
| Car checks a dealership does: VINs, registration, kilometres, photos, findings, reports | The dealership. We process it on the dealership’s behalf, under our agreement with them (we are the “operator” in POPIA terms). |
| Accounts for the dealer portal and the app: names, email addresses, phone numbers, who did which check | The House Edge. |
| Demo requests sent from this website | The House Edge. |
What we collect, and why
Car checks
The licence disc’s details, the VINs read from the car’s body and computers, kilometres, fault codes, the photos staff take, and the result. A licence disc doesn’t show the owner’s name, but a registration number or VIN can be linked to a person, so we treat them as personal information. We use it only to produce the check and its report, and to show the dealership its own history.
Staff are asked not to photograph people, identity documents or anything other than what the check needs. If a photo captures more, the dealership can delete it.
Accounts
Name, work email, phone number and role, so people can sign in and so the owner can see who checked which car.
Demo requests
The details you type into the form, used only to arrange a demo.
What we don’t do
- We don’t sell personal information or use it for advertising.
- This website has no tracking or analytics scripts and sets no cookies until you sign in. Signing in sets one cookie that keeps you signed in.
- We don’t share one dealership’s checks with another dealership.
Who we share it with
Our hosting provider, to run the service provider and country TBC. If information is stored outside South Africa, we will only use providers in countries or under agreements that give protection comparable to POPIA (section 72). When vehicle history checks are added, the VIN and registration will be sent to the vehicle data provider provider TBC only when a dealership asks for that check.
How long we keep it
Check records: for as long as the dealership’s account is open, and period TBC after it closes so the dealership can download its reports. Demo requests: period TBC. Accounts: until the person is removed, then period TBC.
How we protect it
Information is encrypted in transit and at rest, each dealership’s data is kept separate, and only staff who need to support a dealership can see its records to confirm against the server’s security design. If we learn of a breach, we will tell the affected dealership and the Information Regulator as POPIA requires.
Your rights
You may ask us:
- whether we hold personal information about you, and for a copy of it;
- to correct or delete it;
- to stop using it, where the law allows.
If the information is part of a dealership’s car check, we will pass your request to that dealership, because it decides how its records are used. Write to privacy contact TBC. If you are unhappy with our answer you may complain to the Information Regulator (inforegulator.org.za).
Changes
We will date each version of this notice. Version date TBC