POPI Policy

King Cars (Pty) Ltd (“King Cars”, “we”, “our”, or “us”) is committed to protecting your privacy and ensuring the lawful processing of your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”).

This policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have as a data subject.

King Cars (Pty) Ltd is a licensed used motor vehicle dealership operating branches in the Western Cape and Eastern Cape provinces of South Africa. We are registered as a Financial Services Provider (FSP Licence No. 10220) and act as a Responsible Party in respect of the personal information we process.

We may collect the following categories of personal information:

• Identity information: Full name, ID number, date of birth
• Contact information: Phone number, email address, physical address
• Financial information: Income details, credit history (for finance applications only)
• Vehicle information: Details about vehicles you wish to buy, sell, or trade in
• Communication records: Records of enquiries and correspondence with us
• Website usage data: IP address, browser type, pages visited (via analytics tools)

We collect and process your personal information for the following purposes:

• Processing vehicle purchase, sale, or trade-in transactions
• Facilitating vehicle finance applications through our banking partners
• Responding to enquiries submitted through our website or in-branch
• Providing after-sales support and warranty services
• Sending relevant marketing communications (only with your consent)
• Complying with legal and regulatory obligations
• Improving the functionality and user experience of our website

We process your personal information on the following lawful grounds:

• Contract: Processing is necessary to fulfil a transaction you have entered into
• Legal obligation: We are required by law to retain certain records
• Legitimate interest: Processing is necessary for our legitimate business operations
• Consent: Where you have provided explicit consent (e.g. marketing communications)

We do not sell your personal information. We may share it with:

• Finance providers: ABSA, Standard Bank, FNB, Nedbank, Capitec, WesBank — solely for finance application processing
• VMG Software: Our inventory management system provider, who processes vehicle and deal data on our behalf
• Regulatory authorities: Where required by law (e.g. SARS, the FIC)
• Professional advisors: Lawyers, auditors, and insurers under strict confidentiality obligations

All third parties are required to handle your information in accordance with POPIA and our data processing agreements.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Secure HTTPS encryption on our website
• Access controls limiting who within our organisation can view personal data
• Regular staff training on data protection obligations
• Secure physical storage of paper-based records

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Vehicle transaction records are typically retained for a minimum of five (5) years in accordance with financial and tax legislation. After this period, records are securely destroyed.

Under POPIA, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that inaccurate or outdated information be corrected
• Deletion: Request deletion of your information, subject to legal retention requirements
• Objection: Object to the processing of your information for marketing purposes
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent
• Complaint: Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact our Information Officer at info@kingcars.co.za. We will respond within 30 days of receiving your request.

Our website uses Google Analytics (GA4) to understand how visitors interact with our site. This involves the collection of anonymised usage data such as pages visited, time on site, and device type. This data does not identify you personally. You may opt out of analytics tracking by enabling “Do Not Track” in your browser settings or installing the Google Analytics Opt-out Browser Add-on.

You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed in violation of POPIA:

We may update this policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date at the top of this page indicates when the most recent revision was made. We encourage you to review this policy periodically.