Privacy Policy

1. What Personal Information We Collect

We collect and process personal information only when necessary to provide services, respond to enquiries, or fulfil business operations. This may include:

• Name and surname
• Contact details (email, telephone number)
• Location information (city, province)
• Identification or verification information (when required)
• Vehicle preferences, test-drive requests, purchase interests
• Information submitted for quotes (finance, insurance, trade-ins)
• Website usage information via cookies
• Any other information voluntarily provided by you

We do not intentionally collect special/sensitive personal information unless you provide it voluntarily for a specific service (e.g., insurance-related information). When such information is processed, we apply additional safeguards as required by POPIA.

2. How We Collect Personal Information

We collect personal information when:

• You complete online forms (e.g., test drive requests, brochures, enquiries)
• You contact us by email, telephone, or through social media
• You request finance, insurance, or dealer-related services
• You interact with our authorised dealerships or service providers
• You visit our website and accept cookies
• You participate in competitions, events, promotions, or campaigns

3. Purpose of Collection & Use of Personal Information

We process your personal information for the following purposes:

• To provide services you request (test drives, brochures, quotations)
• To respond to enquiries and provide customer support
• To facilitate communication with authorised dealerships or service partners
• To process finance, insurance, and product-related requests
• To improve website performance and user experience
• For operational, administrative, and reporting purposes
• For safety, security, and fraud prevention
• For marketing communications only where consent has been given

We will not use personal information for any purpose not disclosed in this policy unless:

• It is compatible with the original purpose, or
• We obtain your explicit consent, or
• POPIA permits such further processing.

4. Direct Marketing

We will only send you marketing communications (email, SMS, WhatsApp, phone) where:

• You have provided affirmative consent, and
• You have not opted out

You may withdraw consent or unsubscribe at any time by contacting info@baicsa.co.za.

5. Sharing & Disclosure of Personal Information

We may share your personal information with:

• Authorised BAIC SA dealerships
• BAIC SA service and technical partners
• Finance or insurance partners (at your request)
• Approved data processors and IT service providers
• Regulatory or law-enforcement authorities where legally required

All third-party operators are bound by confidentiality, data-processing agreements, and POPIA compliance obligations.

We do not sell your personal information to any third party.

6. Cross-Border Transfers

Your personal information may be transferred or stored outside South Africa (e.g., cloud hosting, global support systems). When this occurs, we ensure:

• The receiving country or organisation provides adequate data protection, or
• Contracts and safeguards (DPAs, model clauses) are in place, or
• You consent to such transfers when necessary

7. Cookies Policy

We use cookies to:

• Remember your website preferences
• Improve site performance and functionality
• Understand how users navigate our website

You may choose to accept or reject cookies via your browser settings. Rejecting certain cookies may affect website functionality.

8. Children’s Privacy

We do not knowingly collect personal information from children without parental consent. Parents/guardians are encouraged to oversee online interactions and use parental-control tools.

9. Security Safeguards

We use reasonable, appropriate, and industry-standard security measures to protect your personal information, including:

• SSL encryption
• Secure servers and controlled access
• Firewalls and intrusion monitoring
• Role-based access control
• Employee POPIA training
• Regular security reviews and audits
• Third-party operator compliance agreements

Despite these measures, no internet transmission is completely secure. We therefore cannot guarantee absolute security.

10. Data Retention & Destruction

We retain personal information only for as long as necessary to fulfil the purposes described in this policy or comply with legal obligations.

Retention periods may vary depending on:

• Type of information
• Legal and regulatory requirements
• Operational needs
• Ongoing customer relationships

Once data is no longer required, it is securely destroyed, anonymised, or deleted.

11. Data Breach Notification

If a security breach occurs that may compromise your personal information:

• We will investigate the breach promptly
• We will notify the Information Regulator where required
• We will inform affected individuals as soon as reasonably possible, including details of:
  • The nature of the breach
  • Possible consequences
  • Steps you can take to protect yourself
  • What BAIC SA is doing to address the situation

12. Your Rights Under POPIA

You have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate or outdated information
• Request deletion of information (where legally permissible)
• Object to processing
• Withdraw consent at any time
• Opt out of direct marketing
• Request details of third parties who have had access to your information
• Lodge a complaint with the Information Regulator

Requests may be submitted to:

The Information Officer will respond within the timelines required by POPIA.

13. PAIA (Promotion of Access to Information Act)

If applicable, our PAIA Manual is available on request or on our website. It outlines:

• How to request records
• Applicable procedures
• Applicable forms and timelines

14. Updates to This Privacy Policy

We may update this policy occasionally. Changes will be posted on this website with an updated effective date. Continued use of our services indicates acceptance of revised terms.