Haulze (Pty) Ltd – Privacy Policy
Effective 01 May 2025

Table of Contents

1. About Us
2. Scope & Audience
3. Information We Collect
4. Why & How We Use Your Information
5. Automated Decision‑Making & Profiling
6. Cookies & Tracking Technologies
7. Sharing & Disclosure
8. International Transfers
9. Security Measures
10. Retention & Disposal
11. Your Privacy Rights (Including Account Deletion)
12. Children’s Privacy
13. Third‑Party Links & Integrations
14. Policy Updates
15. Contact

1. About Us

2. Scope & Audience

This Policy applies to Customers, Recipients, Delivery Partners, Retailers, Website/App visitors, Suppliers and Job Applicants (“data subjects”) whose personal information is processed via the Haulze mobile application, website, APIs or call‑centre (the “Platform”). It adheres to the Protection of Personal Information Act 4 of 2013 (“POPIA”), ECT Act, and—where relevant—the EU GDPR.

3. Information We Collect

We do not intentionally capture special‑category data unless legally required and consented.

4. Why & How We Use Your Information

*POPIA s.11 and/or GDPR Art.6.

5. Automated Decision‑Making & Profiling

Algorithms set dynamic pricing, fraud scores and multi‑stop route order. No fully automated decision with legal or similarly significant effect is made without human review.

6. Cookies & Tracking Technologies

Essential cookies keep you logged in; analytics/marketing cookies measure performance. Manage non‑essential cookies in the cookie banner or device settings.

7. Sharing & Disclosure

We never sell data. We share minimum necessary information with Delivery Partners, payment processors, cloud/SaaS hosts (AWS, Cloudflare), analytics vendors (Google, Meta), group companies, regulators and—under NDA—investors.

8. International Transfers

Where data leaves South Africa (EU or US servers), we rely on adequacy decisions or Standard Contractual Clauses consistent with POPIA s.72/GDPR Ch.V.

9. Security Measures

• TLS 1.3 in transit, AES‑256 at rest
  
  

• Zero‑trust IAM; MFA for admins
  
  

• 24 / 7 SOC monitoring via GuardDuty & Datadog
  
  

• Annual SOC 2 Type II & penetration tests
  
  

• Incident‑response plan with 72‑hour breach notification guarantee
  
  

10. Retention & Disposal

11. Your Privacy Rights

11.1 Standard Rights

Access, correction, deletion, objection/restriction, portability (GDPR), and complaint to the Information Regulator (inforeg@justice.gov.za). Requests to privacy@haulze.com; response within 30 days.

11.2 Marketing Opt‑Out

Click “unsubscribe,” toggle Settings > Notifications in‑app, or email unsubscribe@haulze.com.

11.3 Account Deletion

You may permanently delete your Haulze account and associated personal information by:

• In‑App: Go to Profile > Account > Delete Account and confirm.
  
  

• Email: Send a request to support@haulze.com from your registered email address, stating “Delete my Haulze account.”
  
  

We will:
1. Verify identity within 24 hours;
2. Scrub active databases within 10 Working Days;
3. Flag backups for destruction on next rotation (≤90 days);
4. Confirm completion via email.

Certain information (invoices, ePOD, tax records) will be retained for statutory periods but irreversibly pseudonymised.

12. Children’s Privacy

Platform not directed to under‑18s; we delete any discovered minor data.

13. Third‑Party Links & Integrations

Google Maps, WhatsApp Business and retailer portals operate under their own policies; review those before sharing data.

14. Policy Updates

Material revisions are announced 30 days in advance via email or in‑app banner; archived versions at haulze.co.za/legal/privacy‑updates.

15. Contact

Privacy Office – Haulze (Pty) Ltd
184 Upper Buitenkant Street, Oranjezicht, Cape Town, 8001, South Africa
Tel: +27 87 088 2334 | Email: privacy@haulze.com

For account‑deletion queries: support@haulze.com.