Introduction
BidMyMove (Pty) Ltd ("BidMyMove", "we", "us", or "our") is committed to protecting your privacy and ensuring that your personal information is collected, processed, stored, and used in a lawful, transparent, and responsible manner.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what your rights are as a data subject. This policy applies to all users of the BidMyMove platform, including the BidMyMove website, mobile application, and any associated services (collectively referred to as the "Platform").
By accessing or using the BidMyMove Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.
Legal Framework
BidMyMove processes personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and its associated regulations, as administered by the Information Regulator of South Africa. We are committed to upholding all eight conditions for lawful processing as prescribed by POPIA.
Information We Collect
We collect personal information that is necessary to provide our services. This includes:
Account and Identity Information
- Full name
- Email address
- Phone number
- Identity number or passport number (for driver verification purposes)
- Profile photograph (optional for customers; required for drivers)
Location Information
- Pickup and delivery addresses submitted when creating a move request
- Real-time GPS location data during active bookings (with your consent)
Payment and Transaction Information
- Payment method details (processed and stored by our third-party payment processor — BidMyMove does not store full card details)
- Transaction history and booking records
Driver and Vehicle Verification Information
- Driver's licence details
- Professional Driving Permit (PrDP) documentation
- Vehicle registration and roadworthy certification
- Proof of address
Communication Data
- Messages exchanged through our in-app messaging system
- WhatsApp communication logs where applicable
- Customer support interactions
Platform Usage Data
- Device type, operating system, and browser information
- IP address
- Pages visited and features used within the Platform
- Booking history and activity logs
How We Collect Your Information
We collect personal information:
- Directly from you when you register, create a booking, complete a form, or contact us
- Automatically through your use of the Platform (usage data and cookies)
- From third-party verification services where necessary for driver onboarding
Why We Process Your Information — Lawful Basis
We process your personal information only for specific, defined purposes and on a lawful basis as required by POPIA. Our purposes include:
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Matching customers with available drivers | Performance of a contract |
| Processing payments securely | Performance of a contract |
| Real-time tracking during bookings | Legitimate interest / Consent |
| Driver and vehicle verification | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Legitimate interest |
| Improving platform performance | Legitimate interest |
| Sending service notifications | Performance of a contract |
| Marketing communications | Consent |
| Fraud prevention and platform security | Legal obligation / Legitimate interest |
| Compliance with South African law | Legal obligation |
How We Share Your Information
We do not sell your personal information to third parties. We may share your personal information in the following limited circumstances:
- Between Customers and Drivers: When a booking is confirmed, relevant contact and location information is shared between the customer and the assigned driver to facilitate the move. This is necessary for the performance of the service.
- Payment Processors: Payment information is processed by our approved third-party payment service provider(s). These providers are contractually required to process your information securely and in accordance with applicable law.
- Technology and Service Providers: We use third-party providers to support platform functionality, including cloud hosting, mapping services, SMS and communication services, and analytics. These providers act as operators under POPIA and are bound by data processing agreements.
- Legal and Regulatory Requirements: We may disclose your information where required to do so by law, court order, or regulatory authority, including disclosure to the South African Police Service (SAPS) or other authorities where legally compelled.
- Business Transactions: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to equivalent privacy protections.
Cookies and Tracking Technologies
BidMyMove uses cookies and similar tracking technologies to improve your experience on our platform. Cookies help us remember your preferences, maintain your session, and understand how the platform is being used.
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.
Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Retention periods include:
- Active account data: Retained for the duration of your account and for a period of up to 5 years after account closure, in compliance with financial record-keeping requirements
- Driver verification documents: Retained for the duration of driver registration and for 3 years thereafter
- Booking and transaction records: Retained for 5 years in accordance with applicable financial legislation
- Job application data: Retained for 12 months from the date of application
- Marketing data: Retained until you withdraw consent
Security of Your Information
BidMyMove implements appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include:
- Encryption of data in transit using industry-standard TLS protocols
- Encrypted storage of sensitive personal information
- Role-based access controls restricting internal access to personal data
- Regular security reviews and platform audits
- Secure payment processing through PCI-DSS compliant providers
No method of data transmission or storage is entirely secure. While we take all reasonable steps to protect your information, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Regulator in accordance with our obligations under POPIA.
Your Rights as a Data Subject
Under POPIA, you have the following rights:
- Right of Access: You have the right to request confirmation of whether we hold your personal information and to request access to that information.
- Right to Correction: You have the right to request that we correct or update any inaccurate or incomplete personal information we hold about you.
- Right to Deletion: You have the right to request the deletion of your personal information where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
- Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully.
Information Regulator contact details:
Website: www.inforegulator.org.za
Email: inforeg@justice.gov.za
Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Children's Privacy
BidMyMove's services are intended for use by persons aged 18 years and older. We do not knowingly collect personal information from minors. If we become aware that personal information has been collected from a person under the age of 18, we will take steps to delete such information promptly.
International Transfers
Where your personal information is transferred outside the borders of South Africa, BidMyMove will ensure that adequate safeguards are in place, as required under Section 72 of POPIA, to ensure that the receiving party affords a level of protection substantially similar to the protections afforded under South African law.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of material changes by posting the updated policy on the Platform and, where appropriate, by sending you a notification. The date of the most recent revision will always be indicated at the top of this document.
Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated terms.
Contact Us
For any queries, requests, or concerns relating to your personal information or this Privacy Policy, please contact our Information Officer:
BidMyMove (Pty) Ltd Email: privacy@bidmymove.co.za Website: www.bidmymove.co.za