This Privacy Notice explains how RiseEdge Ventures (Pty) Ltd ("RiseEdge Transport", "we", "us"), operating the website at transport.riseedgeventures.co.za, processes your personal information. We are the responsible party under the Protection of Personal Information Act, 2013 (POPIA). Where the EU/UK GDPR applies to a specific visitor, the equivalent rights are honoured (see "International visitors").
1. Who we are & how to contact us
- Responsible party: RiseEdge Ventures (Pty) Ltd, Durban, KwaZulu-Natal, South Africa.
- Phone / WhatsApp: 081 859 8759 (wa.me/27818598759).
- Privacy & data-subject requests:transport@riseedgeventures.co.za.
- Booking & payment enquiries:booking@riseedgeventures.co.za.
- Information Officer (head of the private body by virtue of office): NTOKOZO KHAMBULE,transport@riseedgeventures.co.za. Formal registration on the Information Regulator eServices portal is an administrative compliance step and does not change the public request channel.
2. What we collect & why
| Information | Why we process it | Lawful basis (POPIA) |
|---|---|---|
| Name, phone, email | Take and fulfil your booking; contact you about the trip | Performance of your booking (contract) |
| Pickup, destination, stops, date/time, passengers, luggage, flight number | Price, schedule and fulfil the trip; assign a vehicle & driver | Performance of your booking |
| Special requests / notes | Meet accessibility or trip needs you tell us | Performance of your booking |
| Booking price, deposit, payment status, payment transaction / reference records, and receipt history where issued | Invoicing, payment reconciliation, and customer payment records | Contract; legal obligation (tax records) |
| Technical logs (security) | Prevent fraud, abuse and secure the service | Legitimate interest / our obligation to secure data |
| Analytics & campaign data | Understand site usage (Google Analytics, anonymised) | Your consent (off until you opt in) |
| Marketing preferences | Send offers only if you opt in | Your consent (separate, optional) |
We practise data minimisation: we only ask for what a trip actually needs, and we don't require marketing consent to book.
3. Who we share it with
We do not sell your personal information. We share it only with providers that help us run the service ("operators" under POPIA), and only as needed:
- Supabase — secure database hosting for bookings. The current production database region is EU North (
eu-north-1), outside South Africa. - Netlify — website and serverless hosting/CDN.
- Google (Analytics & Maps) — only with your consent (Analytics) or when you actively calculate a route (Maps). We do not send your name, phone or booking reference to map services.
- Yoco — hosted card checkout and payment processing where card payment is enabled for a booking. Payment processing occurs through Yoco’s hosted provider flow. RiseEdge stores payment / booking reconciliation records (for example transaction references, amounts and payment status). RiseEdge does not store your full card details.
- Cloudflare Turnstile — bot and abuse protection on protected signup/login surfaces (for example driver application and staff / operator authentication). It is not used on the customer booking form.
- Assigned RiseEdge drivers — only the trip details needed to collect you.
- Email/notification providers if configured (e.g. Resend), and professional advisers or law-enforcement where legally required.
A full processor register is maintained internally. Some providers process data outside South Africa; we rely on their contractual and technical safeguards.
4. How long we keep it
We keep booking and financial records for as long as needed for the trip and for legal/tax retention (financial records are generally kept for 5 years under South African tax law). Analytics and consent records are kept per the schedule in our internal retention policy. We delete or anonymise data when it is no longer needed and no legal duty requires us to keep it.
5. Your rights (data-subject requests)
Under POPIA (and equivalent GDPR rights where applicable) you may: access your information; ask us to correct or delete it; object to certain processing; and withdraw consent for analytics or marketing at any time (this won't affect essential trip messages).
To exercise a right, emailtransport@riseedgeventures.co.zawith your full name, the phone number used for the booking (if any), your booking reference (if any), and what you are asking us to do. We will verify your identity before acting, and respond within the timeframe the law requires. You may also complain to the Information Regulator (South Africa),enquiries@inforegulator.org.za.
Related pages:PAIA access information ·Complaints and escalation ·Cookie Policy.
6. Security
We use HTTPS, strict security headers, encryption in transit, row-level database security, server-side-only privileged keys, and access controls for staff. No system is perfectly secure, and we do not claim absolute security; we do maintain a documented process to respond to any security compromise.
7. Cookies
Optional cookies (analytics) are off until you consent. See our Cookie Policy, manage choices on Cookie Preferences, or useCookie settings at any time.
8. International visitors (GDPR / UK GDPR)
RiseEdge Transport is a Durban-based service serving South Africa. Where the EU or UK GDPR applies to you, the rights in section 5 apply equivalently, plus data portability and restriction. A territorial-scope assessment is documented internally; this notice does not claim GDPR applies to every visitor.
9. Automated decisions
Prices are calculated automatically from your trip details and our published rates, and some bookings are routed to manual human review (e.g. very short notice, long distance, unusual requests) before confirmation. No decision producing legal effects is made solely automatically without a route to a human.
10. Changes
We update this notice when our processing changes and will re-request consent where the law requires. The "last updated" date above reflects the current version.