Data Protection

Last Updated: January 2026

Our Commitment to Data Protection

cerulean-valley is committed to processing personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. This page provides detailed information about how we protect your data and your rights under applicable data protection legislation.

Responsible Party

For the purposes of POPIA, cerulean-valley is the responsible party for the personal information we collect and process. Our Information Officer can be contacted at:

Email: [email protected]
Address: Unit 14, Waterfall Business Park, Midrand, Johannesburg, South Africa, 1685

Categories of Personal Information

We process the following categories of personal information:

• Identity Data: Name, title, and other identifying information
• Contact Data: Email address, postal address, and location information
• Service Data: Information about your vehicle requirements and preferences
• Technical Data: IP address, browser information, and device identifiers
• Usage Data: Information about how you interact with our website
• Communication Data: Records of communications between you and our team

Conditions for Lawful Processing

We only process personal information when one of the following conditions applies:

• You have given consent to the processing
• Processing is necessary for the conclusion or performance of a contract
• Processing is required by law
• Processing protects a legitimate interest of yours
• Processing is necessary for our legitimate interests or those of a third party

Your Data Subject Rights

Under POPIA, you have the following rights regarding your personal information:

• Right to Access: You may request confirmation of whether we hold personal information about you and request access to that information.
• Right to Correction: You may request that we correct or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully.
• Right to Deletion: You may request deletion of your personal information in certain circumstances.
• Right to Object: You may object to the processing of your personal information for direct marketing purposes or on grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Regulator if you believe your rights have been infringed.

Exercising Your Rights

To exercise any of your rights, please contact our Information Officer using the details provided above. We will respond to your request within a reasonable time and no later than the timeframes prescribed by POPIA. We may need to verify your identity before processing your request.

Data Security Measures

We have implemented appropriate technical and organisational measures to protect personal information, including:

• Secure data storage with access controls
• Encryption of data in transit
• Regular security assessments
• Staff training on data protection
• Incident response procedures

International Transfers

Where we transfer personal information outside of South Africa, we ensure that adequate safeguards are in place to protect your information in accordance with POPIA requirements.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected. Retention periods are determined based on the nature of the information, legal requirements, and business needs. When personal information is no longer required, it is securely deleted or anonymised.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Updates to This Information

We may update this data protection information from time to time. Any changes will be posted on this page with an updated revision date.

Information Regulator

If you have concerns about how we handle your personal information that we have not addressed satisfactorily, you have the right to lodge a complaint with the Information Regulator:

Website: www.justice.gov.za/inforeg
Email: [email protected]