Privacy Policy

ZhapZhap Rides is the responsible party for the personal information described in this policy, as that term is used in the Protection of Personal Information Act 4 of 2013 (POPIA).

Anything in this policy — a question, a correction, a deletion request, or a complaint — can be raised at info@zhapzhaprides.co.za or 068 085 7242, addressed to the Information Officer.

For a rent-to-own application we collect your full name, ID or passport number, contact details, residential address, the delivery platform you work on, and the plan you have chosen.

We also ask you to upload supporting documents. Some of these are sensitive and are treated as such:

• A certified copy of your ID or passport, and a work permit or asylum document where one applies.
• A copy of your motorcycle licence.
• Proof of address no older than three months.
• Three months of bank statements.
• A screenshot of your active delivery platform profile.

Identity and licence documents are collected to confirm that you are who you say you are and that you may lawfully ride the scooter. A valid motorcycle licence is a condition of the insurance, so we cannot place a bike with an unlicensed rider.

Bank statements and the platform profile screenshot are collected to assess whether the weekly payment is realistically affordable for you. The purpose is to avoid placing someone into an agreement they cannot carry.

The legal basis for this processing is that it is necessary to conclude and perform the agreement you are applying for, and that we have a legitimate interest in assessing the application properly. Where we rely on your consent instead — for example to contact you about a future offer — you may withdraw that consent at any time.

Your information is not sold, and it is not shared for anyone else’s marketing.

It is shared only where it has to be: with the insurer underwriting the scooter, with the GPS tracking provider for the fitted unit, with our payment processor for the collection of weekly payments, and with a professional adviser or a court where the law requires it.

Our application and fleet systems are hosted with infrastructure providers who process data on our instruction. Some of that infrastructure sits outside South Africa. Where that is so, it is subject to contractual protections at least equivalent to those POPIA requires.

If your application is declined or withdrawn, the supporting documents — including your ID copy and bank statements — are deleted within six months of the decision. We keep only a minimal record that an application was made and its outcome.

If your application is accepted, we keep the application file for the duration of the agreement and for five years after it ends, which is the ordinary record-keeping period for a commercial agreement of this kind in South Africa. After that it is deleted.

You can ask us to delete your information sooner. We will do so unless we are required to keep it, in which case we will tell you what is being kept and why.

Uploaded documents are stored in private storage that is not publicly reachable and not indexed. Access is restricted to the staff who assess applications and manage agreements.

Access to our systems is authenticated, and the databases enforce record-level access rules so that a signed-in user reaches only their own records.

No system is perfectly secure. If your personal information is ever compromised in a way that creates a real risk to you, we will notify you and the Information Regulator, as POPIA requires.

Under POPIA you have the right to:

• Ask what personal information we hold about you, and receive a copy of it.
• Have information that is inaccurate, irrelevant, excessive, out of date or misleading corrected or deleted.
• Object to processing that we carry out on the basis of legitimate interest.
• Withdraw consent, where consent is what we relied on.
• Complain to the Information Regulator (South Africa) at inforegulator.org.za if you believe your information has been mishandled.

This site uses only what it needs to work: a session cookie to keep you signed in, and local storage on your own device to hold a sign-up in progress and your boarding passes so they are available offline. Neither is used for advertising and neither is shared.