Introduction
Rapid Reset (“Rapid Reset”, “we”, “us”, or “our”) respects your privacy. This Privacy Policies notice (“Notice”) explains how we collect, use, disclose, store, and otherwise process personal information when you use our websites (including rapidreset.co.za), mobile applications, vehicles, charging products, Gear Shop, events, customer support channels, and related products and services (together, the “Services”).
This Notice is prepared for processing in the Republic of South Africa and is intended to comply with the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Consumer Protection Act 68 of 2008 (“CPA”) where relevant, the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”), and the guidance of the Information Regulator (South Africa).
In POPIA terms, Rapid Reset is the “responsible party” for personal information we determine the purpose of and means for processing. Where we use service providers who process information on our behalf, they act as “operators” under written agreements that require appropriate security and confidentiality.
1. Scope of this Notice
This Notice applies to personal information we process about customers, prospective customers, website and app users, demo-drive participants, fleet or business contacts, job applicants (where we refer you to a separate recruitment notice), and other individuals who interact with us in South Africa.
If you provide personal information about another person (for example a co-driver or delivery contact), you confirm that you are authorised to do so and that you have referred them to this Notice where reasonably practicable.
Unless we specifically request it, please do not send us special personal information (as defined in POPIA), such as information about race, religion, health, biometrics, or criminal behaviour, except where necessary for a Service you request and lawful under POPIA.
2. Personal Information We Collect
The information we collect depends on how you interact with us. Categories may include:
Identity and contact
Name, ID or passport details (where required for vehicle purchase, financing, or legal compliance), date of birth, postal and physical address, email address, telephone number, and account credentials.
Vehicle and product
Vehicle identification numbers, configuration and order details, ownership or registration information, service and repair history, warranty claims, and product preferences.
Vehicle telemetry and usage
Data generated by connected vehicles and apps, which may include location (where enabled), charge status, odometer, diagnostics, software version, safety-event data, driving and feature-usage data, and similar operational information needed for safety, performance, support, and product improvement.
Charging and payments
Charging session records, energy consumption, billing address, payment method tokens (processed via payment providers), invoices, and transaction history.
App, website, and device
IP address, device identifiers, browser type, app version, cookie and similar technology data, crash logs, approximate location derived from IP, and interaction data on our Sites and Apps.
Communications and support
Records of emails, calls, chats, demo-drive bookings, event attendance, surveys, and feedback.
Marketing preferences
Opt-in and opt-out choices, campaign engagement, and related profiling limited to what is lawful under POPIA and direct-marketing rules.
Sources
We collect information directly from you; automatically from vehicles, apps, and Sites; and from third parties such as payment providers, financing partners, insurers, logistics providers, dealers or service partners, public registers (where lawful), and publicly available sources.
3. How We Use Personal Information
We process personal information for purposes that include:
- creating and managing accounts, orders, reservations, deliveries, and warranties;
- providing vehicle features, connectivity, charging, navigation, remote commands, and support;
- processing payments and preventing fraud;
- safety, security, diagnostics, recalls, and quality improvement;
- personalising experiences and communicating about products you use;
- direct marketing where you have consented or another POPIA ground applies, with an easy opt-out;
- analytics, research, and product development, using de-identification or aggregation where practical;
- complying with South African legal obligations (including tax, consumer, and road-traffic requirements); and
- establishing, exercising, or defending legal claims.
4. Lawful Bases under POPIA
We only process personal information where a lawful basis under POPIA applies. Depending on the activity, that may include:
- Consent — for example certain marketing, cookies that are not strictly necessary, or optional features;
- Contract — processing necessary to conclude or perform a contract with you;
- Legal obligation — where South African law requires processing;
- Legitimate interests / proper purpose — for example securing our Services, improving safety, or preventing fraud, balanced against your rights; and
- Other POPIA grounds — where applicable (for example protecting a legitimate interest of yours or pursuing the legitimate interests of Rapid Reset or a third party in a manner permitted by POPIA).
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing already lawfully carried out, and we may continue processing where another lawful basis applies.
5. Vehicles, Charging, Apps, and Websites
Vehicles
Connected vehicles generate operational and diagnostic data needed for core functionality, safety, security, repairs, and reliability. Where that data identifies you or your household, it is treated as personal information under this Notice. Location and certain camera or cabin features are controlled by settings and legal requirements; we will not use cabin recordings for marketing.
Charging
When you use Rapid Reset or partner charging, we process session, location (of the charger), consumption, and billing data to deliver charging, invoices, network operations, and support.
Mobile apps
Apps may collect account, device, usage, and vehicle-linked data to enable phone-as-key, remote controls, charging management, trip tools, and notifications. You can manage many permissions in your device settings and in-app preferences.
Websites and other interactions
We process information from Site forms, Gear Shop purchases, demo drives, events, and customer service to respond to you and administer our relationship. See Section 11 for cookies.
Artificial intelligence features
Some Services may use AI to personalise or assist features. Related processing is limited to the stated purpose, subject to POPIA, and where appropriate you will be able to manage preferences in the App or by contacting us.
7. Cross-Border Transfers
Rapid Reset is based in South Africa. Some operators or systems may process personal information outside South Africa. We will only transfer personal information across borders in accordance with section 72 of POPIA, including where:
- the recipient is subject to a law, binding corporate rules, or binding agreement that provides an adequate level of protection;
- you consent to the transfer;
- the transfer is necessary for the performance of a contract with you or for your benefit; or
- another POPIA ground for transfer applies.
8. Retention
We retain personal information only for as long as needed for the purposes collected, to meet legal, tax, accounting, or reporting requirements, to resolve disputes, or as otherwise permitted by POPIA. Retention periods vary by record type (for example account data, transaction records, and vehicle diagnostics). When information is no longer required, we destroy, delete, or de-identify it in a manner that prevents reconstruction so far as reasonably practicable.
9. Security Safeguards
We implement appropriate, reasonable technical and organisational measures designed to protect personal information against loss, damage, and unauthorised access or processing, as required by POPIA. Measures may include access controls, encryption in transit and at rest where appropriate, staff confidentiality obligations, and vendor due diligence.
No method of electronic transmission or storage is completely secure. If we become aware of a security compromise affecting personal information, we will notify the Information Regulator and affected data subjects as required by POPIA.
10. Your Rights under POPIA
Subject to POPIA’s grounds for refusal and procedural requirements, you may request to:
- Access — confirm whether we hold your personal information and request a record of it;
- Correction — request correction or deletion of inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading, or unlawfully obtained information;
- Deletion / destruction — request deletion where POPIA allows;
- Object — object to processing in certain cases, including direct marketing;
- Withdraw consent — where processing is based on consent;
- Complain — lodge a complaint with the Information Regulator.
To exercise these rights, contact privacy@rapidreset.co.za. We may need to verify your identity before responding. We will not discriminate against you for exercising your privacy rights.
Information Regulator (South Africa)
Website: inforegulator.org.za
Complaints email: POPIAComplaints@inforegulator.org.za
12. Direct Marketing
We may send electronic direct marketing about Rapid Reset products and services only in accordance with POPIA (and related direct-marketing rules), including where you are an existing customer in respect of similar products or services and were given a reasonable opportunity to object, or where you have consented. Every marketing email or SMS will include a simple way to opt out. Service and transactional messages are not marketing and may continue where necessary.
13. Children’s Information
Our Services are directed at persons 18 years or older. We do not knowingly collect personal information from children without the consent of a competent person as required by POPIA. If you believe a child has provided personal information to us without proper consent, contact privacy@rapidreset.co.za and we will take appropriate steps.
14. Automated Decision-Making
We do not make solely automated decisions that create legal effects or similarly significant effects concerning you without appropriate human involvement, except where permitted by POPIA (for example with consent or as necessary for entering into or performing a contract), in which case you may request information about the logic involved where required by law.
15. Changes to this Notice
We may update this Notice from time to time. The “Last updated” date will change when we do. Material changes will be posted on this page and, where required by law, communicated by email or in-product notice. Please review this Notice periodically.
16. Contact Us / Information Officer
For privacy questions, requests, or complaints regarding this Notice or our processing of personal information:
Information Officer
Rapid Reset — South Africa
Email: privacy@rapidreset.co.za
Legal: legal@rapidreset.co.za
Website: rapidreset.co.za
Related: Terms & Conditions