Privacy Policy

Effective date: 13 August 2026

This Privacy Policy explains how SSG Logistics collects, uses, shares, stores and protects personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who is responsible

Source Secure Group Logistics is the responsible party for personal information processed through this website and its delivery operations. Contact details appear at the end of this policy.

2. Information we collect

• Customer identity and contact details, collection and delivery addresses, booking instructions, goods descriptions and communications.
• Quotation, payment status, transaction reference, invoice and refund information. Complete card details are handled by the payment provider and are not stored by us.
• Delivery records, tracking updates, photographs, proof of delivery, recipient details and signatures.
• Driver-partner application, identity, licence, vehicle, roadworthy, insurance, banking, compliance and location information.
• Website technical information such as IP address, browser, device, pages visited, cookies and security logs.

3. Why we use it

We process information to prepare quotes; confirm and fulfil deliveries; route and assign drivers; provide tracking; process payments and refunds; communicate service updates; verify drivers and vehicles; manage safety, fraud and legal compliance; keep accounting records; resolve complaints and claims; secure and improve the website; and, where permitted, send relevant marketing.

4. Lawful grounds

We process personal information where it is necessary to perform or prepare a contract, comply with law, pursue legitimate operational and security interests, protect a legitimate interest of a person, or where valid consent has been given. Consent may be withdrawn where processing depends on consent, without affecting earlier lawful processing.

5. Who receives information

We share only what is reasonably necessary with the assigned owner-driver; payment processors including Payfast; hosting, email, mapping, analytics and IT providers; professional advisers, insurers and auditors; and regulators, law-enforcement bodies or courts where legally required. We do not sell personal information.

6. Driver location and customer tracking

When enabled for an active delivery, a driver's device location may be shared with SSG operations and through the customer's secure tracking link. Location sharing is limited to operational delivery purposes and should stop when the job is completed or the driver stops sharing.

7. Cookies

We use necessary cookies for security, site operation and remembering choices. Optional analytics or marketing cookies should be used only in line with the consent selection shown by the website. Visitors can change cookie choices through the available cookie settings and browser controls.

8. Retention

We retain information only for as long as reasonably required for the purpose collected and to meet tax, accounting, contractual, insurance, dispute and legal obligations. When no longer required, information is securely deleted, destroyed or de-identified. Unsuccessful driver applications and expired operational data are reviewed periodically.

9. Security

We use reasonable technical and organisational safeguards, including access controls, restricted administrator and driver permissions, secure connections, backups and service-provider controls. No system is completely secure. If a qualifying security compromise occurs, we will investigate and notify the Information Regulator and affected people as required by POPIA.

10. Your rights

Subject to applicable law, you may ask whether we hold your information; request access or correction; object to certain processing; request deletion of information we are no longer entitled to retain; withdraw consent; opt out of direct marketing; and complain to the Information Regulator. We may need to verify your identity before acting on a request.

11. Cross-border processing

Some service providers may process or store information outside South Africa. Where this occurs, we take reasonable steps to use appropriate contractual, legal and security safeguards consistent with POPIA.

12. Children

Our services are intended for adults. A person under 18 should not make a booking or submit personal information without the involvement of a parent or legal guardian.

13. Updates and complaints

We may update this policy and will publish the revised effective date. Privacy requests and complaints can be sent to the email below. You may also complain to South Africa's Information Regulator at inforegulator.org.za.