Privacy Policy

This policy explains what personal information Khumalo Automobiles Pty Ltd ("Khumalo", "we") collects through khumalo.co, why, and what your rights are under South Africa's Protection of Personal Information Act, 2013 (POPIA). We collect as little as we need.

1. Who is responsible

Khumalo Automobiles Pty Ltd, Cape Town, South Africa, is the responsible party for your information. Contact us, including our Information Officer, Kwazi Khumalo, at khumaloautomobiles@outlook.com. Our full business details are on the Terms page.

2. What we collect

When you send an enquiry

• Required: your name, email address, the type of enquiry, and your agreement that we may contact you. Without these we cannot reply.
• Optional: phone number, country, your message, an atelier build code, and for vehicle sourcing the vehicle, years, specification, budget band and timeline you choose to give us.

If you are a client with a portal account

• Your email address and name, which we use to invite you and sign you in.
• The atelier build codes you choose to save to your account.
• Your commission's title, stage and the progress updates we post for you.
• Technical sign-in records kept by our account provider, such as when you last signed in and the IP address used, to keep accounts secure.

Accounts are created only by invitation, for clients we already work with.

Automatically

• Our hosting provider processes technical information such as your IP address, browser type and the pages requested, to deliver the website and keep it secure.
• When you send an enquiry, your IP address is held briefly in server memory to stop repeated or automated submissions. We do not store it.

What we do not collect

We do not use analytics, advertising, tracking pixels, social media plugins or cookies. We do not ask for identity numbers, financial account details or payment information on this website.

3. Why we use it

• To reply to your enquiry and arrange what you asked for, such as a presentation, a commission discussion, a vehicle search or a restoration quote.
• To take steps you request before entering into an agreement with us.
• To keep the website and our enquiry system secure and free of spam.
• For clients: to run your portal account, show you your saved builds and keep you informed about your commission.

We rely on your consent, which you give when you send the form, and on the steps needed to respond to your request. We will not send you marketing unless you separately ask us to.

4. Who we share it with

We do not sell or rent your information. We share it only with service providers who process it for us:

• Website hosting (Vercel Inc. or Netlify Inc., depending on our hosting), which serves the website and runs the enquiry form.
• Email delivery (Resend), which delivers your enquiry to our inbox and sends portal sign-in emails.
• Client accounts and database (Supabase Inc.), which signs clients in and stores portal account information.
• Email (Microsoft Outlook), where we receive and answer enquiries.

We may also disclose information where the law requires it.

5. Information sent outside South Africa

These providers may process information in the United States, the European Union or elsewhere. By sending an enquiry you agree to this transfer. We choose providers that publish data protection terms, and we only send what is needed to deliver and answer your enquiry.

6. How long we keep it

We keep enquiry information for as long as we need it to deal with your enquiry and any resulting relationship, and for any period the law requires. Enquiries that do not lead to an agreement are deleted within 24 months. Portal accounts are kept while you are a client and deleted within 12 months after your car is handed over, unless you ask us to delete yours sooner or the law requires us to keep records longer.

7. Security

The website is served over an encrypted connection (HTTPS). Enquiries are validated on the server and sent directly to our inbox. Access to enquiries is limited to the Khumalo team.

8. Information stored on your device

If you choose "Save on this device" in the atelier, your build code is stored in your own browser. It is not sent to us unless you choose "Send to Khumalo". If you sign in to the client portal, your browser stores a sign-in session so you stay signed in until you sign out. See our Cookie Policy.

9. Your rights

Under POPIA you may ask us to:

• confirm whether we hold information about you, and give you a copy;
• correct or delete information that is inaccurate, out of date or no longer needed;
• stop using your information, or withdraw your consent at any time.

Email khumaloautomobiles@outlook.com and we will respond within a reasonable time. If you are not satisfied, you may complain to the Information Regulator of South Africa through its eService portal at inforegulator.org.za (opens in a new tab), or contact it at enquiries@inforegulator.org.za or Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.

10. Children

This website is not intended for people under 18, and we do not knowingly collect their information.

11. Changes

We will update this policy if what we collect or how we use it changes. The date at the top shows the latest version.