1. Introduction
1.1. Cars4Mars-AfricanRoverChallenge (“Cars4Mars-AricanRoverChallenge”, “we”, “us”
or “our”) collects and processes Personal Information of anyone who accesses our website
and/or makes a purchase as well as from your emails or communications with us.
1.2. By providing us with your Personal Information, you:
1.2.1. agree to this policy and authorise us to process such information as set out in this
policy; and
1.2.2. authorise Cars4Mars-AfricanRoverChallenge, our service providers and other
third parties to process your Personal Information for the purposes stated in this policy.
1.3. Personal Information, in terms of the Protection of Personal Information Act, 4 of
2013 (“POPIA”), means “information relating to an identifiable, living, natural person, and
where it is applicable, an identifiable, existing juristic person”. South Africa’s Constitution, Act
108 of 1996, provides that everyone has the right to privacy. This includes the right to
protection against the unlawful collection, retention, dissemination and use of your personal
information.
1.4. “Process” or “processing” of information means the collection, use, storage, sharing,
destroying, updating, disclosing or otherwise dealing with your Personal Information. As a
general rule, we only process Personal Information that is required in order for us to provide
you with the goods and/or services that you have requested.
1.5. Because of the sensitivity of some personal information, we ensure that the way we
process your Personal Information complies fully with POPIA and have implemented
reasonable organisational and technical controls as a result.
1.6. We may periodically update or change the Privacy Policy without giving you prior
notice, in accordance with applicable law. You should check them regularly, as your
continued use of our website means that you accept and agree to any updates or changes
to this Policy.

2. The Personal Information We Collect
2.1. We may collect or obtain Personal Information about you in the following ways:
2.1.1. Through direct or active interactions with you;
2.1.2. In the course of our relationship with you;
2.1.3. Through automated or passive interactions with you;
2.1.4. When you visit or interact with our website, social media or emails;
2.1.5. From third parties;
2.1.6. From public sources;
2.1.7. From employment or other applications;
2.2 Types of Personal Information we collect:
2.2.1. Identity Information
2.2.1.1. Name and surname;
2.2.1.2. Birthday;
2.2.2. Contact Information
2.2.2.1. Email address;
2.2.2.2. Physical and postal addresses;
2.2.2.3. Cellphone or other phone numbers;
2.2.5. Transaction Information
2.2.5.2. Gift registries or wish lists;
2.2.5.3. Payment information (we do not store credit card information);
2.2.5.4. Banking information in the case of a refund
2.2.6. Technical Information
2.2.6.1. Device and browser information;
2.2.6.2. Online identifiers – cookies, log files and tags;
2.2.6.3. Website usage information
2.2.8. Marketing Information

2.2.8.1 Interests and preferences

3. Cookies & Usage Tracking
3.1. Cookies are data files that are placed on your device that may include an
anonymous unique identifier – in other words, they do not contain your personal information
but allow us to associate you with a particular device.
3.2. We use cookies to:
3.2.1. understand your usage of our website so that we can improve our website and
make it more user friendly; and
3.2.2. personalise our interactions with you and tailor our services to your interest and
needs; and
3.2.3. ensure our website works optimally on your device; and
3.2.4. provide marketing that is relevant to you, and to limit the number of times you see
the same marketing content, as well as measure the effectiveness of our marketing based
on your online usage; and
3.2.5. send opt-in marketing communications if you are not yet subscribed.
3.3. When you access our website, we collect data about your IP address, browser type,
device type, internet service provider, referring or exit pages, and date and time stamps.
This information is anonymous.

4. How We Use Your Personal Information
4.1. The information we collect is primarily used to
4.1.1. identify you; and
4.1.2. communicate with you; and
4.1.3. fulfil your orders; and
4.1.4. provide you with services; and
4.1.5. enter into a contract with you;
4.1.6. comply with any legal or regulatory obligations; and
4.1.7. conduct research for statistical purposes (this information is anonymous and
cannot be linked to you)
4.1.8. provide you with information or marketing relating to our products and services
(when in line with the preferences you share with us).
4.2. We may also use the information that you provide for other legitimate business
interests in accordance with the relevant laws. We do not sell your data to any third party.
4.3. We retain your Personal Information for as long as
4.3.1. we need it to provide our products and/or services to you; or
4.3.2. it is required or allowed by law; or
4.3.3. it is necessary to uphold the contract between us; or
4.3.4. you have consented to us keeping your Personal Information, subject to your
request for us to stop processing your Personal Information.

5. How Your Information Is Shared
5.1. We do not sell your information to any third party for their marketing or any other
purpose.
5.2. We may provide or make your Personal Information available to:
5.2.1. our employees
5.2.2. law enforcement, government officials, fraud detection agencies or any third party
where the disclosure of Personal Information is a legal obligation and appropriate in
connection with an investigation of fraud or any other illegal activity, or any activity that may
expose us to legal liability or financial loss;
5.2.3. third parties in the event of any reorganisation, merger, sale, joint venture or
other disposition of any of our assets
5.2.4. contracted third parties and their employees who render services to us. These
contracts stipulate that these third party providers may only use your Personal Information in
connection with the services they provide us and not for their own benefit or any other purpose, and that they are to treat your information as confidential, in accordance with the
POPIA.
5.2.5. our suppliers or sellers in order for them to liaise directly with you regarding any
products or services that you have purchased, or for any other purpose which may require
their involvement.
5.3. We may transfer your Personal Information beyond the borders of the Republic of
South Africa to service providers for the purposes set out above, including for data storage
and back-up purposes. However, any transfer of your Personal Information outside the
country is done so in accordance with the requirements set out in the POPIA.

6. How We Protect Your Personal Information
6.1. We secure the confidentiality of your Personal Information in our possession or under
our control by taking reasonable technical and organisation measures to prevent loss of,
damage to, or unauthorised access or processing of your Personal Information.
6.2. Our policies and procedures include, among other measures,:
6.2.1. physical, technical and network security
6.2.2. monitoring and control of access
6.2.3. secure storage, destruction and encryption of records
6.2.4. breach reporting and remediation

7. Your Privacy Rights
7.1. Having provided adequate proof of your identity, you have the right to:
7.1.1 be notified that your Personal Information is being collected;
7.1.2. view, correct and/or amend the Personal Information we process;
7.1.3. request a record or description of your Personal Information, but please note that:
7.1.3.1. there may be a fee charged to provide you with this record;
7.1.3.2. if the request is manifestly unfounded, excessive or repetitive, we may
charge an additional administrative fee or refuse the request.
7.1.4. object, on reasonable grounds, to the processing of your Personal Information
7.1.5. request that your Personal Information be corrected, destroyed or deleted. We
may need to retain some of your Personal Information subject to any legislative requirement
7.1.6. us complying with your request upon receipt, unless we have a credible reason to
not comply (such as a legal obligation)
7.1.7. us indicating where, if we cannot agree whether to correct or delete your
Personal Information as requested, that a correct or deletion was requested but not made.
7.1.8. be informed, if reasonably practicable, of any changes to your Personal
Information that has an impact on decisions about you.
7.1.9. be informed of the action taken by us because of your request.
7.1.10. be notified by us if there is any unauthorised access to your Personal
Information
7.1.11. request reasonable evidence of our compliance with the obligations of this
privacy policy on reasonable notice and request
7.1.12. submit a complaint to the Information Regulator

8. Direct Marketing
8.1. You may opt-out or unsubscribe from any direct marketing that we may send to you.
8.2. If you opt-out, you may still receive administrative or other transactional
communications as part of our business operations (such as order confirmation emails).

9. Lodging a Complaint with the Information Regulator
9.1. If you have any complaints about this Policy, or our compliance with this Policy or
South African privacy laws, you are entitled to lodge a complaint with the Information
Regulator.
9.2. The contact details for the Information Regulator are available on its website at
https://justice.gov.za/inforeg/