POPIA & data protection
How we collect, use, and protect your personal information under the Protection of Personal Information Act (Act 4 of 2013).
What we collect
- Your South African National ID card image and the data extracted from it (surname, names, ID number, date of birth, sex, nationality, citizen status, country of birth).
- Your driving licence card image and extracted fields (licence number, code, dates, restrictions, PrDP).
- Contact details: phone, email, address, province.
- Work experience you share.
Why we collect it
We use this information only to verify your identity and qualifications for driving roles, match you with companies hiring drivers, and meet legal requirements (e.g. South African Revenue Service tax IDs).
Who can see it
Only the driver who uploaded the data and our authorised fleet admins can access your documents. Documents are stored encrypted in private Supabase Storage and served only via short-lived signed URLs.
How long we keep it
While your application is active and for 3 years after a final decision for compliance audit purposes. You can request deletion at any time by contacting popia@mysymbiosis.co.za.
Your rights
- Access — see what we have on file (the driver dashboard shows all of it).
- Correction — edit any of your data from your dashboard.
- Deletion — email us to permanently delete your record.
- Complain — to the Information Regulator (South Africa).