Privacy Statement

This privacy statement was last updated on 12 March 2026 and applies to citizens and legal permanent residents of South Africa.

In this privacy statement, we explain what we do with the data we obtain about you via https://www.evonline.co.za. We recommend you carefully read this statement. In our processing we comply with the requirements of the Protection of Personal Information Act 4 of 2013 (POPIA) and applicable privacy legislation. That means, among other things, that:

  1. we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
  2. we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
  3. we first request your explicit consent to process your personal data in cases requiring your consent;
  4. we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
  5. we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

1.1 Contact – Through phone, mail, email and/or webforms

For this purpose we use the following data:

  1. A first and last name
  2. An email address
  3. A telephone number
  4. IP Address
  5. ID Number
  6. Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  7. Geolocation data
  8. Commercial information, including records of personal property, products or services purchased, obtained, or considered

Retention period We retain this data upon termination of the service for the following number of months: 1

1.2 Compiling and analyzing statistics for website improvement.

For this purpose we use the following data:

  1. A telephone number
  2. IP Address
  3. Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  4. Geolocation data

Retention period We retain this data upon termination of the service for the following number of months: 1

1.3 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

  1. A first and last name
  2. An email address
  3. A telephone number
  4. IP Address

Retention period We retain this data upon termination of the service for the following number of months: 1

1.4 To be able to offer personalized products and services

For this purpose we use the following data:

  1. A first and last name
  2. An email address
  3. A telephone number
  4. IP Address
  5. Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  6. Geolocation data
  7. Commercial information, including records of personal property, products or services purchased, obtained, or considered

Retention period We retain this data upon termination of the service for the following number of months: 1

1.5 Sharing Personal Information with service providers and a third party

For this purpose we use the following data:

  1. A first and last name
  2. An email address
  3. A telephone number
  4. IP Address
  5. Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement
  6. Geolocation data
  7. Commercial information, including records of personal property, products or services purchased, obtained, or considered

Retention period We retain this data upon termination of the service for the following number of months: 1

1.6 We also collect or may have collected personal information that we buy or receive from a third party. This is done under the following circumstances

We send a South African ID number to a third-party credit bureau to perform a credit check. In return, we receive a credit score for that individual. This only occurs when the user has indicated on our vehicle enquiry form that they wish to finance a vehicle and has voluntarily provided their SA ID number. The credit score is used solely to assess whether the lead qualifies for vehicle finance.

2. What if you don’t provide us with your personal information?

If you don’t provide us with your personal information, we may not be able to provide you with the information, products or assistance that you are seeking.

3. Sharing with other parties

We only share this data with operators and with other third parties where we have a lawful basis to do so, which may include consent. We take reasonable steps to ensure that these parties process your personal data in compliance with applicable data protection and privacy legislation.  

Operators

Name: Zoho CRM
Purpose: Customer relationship management and lead tracking

Data: Name, email address, telephone number, IP address

Name: The Website Engineer
Purpose: website development and technical support

Data: Name, email address, IP address, internet activity

Third parties

Name: Google
Purpose: analytics, advertising optimisation and conversation tracking
Data: IP address, internet activity, geo location, hashed conversion data

Name: Facebook (Meta)
Purpose: advertising optimisation and conversion tracking
Data: IP address, internet activity, hashed conversion data

Name: Tiktok
Purpose: advertising optimisation and conversion tracking
Data IP address, internet activity, hashed conversion data

Name: Kredo
Purpose: Automated credit assessment for vehicle finance applications
Data: ID Number, credit score (which is received in return)

Note: Where personal information is transferred to parties outside South Africa, we take steps to ensure that such transfers comply with Section 72 of POPIA and that the receiving party provides an adequate level of protection for your personal information.

4. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.

5. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

We have concluded a data processing agreement with Google.

6. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

In the event of a security compromise, as set out in Section 22 of POPIA, we will notify the Information Regulator and affected data subjects.

7. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

8. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

9. Your rights

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights under POPIA:

  1. You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
  2. Right of access: You have the right to access your personal data that is known to us.
  3. Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
  • Right to withdraw consent: If you have given us your consent to process your data, you have the right to withdraw that consent and to have your personal data deleted, subject to applicable legal retention obligations.
  1. Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please ensure that you clearly identify yourself when submitting any request, so that we can be certain that we do not modify or delete any data of the wrong person. We will respond to requests within a reasonable time and in accordance with applicable legislation.

10. Automated decision-making

We make decisions on the basis of automated processing with respect to matters that may have (significant) consequences for individuals. These are decisions taken by computer programmes or systems without human intervention.

Credit Assessment: When a user submits their SA ID number via the Vehicle Enquiry form, it is sent to Kredo for an automated credit check. The returned credit score is used to assess whether the applicant qualifies for vehicle finance. The consequence is that an applicant may be approved or declined, directly affecting their ability to access the product. The data subject will be afforded the opportunity to request that the dealership review any decision made solely based on this automated assessment. All requests must be sent to popi@eastvaal.co.za The request will be reviewed, but the final decision will rest with the finance house.

Advertising Optimisation: Hashed personal data relating to conversion outcomes is shared with Google Ads, Facebook, and TikTok via Conversions APIs. These platforms use automated algorithms to build audience profiles and optimise ad delivery. The consequence is that users may be included in or excluded from advertising audiences.

11. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Information Regulator South Africa:
P.O Box 31533,
Braamfontein,
Johannesburg,
2017
Complaints email: complaints.IR@justice.gov.za

Website: https://www.justice.gov.za/inforeg/

We encourage you to first contact us directly so that we may attempt to resolve your concern before you approach the Regulator.

12. Children

Our website is not designed to attract children, and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

13. Contact details

Eastvaal Motors (Pty) Ltd
C/O Cowen Ntuli & Morkel Street, Middelburg, 1095
South Africa
Website: https://www.evonline.co.za
Email: popi@eastvaal.co.za
Phone number: (013) 282 4681

We have appointed a contact person for the organisation’s policies and practices and to whom complaints or inquiries can be forwarded:
Jaco Taljaard
C/O Cowen Ntuli & Morkel Street, Middelburg, 1095