This notice explains how Scooter125 processes personal information under the Protection of Personal Information Act 4 of 2013, and how to exercise your rights under it. It sits alongside the privacy policy, which describes our practices in plainer terms.
Last updated: 21 August 2026.
Responsible party
The responsible party is Ross Smith, trading as Scooter125, a sole proprietor in South Africa. As there is no separate registered company, no company registration number applies. Physical and postal address: 292 Surrey Avenue, 1st Floor, Randburg, Johannesburg, Gauteng, 2194.
Information Officer
POPIA requires a registered Information Officer. For a sole proprietor the head of the business is the Information Officer, so that is Ross Smith. He can be reached at privacy@scooter125.net or on 064 105 6800. His registration as Information Officer is currently being processed by the Information Regulator, and this notice will be updated with the date once it is confirmed.
Lawful basis for processing
We process personal information because it is necessary to provide a service you have asked for, because we have a legitimate interest in operating and protecting the platform, or because you have consented. Where we rely on consent, you may withdraw it at any time.
Categories of information and purpose
- Contact details of sellers, so buyers can reach them. A listing makes the mobile number public by design, and listing a bike is your consent to that.
- Dealer business and feed credentials, to import stock automatically.
- Usage and search data, to operate and improve the site.
Direct marketing and how to opt out
We send dealers operational email about their own stock feed, which is service communication rather than marketing. Any actual marketing is sent only with consent.
Every marketing email carries an unsubscribe link that works immediately. You may also opt out at any time by using the contact form and choosing “Something else”, or by replying to any message asking to be removed. We action opt outs within one business day and keep a record that you opted out, which is the only way to make sure you are not contacted again.
Sharing and cross border transfer
We share personal information with the recipients listed in the privacy policy. Several of those recipients are outside South Africa. Our hosting and email run on Hosting.com servers in New York, United States. Amazon CloudFront delivers content from edge locations outside South Africa. Dealer pages embed a Google map, so Google LLC in the United States receives your IP address when you open one. Each of these suppliers is engaged under its standard data processing terms and contractual clauses, which bind it to protect the information on a basis comparable to POPIA. We rely on section 72(1)(a) for these transfers. PayFast, which processes payments, is in South Africa and no transfer arises.
Security
Access to personal information is restricted to people who need it. Dealer feed credentials are encrypted at rest. Data is transmitted over HTTPS. If a breach occurs that is likely to affect you, we will notify you and the Information Regulator as section 22 requires.
Your rights under POPIA
- To be told what personal information we hold about you, and to receive a copy.
- To have information corrected or deleted where it is inaccurate, irrelevant, excessive, out of date or unlawfully obtained.
- To object to processing on reasonable grounds.
- To withdraw consent where consent is what we relied on.
- To not be subject to a decision based solely on automated processing.
- To complain to the Information Regulator.
Requests are made on Form 2 of the POPIA regulations, or simply in writing through the contact form. We respond within thirty days.
The Information Regulator
Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001.
Complaints: complaints.IR@justice.gov.za
General enquiries: enquiries.IR@justice.gov.za