Privacy Policy

Last updated 27 June 2026

POPIAGDPR

This Privacy Policy explains how Scio Group (Pty) Ltd (the company behind Drv Circle) ("we", "us") collects, uses, shares and protects personal information when you use our website, our driver and rider mobile apps, and related services (the "Services"). We comply with South Africa's Protection of Personal Information Act, 2013 (POPIA) and, where it applies, the EU/UK General Data Protection Regulation (GDPR).

1. Who is responsible

The responsible party / data controller is Scio Group (Pty) Ltd, registration number [registration number], of 139 Greenway, Greenside, Randburg, 2194, South Africa. Our Information Officer (POPIA) can be reached at privacy@drvcircle.com.

2. Information we collect

• Account details. Name, email address and (for drivers) phone number, created when you sign up.
• Verification documents. Drivers submit ID, driver's licence, vehicle registration, roadworthy certificate and a profile photo; riders submit an ID and a profile photo. These confirm identity and eligibility.
• Profile & activity. Your circle of saved riders/drivers, rebook requests, vehicles, platforms and payment options you choose to offer, and notes you add.
• Device data. A push-notification token so we can send you alerts; basic device/app version information.
• Website data. By default only what's essential to serve the site. With your consent, we may use analytics (see our Cookie Policy).

We do not collect payment card details. Drv Circle never processes payments; riders pay drivers directly.

3. How and why we use it

• To provide and operate the Services (your circle, QR card, rebookings, messaging).
• To verify driver and rider accounts and keep the platform trustworthy.
• To send service notifications (e.g. verification reminders, rebook requests) by push, SMS or email.
• To improve and secure the Services, and to comply with legal obligations.

4. Legal basis for processing

Under GDPR we rely on: performance of a contract (to provide the Services), consent (e.g. analytics, optional notifications), legitimate interests (to secure and improve the Services) and legal obligation. Under POPIA we process personal information on the bases of consent, conclusion/performance of a contract, and compliance with the law.

5. Who we share it with

We share personal information only with operators/processors who help us run the Services, under contract and instruction:

• Hosting & infrastructure. Microsoft Azure.
• Notifications. Expo (push), Africa's Talking (SMS), Mailchimp/Mandrill (email).
• Sign-in. Google and Facebook, if you choose social sign-in.

We never sell your personal information.

6. International transfers

Some providers may process data outside South Africa or the EU. Where they do, we rely on appropriate safeguards (such as Standard Contractual Clauses and POPIA section 72 conditions) to protect your information.

7. How long we keep it

We keep personal information for as long as your account is active and as needed to provide the Services, then for any period required to meet legal, accounting or dispute-resolution obligations, after which it is deleted or anonymised.

8. Your rights

Subject to law, you may request to access, correct, delete or object to the processing of your personal information, withdraw consent, and (under GDPR) request portability or restriction. Contact privacy@drvcircle.com. To delete your account and data, follow the steps on our Data Deletion page.

You may also complain to a regulator: in South Africa, the Information Regulator (inforegulator.org.za); in the EU/UK, your local data-protection supervisory authority.

9. Security

We use reasonable technical and organisational measures (encryption in transit, access controls, secure cloud hosting) to protect personal information. No system is perfectly secure, but we work to keep your data safe.

10. Children

The Services are for adults (18+). We do not knowingly collect personal information from children.

11. Changes

We may update this policy; we'll post the new version here and update the date above. Material changes will be notified in-app or by email where appropriate.

12. Contact

Questions or requests: privacy@drvcircle.com.