Last updated: 3 April 2026
1. Who We Are
Nuff Reg GP ("Nuff Reg", "we", "us", "our") is a vehicle administration service provider based in Orange Grove, Johannesburg, Gauteng, South Africa. We operate the Nuff Reg website at nuffreg.co.za and the Nuff Reg application (iOS, Android and Web).
For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), Nuff Reg GP is the responsible party for personal information processed through our services.
Contact: info@nuffreg.co.za · 076 082 0569 · No12 2nd Street, Orange Grove, Gauteng
2. What Information We Collect
We collect personal information only where it is necessary to provide our services or comply with legal obligations.
2.1 Account & Identity Information
- Full name
- Email address
- Phone number
- ID type and ID number (RSA ID, passport, or other)
- Physical address (proof of residence)
2.2 Vehicle Information
- Vehicle registration number
- VIN (Vehicle Identification Number)
- Make, model, colour, fuel type
- Licence disc details and expiry dates
2.3 Service & Transaction Information
- Service requests submitted (type, status, history)
- Documents uploaded (ID copies, registration certificates, proof of residence, etc.)
- Payment records and transaction references
- Communications between you and our team
2.4 Technical Information
- Device push notification token (for app notifications)
- App usage logs for debugging and error reporting
- IP address and basic request metadata (standard server logs)
3. How We Use Your Information
| Purpose | Legal basis (POPIA) |
|---|---|
| Delivering and managing the services you request | Performance of a contract |
| Verifying your identity before processing paid services | Legitimate interest / legal obligation |
| Sending service status updates via push notification | Performance of a contract |
| Sending licence disc expiry reminders | Legitimate interest |
| Processing payments and maintaining financial records | Legal obligation |
| Improving our service and diagnosing technical issues | Legitimate interest |
| Complying with South African vehicle administration law | Legal obligation |
We do not use your personal information for automated decision-making or profiling, and we do not use it for direct marketing without your explicit consent.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We share it only in the following limited circumstances:
4.1 Service Providers (Processors)
- Supabase Inc. — Cloud database and file storage. Your data is stored in Supabase's secure PostgreSQL infrastructure. Supabase acts as a data processor under our instruction. Data may be stored in EU or US data centres. Supabase Privacy Policy.
- Google (Firebase) — Push notification delivery via Firebase Cloud Messaging. Only your device notification token is shared. Firebase Privacy Policy.
4.2 Government & Regulatory Bodies
Where required to process your vehicle administration (e.g. submission to the DLTC or eNaTIS), we share only the information legally required for that specific transaction.
4.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or to protect the rights, property, or safety of Nuff Reg, our clients, or the public.
5. How We Protect Your Information
- Row-level security (RLS): Database access rules ensure that each user can only access their own records — our system enforces this at the database level, not just the application layer.
- Encrypted storage: Sensitive credentials (authentication tokens) are stored in your device's encrypted secure storage.
- HTTPS: All data in transit is encrypted using TLS.
- Access controls: Only authorised Nuff Reg staff assigned to your service request can view your documents and personal details.
- Server-side business logic: Service state changes are handled exclusively by server-side functions — client apps cannot directly modify sensitive records.
No method of electronic storage or transmission is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as:
- Your account is active, or
- It is needed to provide services you have requested, or
- We are required to keep it by law (e.g. financial records for 5 years under the Companies Act).
When you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law.
7. Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — request that inaccurate or incomplete information be corrected.
- Deletion — request erasure of your personal information (subject to legal retention requirements). See our Data Deletion page.
- Objection — object to the processing of your information in certain circumstances.
- Complaint — lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.
To exercise any of these rights, contact us at info@nuffreg.co.za. We will respond within 30 days.
8. Children's Privacy
Our services are not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.
9. Cross-Border Data Transfers
Some of our service providers (Supabase, Google Firebase, Meta) may store or process your data outside South Africa. Where this occurs, we rely on those providers' adherence to equivalent data protection standards and their standard contractual clauses to protect your information.
10. Cookies & Website Analytics
Our website (nuffreg.co.za) does not currently use tracking cookies or third-party analytics services. Basic server access logs are retained for security purposes only.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. If changes are material, we will notify you via email or in-app notification. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related questions or requests:
- Email: info@nuffreg.co.za
- WhatsApp: 076 082 0569
- Address: No12 2nd Street, Orange Grove, Johannesburg, Gauteng, South Africa
