Payment made after Mobile Installation
Lock IQ

Privacy Policy

Effective date: 15 July 2026

Lock IQ Technologies (Pty) Ltd (“Lock IQ”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”), the Electronic Communications and Transactions Act, 25 of 2002 (“ECTA”), the Consumer Protection Act, 68 of 2008 (“CPA”), and any other applicable South African law.

This Privacy Policy explains what personal information we collect when you use our vehicle tracking, telematics, stolen vehicle recovery, and related services (the “Services”), why we collect it, how we use and share it, how long we retain it, and the rights available to you as a data subject.

1. Responsible party

Lock IQ is the responsible party for the processing of your personal information as defined in POPIA. You can contact us at:

2. Personal information we collect

To provide the Services, we collect and process the following categories of personal information:

2.1 Account and identity information

  • Full name, ID or passport number, date of birth
  • Contact details (email, mobile number, physical and postal address)
  • Login credentials and authentication data
  • Emergency contact details you provide

2.2 Vehicle information

  • Vehicle make, model, year, colour, registration number and VIN
  • Vehicle licence and registration documents
  • Installation location, technician notes and device serial numbers

2.3 Location and telematics data

  • Real-time and historical GPS/GSM location of the fitted vehicle
  • Speed, heading, ignition status, harsh braking, harsh acceleration, cornering and idle events
  • Trip history, geofence entry/exit events and tamper or jamming alerts
  • Device diagnostics, battery voltage and signal strength

2.4 Financial information

  • Billing address and subscription plan
  • Payment method metadata processed through our authorised payment providers (e.g. Paystack). We do not store full card numbers or CVVs on our servers.

2.5 Recovery and incident information

  • Case notes, SAPS case numbers, insurer references, and communications relating to incidents
  • Records of interactions with our control room, technicians and recovery partners

2.6 Technical information

  • Device type, browser, operating system, IP address
  • Cookies, session identifiers and analytics data
  • Support tickets, call recordings and messages

3. How we collect information

  • Directly from you when you register, purchase, request a quote, complete forms or contact support
  • From the tracking device fitted to your vehicle
  • From our authorised installers and technicians
  • From third parties such as insurers, brokers, fleet managers, dealers or fitment centres where you have authorised such sharing
  • From public sources such as the SAPS, licensing authorities and credit bureaus where lawfully permitted

4. Why we process your information (purpose & lawful basis)

We process your personal information for the following purposes and on the lawful bases indicated:

  • Performance of contract — to activate, deliver, maintain and support the Services, process payments, and manage your account.
  • Legal obligation — to comply with RICA, FICA, POPIA, tax and other statutory obligations.
  • Legitimate interest — to prevent fraud, secure our systems, improve our Services, and assist with vehicle recovery.
  • Consent — for direct marketing communications, non-essential cookies and any optional data sharing.
  • Protection of a legitimate interest of the data subject — to locate, recover and protect your vehicle in the event of theft or hijacking, and to assist emergency responders.

5. Sharing your information

We do not sell your personal information. We only share it with:

  • Authorised recovery partners, armed response and SAPS during theft, hijacking or emergency incidents
  • Your insurer or broker where you have provided consent or a valid insurance mandate
  • Approved payment processors, banks and financial institutions to process transactions
  • Hosting, cloud infrastructure, SMS, email and telecommunication providers who process data on our behalf as operators under written agreement
  • Professional advisors (auditors, attorneys) under confidentiality
  • Regulators, courts or law enforcement where required by law or a valid legal process
  • A successor entity in the event of a merger, acquisition or restructuring

All operators are contractually required to process personal information only for the purposes we specify, to maintain appropriate security safeguards, and to notify us of any compromise.

6. Cross-border transfers

Some of our cloud, analytics or communication providers may process data outside South Africa. Where this occurs, we ensure the recipient is subject to laws, binding corporate rules or contractual terms that provide an adequate level of protection substantially similar to POPIA, in line with section 72 of POPIA.

7. Retention

  • Account and subscription records: for the duration of your subscription and up to 5 years thereafter for statutory and audit purposes.
  • Telematics and location data: retained for up to 12 months on active servers and thereafter archived or anonymised, unless required for an active incident, insurance claim or legal matter.
  • Financial records: minimum 5 years as required by tax legislation.
  • Support communications: up to 3 years.

We may retain information for longer where required by law, for the establishment, exercise or defence of legal claims, or with your consent.

8. Security

We implement appropriate, reasonable technical and organisational measures to protect personal information from loss, damage, unlawful access or unauthorised destruction, including encryption in transit, access controls, role-based permissions, activity logging, secure hosting, and regular reviews. No system is completely secure and you must keep your login credentials confidential.

9. Your rights as a data subject

Under POPIA you have the right to:

  • Be notified that your personal information is being collected or has been accessed by an unauthorised person
  • Request access to your personal information (via a PAIA request)
  • Request correction, deletion or destruction of inaccurate, irrelevant, excessive, out-of-date, misleading or unlawfully obtained information
  • Object, on reasonable grounds, to the processing of your personal information
  • Object to direct marketing at any time, free of charge
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Information Regulator

To exercise these rights, contact info.officer@lockiq.co.za.

10. Direct marketing

We will only send you direct marketing about our Services where you have consented, or where you are an existing customer and the marketing relates to similar products or services. You can opt out at any time using the unsubscribe link in our emails, replying “STOP” to SMS messages, or emailing us.

11. Cookies and analytics

Our website uses strictly necessary cookies to operate, and may use analytics and performance cookies where you consent. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

12. Children

The Services are not directed at children under 18. We do not knowingly collect personal information from children without the consent of a competent person.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with an updated effective date. Material changes will be communicated by email or in-app notification.

14. Complaints

If you believe your personal information has been processed unlawfully, first contact our Information Officer. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa: