CLAUSE 1.0
Statutory Compliance
1. Statutory Framework & Scope of Policy
Loads For Africa (Pty) Ltd ("LFA", "we", "us", or "our") operates an enterprise electronic freight exchange and multi-corridor road freight clearing network. This Privacy Policy and Statutory Data Protection Notice is promulgated in rigorous adherence to the substantive provisions of:
balancePOPIA (Act No. 4 of 2013)
Governs the lawful processing of personal and juristic entities' information within the Republic of South Africa.
lanECTA (Act No. 25 of 2002)
Validates electronic contracting, automated load manifests, e-signatures, and digital transaction auditability.
shield_personCPA (Act No. 68 of 2008)
Mandates fair operational practices, uncompromised terms, transparent brokerage fees, and privacy standards.
local_shippingNRTA (Act No. 93 of 1996)
Requires strict carrier roadworthiness certificates (COF), PrDP verification, and corridor transit auditing.
This policy governs all access to the Loads For Africa web application, REST APIs, automated dispatch webhooks, corridor tracking pings, and administrative consoles. By accessing our platform, participating as a registered Shipper, Freight Broker, or Haulier/Transporter, you recognize that your data will be processed according to these statutory benchmarks.
CLAUSE 2.0
Entity Identification
2. Responsible Party Identification & Legal Entity Details
Under Section 1 of POPIA, Loads For Africa (Pty) Ltd acts as the "Responsible Party" for data collected during user provisioning, fleet verification, freight quotation, and corridor telemetry.
Registered Legal Name
Loads For Africa (Pty) Ltd
CIPC Registration Number
2021/849201/07
Information Officer
Adv. T. Mokoena (Head of Legal & Compliance)
SARS VAT Registration
4920294182
Principal Head Office & Process Service Address
Sandton Logistics Hub, 14 Commerce Crescent, Sandton, Johannesburg, Gauteng, 2196, South Africa
Our Section 51 PAIA Manual is lodged with the South African Information Regulator and is permanently accessible at our principal place of business upon written appointment, or by automated download via this compliance portal.
CLAUSE 3.0
Data Taxonomy
3. Categories of Information Processed
To maintain high-liquidity freight trading while eradicating corridor fraud and unauthorized haulage, Loads For Africa collects tiered operational, telemetry, and corporate data:
rv_hookup
A. Transporter & Haulier Enterprise Data
Required for KYC, fleet validation, and corridor dispatch privileges
- Professional Driving Permit (PrDP) and identity numbers
- CIPC Certificate of Incorporation & Beneficial Ownership register
- Truck Tractor & Trailer Registrations (COF documentation)
- Goods in Transit (GIT) policy schedules (Minimum R500k cover)
- SARS Tax Clearance Status & PIN verification records
- Designated Driver Mobile numbers and 24/7 Dispatch telemetry contacts
package_2
B. Cargo Consignor / Shipper Data
Required for load publishing, rate negotiation, and invoice settlement
- Enterprise legal trade names and corporate registration numbers
- Cargo manifests, hazardous goods classification, weight declarations
- Origin and destination geocoordinates, warehouse receiving contact logs
- Corporate billing addresses, VAT numbers, and accounts payable emails
- Authorized dispatch personnel digital signatures and identification
satellite_alt
C. Automated Telematics & Geolocation Payloads
Generated automatically while a load manifest is assigned or in active transit
- Sub-second GPS coordinates along designated corridors (N1, N2, N3, N4)
- Axle weighbridge clearance stamps (e.g., Heidelberg, Marianhill)
- Geofence entrance and egress triggers at customs and bonded yards
- Electronic Proof of Delivery (e-POD) signoffs, photos, and timestamps
CLAUSE 4.0
POPIA Compliance Matrix
4. Eight Conditions for Lawful Processing
In compliance with Chapter 3, Part A of POPIA, all operations performed across Loads For Africa map precisely to the 8 statutory conditions:
Condition 1: Accountability
The designated Information Officer guarantees all processing controls, logs, and sub-processor agreements remain auditable.
Condition 2: Processing Limitation
Only minimal information strictly necessary to verify haulage capacity, mitigate transit theft, and clear invoices is collected.
Condition 3: Purpose Specification
Data is collected explicitly for logistics facilitation, escrow custody, and cross-border customs declarations.
Condition 4: Further Processing Limitation
Telemetry and load specs are never commercialized, resold, or used for behavioral ad-targeting without express consent.
Condition 5: Information Quality
Automated validation runs against CIPC, SARS eFiling, and PRDP APIs to verify the ongoing veracity of carrier profiles.
Condition 6: Openness
Full transparency via notifications when manifests are retrieved, drivers assigned, or tracking intervals updated.
Condition 7: Security Safeguards
Military-grade TLS 1.3 in-transit encryption, AES-256 data-at-rest encryption, and hardware security nonces.
Condition 8: Data Subject Participation
Automated, self-service portals and formal statutory submission workflows to access, update, or purge stale profile records.
CLAUSE 5.0
Corridor Telematics
5. Real-Time Telematics & Geolocation Tracking
By accepting a consignment waybill through Loads For Africa, transporters expressly consent to the processing of real-time geospatial telematics. This processing is deemed indispensable under Section 11(1)(b) of POPIA for the performance of the carriage contract.
pin_drop
Legitimate Grounds for Corridor Tracking
- Cargo Security & Anti-Hijack Telemetry: Anomaly detection triggers automated alerts to regional SAPS Highway Patrol and private recovery units when off-route deviance exceeds 3.5 km.
- Border Post Queue Prediction: Real-time dwell-time calculation at Beitbridge, Lebombo, and Groblersbrug to re-route consignments around severe corridor blockages.
- Proof of Delivery (e-POD) Cryptographic Geostamping: Automatic unlocking of escrow disbursement upon verifiable entry into the designated geofence coordinates of the receiving warehouse.
Telemetry collection terminates immediately upon verified consignee sign-off and receipt generation. Passive off-duty location tracking of drivers is strictly prohibited under our system architecture.
CLAUSE 6.0
Financial Protection
6. TradeSafe Escrow & Financial Data Security
All payment handshakes, escrow ring-fencing, and driver settlement transfers are executed through Level-1 PCI-DSS compliant payment gateways, primarily TradeSafe Escrow (Pty) Ltd and regulated South African commercial banking conduits (acting under South African Reserve Bank National Payment System directives).
credit_card_off
Zero Raw CVV Storage
Card numbers and CVV codes never touch or get stored on Loads For Africa database instances.
token
Tokenized Escrow
Funds remain segregated in trust accounts until milestone validation triggers cryptographic release tokens.
account_balance
SARB & FICA Verified
Transfers over R25,000 undergo automated anti-money laundering cross-checks against SARB watchlists.
CLAUSE 7.0
Statutory Disclosures
7. Third-Party Disclosures & Regulatory Sharing
Loads For Africa will not sell, rent, or trade your enterprise or personal identifiers. Disclosures are executed strictly under statutory duty or automated contractual facilitation:
verified_user
Companies and Intellectual Property Commission (CIPC)
Automated validation of company registration status, director registers, and beneficial ownership filings.
receipt_long
South African Revenue Service (SARS)
Transactional audit records, VAT 201 transaction matching, and Section 31 cross-border transit logs.
shield
Goods In Transit (GIT) Underwriters & Risk Assessors
Authorized underwriters (e.g., Santam, Hollard, Old Mutual Insure) receive route logs, vehicle details, and telematics in the event of an active transit incident claim.
CLAUSE 8.0
Trans-Corridor SADC
8. Cross-Border Data Flows within SADC Corridors
In operating cross-border logistics lanes bridging South Africa into SADC member countries (including Zimbabwe, Mozambique, Botswana, Zambia, and Namibia), personal and vehicle data crosses sovereign borders under Section 72 of POPIA.
Designated Customs Gates & Cross-Border Protocol
Beitbridge (N1 North)
South Africa ⇄ Zimbabwe. Manifest synchronization with ZIMRA and SARS Customs.
Lebombo (N4 East)
Maputo Corridor ⇄ Mozambique. Real-time bonded cargo seals and driver clearance.
Kopfontein / Skilpadshek
Trans-Kalahari Corridor ⇄ Botswana / Namibia. Automated cross-border permit clearing.
All recipients in foreign jurisdictions are bound by bilateral reciprocal data protection clauses or statutory regimes offering substantially similar protection to Section 72(1)(a) of POPIA.
CLAUSE 9.0
Defense-in-Depth
9. Data Security, Nonces & Audit Trails
Loads For Africa enforces comprehensive technical and organizational safeguards conforming to ISO/IEC 27001 standards and Section 19 of POPIA:
lock
TLS 1.3 & ChaCha20-Poly1305 Cipher Suites
Every telemetry payload and user session is encrypted in transit using hardened forward-secret protocols.
key
SHA-256 CSRF Tokens & Cryptographic Nonces
Form submissions, load bids, and quote acceptances require one-time nonces to eliminate replay attacks.
history_edu
Immutable Security Audit Logs via Logger::security()
Administrative accesses, record modifications, and document downloads are mirrored to append-only WORM storage.
timer
Session Inactivity Timeouts & Step-Up Auth
Administrative and driver dispatch dashboards timeout after 15 minutes of inactivity; wire transfers require biometric or OTP 2FA.
CLAUSE 10.0
Statutory Petitions
10. Data Subject Rights & Formal POPIA Request Procedure
In accordance with Sections 23, 24, and 25 of POPIA, you possess the unalienable right to request confirmation of whether we hold personal records, obtain a copy thereof, demand correction of inaccurate records, or demand destruction of records no longer retained under statutory fiscal laws.
Submit Statutory Form 1 / Form 2 Request
Lodged directly with the Loads For Africa Information Officer
assignment_turned_in
badge
Registered Information Officer Contact Information
Officer Name
Adv. T. Mokoena
Emergency Dispatch Desk
0800 562 372 (Toll-Free RSA)
Should you feel your grievance has not been satisfactorily addressed by our Information Officer, you retain the statutory entitlement to lodge a formal complaint with the South African Information Regulator: complaints.IR@justice.gov.za.