ANYRARE GROUP
Website Privacy Policy
AnyRare Group (Pty) Ltd, Registration number 2026/355440/07
Version 1.0 - September 2026
This Policy explains how AnyRare handles personal information collected through its corporate website and related enquiries. It is our privacy notice under the Protection of Personal Information Act 4 of 2013 (POPIA). It does not require you to consent to every type of processing described below.
1. Who is responsible for your information
1.1. AnyRare Group (Pty) Ltd, registration number 2026/355440/07, operates this website and is the responsible party for the processing described in this Policy. References to “AnyRare”, “we”, “us” and “our” mean that company. AnyRare Auto is the brand presented on the website.
1.2. Office: Kempton Park, Gauteng, 1619, South Africa.
1.3. Information Officer: Charmain Eloff, Chief Executive Officer.
1.4. Privacy enquiries: info@anyrare.co.za, marked for the Information Officer.
2. Scope
2.1. This Policy applies to visitors to anyrare.co.za; persons using Connect With Us or Join the Movement; prospective suppliers, workshops, retailers, investors and other stakeholders; subscribers to updates; and correspondence arising from those interactions. Personal information includes information about identifiable living individuals and, where applicable, identifiable existing juristic persons.
2.2. The website introduces a business under development. This Policy does not govern future marketplace accounts, payments, VIN or vehicle-history services, supplier integrations, automated profiling or commercial analytics. Appropriate notices and terms will be provided before those services introduce new processing.
3. Information collected and its sources
3.1. Contact information: your name, email address, telephone number, role, business name, location and preferred contact method, as relevant to your enquiry.
3.2. Business and stakeholder information: your industry category, brands, products or services, areas served and the nature of your interest in working with or investing in AnyRare.
3.3. Correspondence: the content of your enquiry, expression of interest and follow-up communications.
3.4. Technical information: IP address, browser and device information, access times, pages requested and security or error logs generated by the website. Cookies and similar technologies are addressed below.
3.5. We ordinarily collect information directly from you, through your communications or through your device’s interaction with the website. We may also receive it from an authorised business representative. Where information is obtained indirectly, we will provide the source and other required information in accordance with POPIA, unless a lawful exception applies.
3.6. Please provide accurate information and only information reasonably needed for your enquiry. General forms are not intended for identity documents, banking credentials, health information, criminal-history information, children’s information or confidential supplier datasets.
4. Whether you must provide information
Using an enquiry form or registering an expression of interest is voluntary. Each form identifies the fields needed to respond or assess your interest. If you omit those details, we may be unable to assist. Other fields and marketing subscriptions are optional. No law requires you to submit an ordinary website enquiry. Where a specific law authorises or requires collection for a different interaction, we will identify that law in the relevant notice.
5. Purposes and lawful grounds
5.1. We use enquiry and stakeholder information to respond, assess the opportunity you have identified, arrange discussions, manage related correspondence and maintain appropriate business records. These activities generally pursue our legitimate interest in responding to requests and developing business relationships, subject to your rights. Where processing is necessary to conclude or perform a contract with you, that contractual ground applies.
5.2. We use necessary technical information to administer and protect the website, investigate misuse, prevent fraud and maintain reliable services. We also process information where necessary to comply with a legal obligation or establish, exercise or defend legal rights, relying on the applicable lawful ground in POPIA.
5.3. Marketing subscriptions are dealt with separately in section 7. We will not use an enquiry or expression of interest as blanket permission to enrol you on a future platform, profile you or use identifiable information for unrelated commercial analytics. Further processing must be compatible with the collection purpose or otherwise permitted by law.
6. Sharing and service providers
6.1. Where reasonably necessary for the purposes above and lawfully permitted, information may be disclosed to hosting, email, communications, cloud-storage, IT-support, security and website-development providers; authorised analytics providers where used; professional advisers; and authorities where disclosure is required or authorised by law. Disclosure to a prospective corporate transaction party requires a lawful purpose and appropriate confidentiality and data-protection safeguards.
6.2. Providers acting as operators on our behalf must process information only with our knowledge or authorisation, keep it confidential and be bound by written security obligations. An operator must notify us immediately if it has reasonable grounds to believe information has been accessed or acquired by an unauthorised person. Independent responsible parties remain subject to their own legal obligations.
6.3. We do not sell personal information collected through this corporate website. Neither use of the website nor membership of a future corporate group authorises unrestricted sharing of your information.
7. Marketing and updates
7.1. Submitting an enquiry or selecting Join the Movement does not subscribe you to marketing. We may reply to your request and follow up on the particular opportunity you identify. Any invitation to receive promotional emails is a separate, optional choice.
7.2. Electronic direct marketing requires the consent contemplated by section 69 of POPIA unless its limited existing-customer exception applies. That exception concerns contact details obtained in the context of a sale, marketing of our own similar products or services, and a free opportunity to object at collection and in each message. An enquiry alone does not satisfy that exception.
7.3. Marketing messages identify the sender and provide a simple unsubscribe method or contact address. You may withdraw consent or object to direct marketing at any time, without charge or unnecessary formality. We will stop that marketing and may keep a minimal suppression record to prevent you from being added again. Withdrawal does not affect processing that was lawful before it occurred.
8. Cookies and similar technologies
8.1. Cookies are small files stored on a device; related tools may use other identifiers or signals. The website may require technical tools for essential functionality, security and preferences. Optional analytics, embedded services or advertising tools may collect additional information where introduced.
8.2. Before optional tracking is activated, the applicable notice or settings must explain the provider, purpose, information collected, duration and relevant overseas processing. Where we rely on consent, optional tools remain disabled until you opt in. You may reject them or later withdraw consent through the available settings. Refusing optional tracking does not prevent you from submitting an ordinary enquiry. Browser settings may also allow you to delete or block cookies, although blocking necessary tools may affect functionality.
9. Processing outside South Africa
9.1. Technology providers may host information or allow support access outside South Africa. Any intended transfer must meet section 72 of POPIA. Depending on the circumstances, this requires adequate protection under applicable law, binding corporate rules or an agreement providing substantially similar processing principles and onward-transfer protection, or another applicable statutory ground.
9.2. Before a relevant transfer, we will make the intended overseas processing and level of protection known through this Policy or a supplementary collection notice. The use of a foreign provider does not by itself establish adequate protection, and accepting the Terms of Use is not blanket consent to international transfers.
10. Retention
10.1. We keep information only for as long as the purpose reasonably requires, or while retention is otherwise authorised or required by law. Relevant factors include whether an enquiry remains active, the resulting relationship, contractual and statutory recordkeeping duties, evidence of consent or an opt-out, and a reasonably anticipated or existing dispute. Expressions of interest are not retained indefinitely merely because a platform is planned.
10.2. When information is no longer lawfully required, we will delete, destroy or de-identify it as soon as reasonably practicable using methods intended to prevent reconstruction in an intelligible form. Where POPIA requires restricted processing instead, we will restrict it. Minimal suppression information may be retained to honour marketing objections.
11. Security and compromises
11.1. We will take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised destruction, unlawful access and processing. Safeguards are selected according to the risks and include appropriate access restrictions, authentication, secure transmission, maintenance, backups and contractual controls. No internet-based system is entirely immune from security risk; this does not limit our statutory duties.
11.2. If there are reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will investigate, take reasonable remedial steps and notify the Information Regulator and identifiable affected data subjects as soon as reasonably possible after discovery, subject to section 22 of POPIA and its permitted delays.
12. Your rights and requests
12.1. After adequate proof of identity, obtain free confirmation of whether we hold your personal information.
12.2. Request access to that information and information about third parties or categories of third parties that have had access, subject to lawful fees and refusal grounds.
12.3. Request correction or deletion of information that is inaccurate, irrelevant, excessive, outdated, incomplete, misleading or obtained unlawfully, or destruction/deletion of records we are no longer authorised to retain.
12.4. Object, on reasonable grounds relating to your circumstances, to processing under section 11(1)(d)–(f), unless legislation provides for that processing; and object to direct marketing.
12.5. Withdraw consent where processing relies on consent and lodge a complaint with the Information Regulator.
12.6. Contact our Information Officer using section 1. We may require proportionate proof of identity or authority and will assist you with the applicable procedure. POPIA objection and correction/deletion forms are available from the Regulator. Our PAIA Manual explains formal access requests. An ordinary privacy enquiry, consent withdrawal or marketing opt-out does not need to be made as a formal PAIA request. We will explain any lawful refusal, fee, restriction or continuing retention and respond within the applicable legal period.
13. Children and independent websites
The corporate website is intended for adult and business users. Do not submit information about a child through its general forms. If such information comes to our attention, we will assess whether lawful authorisation exists and otherwise delete it or restrict processing as required. Independent websites linked from our site have their own terms and privacy practices; please read those notices before providing information.
14. Changes to this Policy
The current version is published on the website. We will communicate material changes where required before the relevant new processing begins. Publishing a revised Policy does not itself obtain consent or authorise incompatible processing.
15. Complaints to the Information Regulator
You may contact us about a concern, but you do not have to exhaust an internal complaint before complaining to the Information Regulator (South Africa):
POPIA complaints: POPIAComplaints@inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
Telephone: 010 023 5200 | Toll free: 0800 017 160
Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.