Privacy Policy
745 Transport (Pty) Ltd (Registration No. 2026/012289/07) — the 745 platform (www.745.co.za)
Registered address: 71 14th Road, Noordwyk, Midrand, Gauteng, 1687, South Africa
Effective date: 14 August 2026
Last updated: 17 August 2026
This Privacy Policy explains, in plain language, what personal information 745 Transport collects about you as a passenger or driver-partner on the 745 platform, why we collect it, how long we keep it, who we share it with, and what rights you have over it under the Protection of Personal Information Act 4 of 2013 ("POPIA"). It is written for the people who actually use 745 — riders and drivers — and is separate from 745 Transport's internal POPIA data protection policy, which governs our own internal handling obligations as a company.
1. Who We Are
1.1. 745 Transport (Pty) Ltd is the "responsible party" (as that term is used in POPIA) for the personal information described in this policy, collected through the 745 passenger app, driver app, marketing website, and related services (the "Platform"). Our registered address is 71 14th Road, Noordwyk, Midrand, Gauteng, 1687, South Africa.
1.2. If you have a question or a request about your personal information, contact our Information Officer, Malcom Miya, at support@745.co.za or 078 419 3648.
2. What Personal Information We Collect
We only collect personal information that is actually needed to run the 745 platform. Specifically, this includes:
2.1. Identity and account information. Your name, phone number, and email address (where provided); a bcrypt-hashed PIN securing your account (never stored or visible in plain text); and identifiers for the device(s) you use to access the Platform.
2.2. Live location data. As a passenger, your location while you have an active trip request or trip in progress, so a driver can find you and you can track your ride. As a driver-partner, your location whenever you are online and available (used to match nearby ride requests via a geographic index), and for the duration of any trip you accept. During an active trip, location is relayed live to the other party over a live connection so each of you can see the other's progress.
2.3. Panic and safety-incident data (745 Shield users only). If you opt into and trigger 745 Shield during a trip, we process the trigger-time location and lifecycle information on how the incident was acknowledged, inspected, and resolved, including notes logged by staff or an integrated third-party security responder.
2.4. Wallet and payment data. Your in-app wallet balance, transaction history (top-ups, ride payments, driver earnings, and, where applicable, panic_fee transactions), and payment-method information we hold to process a payment.
2.5. Ride and trip records. Pickup/drop-off details, trip status and history, the 4-digit one-time PIN ("OTP") generated per trip, scheduled-ride and commuter-bundle records, and the public trackCode generated for each paid booking.
2.6. Vehicle and licensing information (drivers only). Driver's license, PrDP, vehicle registration and roadworthiness documentation, and related vetting information from onboarding.
2.7. Support and communications data. Information you provide when contacting support, and records made in resolving your query.
2.8. Website and app traffic records. Each time a page on our website loads, we record the page path, the site that referred you to it, your browser's user-agent string and language preference, a random identifier generated in your own browser (which contains nothing about you and lets us count a returning visitor as one person rather than several), and your full IP address. We record the complete address rather than a shortened one. We do so to tell genuine visitors apart from automated crawlers so our traffic figures mean something, and to investigate fraudulent activity.
2.9. Sign-in records. Each time anyone attempts to sign in — successfully or not — we record the email address or phone number that was tried, whether it worked, why it did not, and the IP address and browser it came from. Refused attempts are recorded deliberately: our sign-in screens answer identically whether an account exists or not, precisely so the form cannot be used to discover which numbers are registered, and this record is consequently the only way we can detect somebody working through passwords against your account.
2.10. We do not knowingly collect information beyond what is listed above. If a future feature required a new category (e.g., biometric verification), this policy will be updated, and, where POPIA requires it, your explicit consent obtained first.
3. Why We Collect It, and Our Legal Basis Under POPIA
3.1. We process your personal information on one or more of the following lawful bases, depending on the specific processing activity:
- Performance of a contract with you — to create your account, process a ride booking, calculate and charge a fare, match you with a driver or passenger, and deliver live tracking for a trip you have booked.
- Consent — for optional features you actively opt into, such as 745 Shield, marketing communications (where applicable), and the public trackCode sharing described in Section 6.
- Legitimate interests — for fraud prevention, platform safety and security (including device flagging and account-fraud detection), service improvement, and maintaining accurate records of trips and payments, balanced against your privacy interests.
- Legal obligation — where we are required to retain certain records (for example, financial and transaction records) under South African tax, consumer protection, or other applicable law.
- Vital interests — in a genuine emergency, where processing your location or panic-incident data is necessary to protect your life, health, or safety, or that of another person.
3.2. We use your personal information specifically to: operate the booking, pricing, and driver-allocation system; provide live trip tracking; verify identity via OTP at pickup; process wallet top-ups, fares, and driver payouts; operate 745 Shield for Users who opt in; provide customer support; investigate and respond to safety incidents, fraud, or account misuse; and comply with our legal and regulatory obligations, including under South Africa's e-hailing transport regulations.
4. How Long We Keep Your Information
4.1. We keep personal information only for as long as reasonably necessary for the purposes described in this policy, or as required by law. Indicative retention periods are:
| Data category | Retention period |
|---|---|
| Account and identity information | For as long as your account is active, plus the period we are required to keep financial and transaction records under South African law |
| Live location data (in-trip / online status) | Not retained beyond the active trip or online session, other than as part of the trip record described below |
| Ride and trip records (including OTP and trackCode) | The period required by South African financial record-keeping law; the OTP and trackCode themselves expire and become unusable within hours (OTP) or 48 hours (trackCode) of generation, well before the underlying trip record's own retention period ends |
| Panic/incident data (745 Shield) | No longer than is necessary for our insurance and liability obligations, and never indefinitely |
| Wallet and transaction data | The minimum period required by South African financial record-keeping law |
| Vehicle and licensing documents (drivers) | For as long as you are an active driver-partner, plus the period required for our insurance, regulatory and record-keeping obligations |
| Support/communications records | For as long as needed to resolve your query, and thereafter only as required for record-keeping |
| Website traffic records (including IP address) | 90 days in the searchable store, after which that copy expires automatically — see 4.3 |
| Sign-in records (including refused attempts and IP address) | 90 days in the searchable store, after which that copy expires automatically — see 4.3 |
4.2. When personal information is no longer needed for the purposes it was collected for, or once the applicable retention period expires, we securely delete or anonymize it.
4.3. Being straight about one exception. Underneath the systems above sits an append-only event log, which is how the Platform reconstructs its own state and serves as its audit record. Entries written to it are not edited or removed, so an IP address recorded there persists beyond the 90 days stated in the table. That log is not searchable by IP address, is not used for analysis or profiling, and is reachable only by us. If you ask us to erase your information, we will tell you precisely what can be removed from the live systems and what remains in that log.
5. Who We Share Your Information With
5.1. Drivers and passengers, limited to what's needed for a trip. The driver assigned to your trip can see your pickup location and first-name-level identification needed to complete it; you can see the assigned driver's name, vehicle details, and live location for that trip's duration. Neither party sees the other's full account information.
5.2. 745 Transport staff. Operations and support staff can access relevant account, trip, and (where applicable) panic-incident information to provide support, investigate safety or fraud concerns, and operate the Platform, under role-based access controls limiting what each role (platform_admin, staff_ops, staff_finance) can see.
5.3. Third-party security firms — 745 Shield only. If you trigger a 745 Shield alert and 745 Transport has an active integration with a security-response partner for your area or account type, that partner receives the panic/incident data necessary to respond (trigger location and relevant incident details) through a metered, scoped API key (sk745_) governed by a written data-processing agreement. Security firms only ever receive this data in connection with a live alert you triggered — never your general trip or account history.
5.4. Service providers. We share limited personal information with providers who help run the Platform — payment processors, SMS/communication providers, cloud infrastructure providers — under contractual terms restricting them from using it for their own purposes.
5.5. Legal and regulatory disclosure. We may disclose personal information where required by South African law, in response to a valid law enforcement or regulatory request (including e-hailing regulatory compliance), or to protect the rights, property, or safety of 745 Transport, our Users, or the public.
5.6. Corporate or business changes. If 745 Transport is involved in a merger, acquisition, or sale of assets, personal information may transfer to the successor entity, subject to materially equivalent privacy commitments.
5.7. We do not sell your personal information, and do not share it with advertisers for their own independent marketing purposes.
6. Public Ride Tracking — An Important Exception
6.1. Every paid booking automatically generates an 8-character tracking code ("trackCode"), valid for 48 hours, accessible at 745.co.za/track/{code} without any login. If you have this link, you can see the status of that specific trip.
6.2. This feature is designed with your privacy in mind: the public tracking page is deliberately limited to the driver's first name and general trip status — it never discloses the passenger's identity or contact details. The trackCode is a non-guessable, randomly generated code, and access automatically expires 48 hours after the trip.
6.3. By booking a trip on the Platform, you consent to a trackCode being generated for that trip on the terms described in this Section. If you would prefer this feature not apply to your bookings, contact support@745.co.za to discuss available options.
7. Live Location Data — Additional Detail
7.1. Live GPS location is central to how 745 works. As a passenger, your location is used to match you with nearby drivers and enable live tracking of your active trip; it is visible to your assigned driver, to 745 Transport staff, and, if a trackCode is active, in the redacted form described in Section 6. As a driver, your location determines your availability for trip matching once online, and is visible to a passenger only once matched to their trip. We do not use location data for advertising or any purpose unrelated to the ride, safety, and support functions in this policy.
8. Cookies and Tracking on the Marketing Website
8.1. The 745 marketing website (www.745.co.za) uses strictly necessary cookies and browser storage only — for remembering your preferences and for the visitor identifier described in 2.8. We do not run Google Analytics, advertising pixels, or any third-party marketing tracker on this website.
8.2. Visitor counting is done by our own systems, on our own servers, using the traffic records described in 2.8. That data is not shared with an analytics provider and does not leave our infrastructure.
8.3. The passenger and driver mobile applications do not use third-party advertising trackers. App analytics are limited to what is needed to monitor performance and stability, and are not used to build an advertising profile of you or sold to anyone.
9. Cross-Border Transfer of Personal Information
9.1. our infrastructure is hosted in South Africa. Where any service provider processes personal information outside South Africa, we do so only on a basis permitted by section 72 of POPIA. Where any such cross-border processing occurs, we take steps to ensure it is subject to appropriate safeguards consistent with POPIA.
10. How We Protect Your Information
10.1. We apply technical and organizational security measures appropriate to the sensitivity of the information we hold: bcrypt-hashed storage of your account PIN (never readable); rate-limited PIN attempts (5 per 15 minutes) to prevent brute-force access; JWT session security, instantly revocable if you log out or your account is flagged; device registration, with remote revocation if a device is flagged as lost, stolen, or compromised; and role-based access control limiting which staff can view which categories of your information.
10.2. No system can be guaranteed 100% secure. If a security incident occurs that is reasonably likely to result in a risk to your personal information, we will notify the Information Regulator and affected Users as required under POPIA, and take appropriate remedial steps.
11. Your Rights Under POPIA
11.1. Subject to POPIA and any applicable exceptions, you have the right to:
- Access the personal information we hold about you.
- Request correction of personal information that is inaccurate, incomplete, misleading, or outdated.
- Request deletion or destruction of personal information that we are no longer authorized to retain, or that you have validly withdrawn consent for (where consent was the basis for processing).
- Object to the processing of your personal information on reasonable grounds relating to your particular situation, including for direct marketing purposes.
- Withdraw consent, where processing is based on your consent, at any time — without affecting the lawfulness of processing carried out before withdrawal.
- Lodge a complaint with South Africa's Information Regulator if you believe your personal information has been processed unlawfully.
11.2. To exercise any of these rights, contact us at Malcom Miya, Information Officer — support@745.co.za. We will acknowledge your request within 30 days, the period allowed by law, and respond substantively within 30 days.
11.3. Where you request deletion of information that we are required to retain for legal, financial, or safety-record purposes (for example, a completed panic-incident record or a financial transaction record within its statutory retention period), we will explain the specific basis on which we are retaining it and delete or anonymize it once that basis no longer applies.
12. Children's Privacy
12.1. The Platform is not directed at, and must not be used by, anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete it.
13. Contact Us
13.1. For any question, request, or complaint about this Privacy Policy or how 745 Transport handles your personal information, contact our Information Officer:
Malcom Miya, Information Officer — support@745.co.za, 078 419 3648, 71 14th Road, Noordwyk, Midrand, Gauteng, 1687
13.2. You may also lodge a complaint with South Africa's Information Regulator at enquiries@inforegulator.org.za or via https://inforegulator.org.za, if you believe we have not adequately addressed your concern.
14. Changes to This Policy
14.1. We may update this Privacy Policy from time to time to reflect changes in our data practices, the Platform, or applicable law. Where a change is material, we will provide reasonable notice through the app or another appropriate channel before it takes effect, and, where required by law, seek your renewed consent.
14.2. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of the Platform after a change takes effect constitutes acknowledgment of the updated policy.
Questions about this document go to our Information Officer, Malcom Miya, at support@745.co.za or 078 419 3648.