POPIA Notice

This notice is provided in compliance with section 18 of the Protection of Personal Information Act, 4 of 2013 (POPIA). It tells you who we are, what information we process, why, and how to exercise your rights.

1. Responsible party

Citadene Technologies (Pty) Ltd
Registration number: 2025/296372/07
Registered address: 42 Parkland Drive, Kempton Park, Gauteng, 1602
Email: hello@micmap.co.za

2. Information Officer

In accordance with section 55 of POPIA, our Information Officer is responsible for ensuring compliance with the Act and handling data subject requests.

Name: Corne Botha
Email: privacy@micmap.co.za
Telephone: 083 285 6969

Our Information Officer is registered with the Information Regulator of South Africa as required.

3. Categories of personal information we process

• Identification — names, SA ID numbers, contact details.
• Employment — driver licence codes, PrDP details.
• Compliance documents — roadworthy certificates, tax clearance, BBBEE certificates, etc.
• Business — company registration details, vehicle registrations.
• Financial — billing records and payment references (no card numbers).
• Technical — IP address, browser, session activity for security.

4. Purpose of processing

We process personal information solely for the operation of the MicMap compliance management platform, including:

• Tracking document expiry and sending reminder notifications.
• Matching fleet compliance status against delivery-site requirements.
• Providing audit trails for compliance officers.
• Processing subscription payments and issuing invoices.
• Communicating service updates and security alerts.

5. Whether it is voluntary or mandatory

Providing personal information is voluntary, but without it we cannot deliver the Service. You can stop using MicMap at any time, and request deletion of your data.

6. Third-party operators

The following operators process personal information on our behalf, under section 21 written agreements:

• Supabase Inc. — database & encrypted file storage (EU servers).
• PayFast (Pty) Ltd — payment processing (South Africa).
• Resend — transactional email delivery.
• Vercel Inc. — application hosting (global edge).

7. Cross-border transfers

Some of our operators host servers outside South Africa. In every case the receiving country (or specific operator agreement) provides protection at a level substantially similar to POPIA, in accordance with section 72.

8. Your rights as a data subject

You have the right to:

• Request confirmation that we hold your personal information (section 23).
• Request access to that information.
• Request correction or deletion of inaccurate, irrelevant, or unlawfully obtained information (section 24).
• Object, on reasonable grounds, to processing (section 11(3)).
• Withdraw consent at any time, where consent is the lawful basis.
• Lodge a complaint with the Information Regulator.

To exercise any of these rights, email privacy@micmap.co.za. We will acknowledge receipt within 7 days and respond substantively within 30 days.

9. How to lodge a complaint

If you believe your rights under POPIA have been infringed, you may lodge a complaint with the Information Regulator:

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: POPIAComplaints@inforegulator.org.za
Website: inforegulator.org.za

10. PAIA Manual

Our manual under section 51 of the Promotion of Access to Information Act, 2 of 2000 (PAIA) is available on request by emailing privacy@micmap.co.za.