POPIA PROCESSING NOTICE

Quote My Car (Pty) Ltd ("QMC") Version: 1.1.0 Effective Date: 08/03/2026

1. Scope

This Notice describes how QMC processes personal information under POPIA for:

• public vehicle upload and dealer quote facilitation; and
• public vehicle upload and dealer auction facilitation at seller target prices.

It applies to sellers/uploaders (including non-account submissions), dealers, and users interacting with QMC services.

2. Responsible Party

Responsible Party: Quote My Car (Pty) Ltd Information Officer: P.G. Wessels Email: support@qmcars.co.za Address: {{company_address}}

3. Categories of Data Processed

3.1 Sellers / Uploaders

• identity and contact details
• vehicle and listing information
• media uploads and supporting documents
• ownership/compliance documents where required
• communications and dispute records

3.2 Dealers

• entity and representative details
• KYC/FICA data where required
• quote and auction participation data
• billing, subscription, and payment records (including waiver status)

3.3 Technical/Security Data

• IP address and device/browser metadata
• access/session logs
• fraud-prevention and security telemetry
• cookie/tracking identifiers

4. Processing Purposes

QMC processes personal information to:

1. register and verify users where required;
2. collect and publish vehicle listing data;
3. facilitate dealer quote responses and seller acceptance workflows;
4. facilitate dealer auctions with seller target-price mechanics;
5. process success fees, listing fees, subscriptions, and related settlement obligations;
6. conditionally release seller/dealer contact details as required for transaction completion;
7. prevent fraud, abuse, and circumvention;
8. manage support, disputes, and legal obligations.

5. POPIA Grounds

Processing is based on one or more of:

• consent;
• contractual necessity/service delivery;
• legitimate interest (fraud prevention, platform integrity);
• legal obligation.

6. Data Sharing

QMC may share data with:

• relevant transaction participants (seller/dealer);
• vetted operators/processors (hosting, verification, payment, messaging, security);
• regulators and law enforcement where required.

Contact details are shared on a need-to-know basis and typically after required payment/compliance conditions are met, unless law requires otherwise.

7. Cross-Border Processing

Where cross-border processing occurs, QMC uses lawful transfer mechanisms and contractual protections aligned with POPIA requirements.

8. Retention

QMC retains records for periods required by law or necessary for contractual, compliance, audit, anti-fraud, and dispute-resolution purposes.

9. Security Safeguards

QMC applies reasonable safeguards including encryption, access controls, monitoring, incident response, and audit trails.

10. Data Subject Rights

Data subjects may request access, correction, deletion (where lawful), objection/restriction, and complaint channels.

Submit requests: support@qmcars.co.za

11. Updates

QMC may amend this Notice from time to time. Updated versions are published with revised version/effective date.