ICar Multi-Franchise is committed to respecting your privacy.

This Privacy Policy sets out the basis on which any personal information collected from you, or which you provide, via the website at the domain changangezina.co.za, will be processed ("ICar Multi-Franchise Website").

Please read this Privacy Policy carefully to understand Lesibadawson Projects (PTY) Ltd t/a ICar Multi-Franchise's practices regarding your personal information and how it will be treated.

This Privacy Policy may be amended from time to time, and a new version may be posted on this webpage with an updated date displayed at the end of the Privacy Policy. You should check this webpage from time to time to see if there have been any changes as they will apply to you.

Who collects your personal information via the ICar Multi-Franchise Website?

The ICar Multi-Franchise Website is a website owned and operated by Lesibadawson Projects (PTY) Ltd t/a ICar Multi-Franchise, a private limited company registered in South Africa and whose registered office is 890 Steve Biko Road, Mayville, Pretoria, 0084, Republic of South Africa (the "Company", "us", "we" or "our").

Any information collected via the ICar Multi-Franchise Website is collected and otherwise processed by the Company in accordance with this Privacy Policy. For the purpose of applicable data protection laws, the data controller is the Company, which means that the Company decides why and how your personal information is processed.

Categories of personal information we process about you.

We process different types of personal information about you. To make it easier to understand the data that we process about you, we have categorised this information below, and provided a short explanation of the type of information each category covers.

• Behavioural Information - your activities, actions and behaviours
• Contact Information - information which can be used to address, send or otherwise communicate a message to you
• Correspondence Information - information contained in our correspondence or other communications with you
• Identity Information - information contained in a formal identification document or other unique reference number relating to you, including any cookie identifications (IDs)
• Legal Information - information relating to legal claims made by or against you
• Marketing Preferences - your preferences in respect of any marketing communications from us from time to time in relation to products or services which we believe may be of interest to you

How personal information is collected about you

The Company collects and processes the following personal information about you:

Information you provide via the ICar Multi-Franchise Website. You may provide information about yourself by filling in the enquiry form on the ICar Multi-Franchise Website, by corresponding with us using the contact e-mail address made available on the ICar Multi-Franchise Website, when you register to receive information about our products and services including our newsletter, participating in other social media activities made available via the ICar Multi-Franchise Website, participating in any customer surveys, and when you report a problem with the ICar Multi-Franchise Website. The information you provide may include your name, address, e-mail address and contact number.

Information collected about you via the ICar Multi-Franchise Website. With regard to each of your visits to the ICar Multi-Franchise Website, the following information may be automatically collected:

• technical information, including the Internet Protocol (IP) address used to connect your computer to the internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
• information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from the ICar Multi-Franchise Website (including date and time); pages you viewed; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call any of our contact numbers.

Information received from other sources. We may receive information about you if you use any other websites operated by other companies associated with ICar Multi-Franchise or any service provided by such associated businesses. The Company works closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, social media platforms, analytics providers, search information providers, credit reference agencies, customer survey providers) and may receive information about you from them, as well as from its associated companies.

You are under no statutory or contractual obligation to provide us with your personal information. However, if you do not provide us with your personal information, we may be unable to provide products or services to you or communicate with you effectively.

Where the law allows, we may combine information we receive from other sources with information you give to us and information we collect about you.

Cookies

The ICar Multi-Franchise Website uses cookies to distinguish you from other users of the ICar Multi-Franchise Website for analytics purposes and to provide you with a good experience when you browse the ICar Multi-Franchise Website through optional functionality, which also allows improvements to be made to the ICar Multi-Franchise Website. For detailed information on the cookies used and the purposes for which they are used, please refer to the ICar Multi-Franchise Website's Cookie Policy.

Uses made of your personal information.

Data protection law in certain countries requires us to have a valid reason to process your personal information for each of the different purposes for which we use that information. The law refers to each reason as a 'lawful basis'. The purposes for which we use your personal information and the lawful basis under data protection law on which we rely to do this are explained below. The lawful basis on which we rely for a particular processing purpose may vary depending on your location.

Where you have provided consent

We may use and process your personal information where you have consented for us to do so.

If you work for an unincorporated business (e.g. sole trader or unincorporated partnership), we will contact you via email or SMS (based on your preferences) with marketing information about our products and services if you subscribe to receive such marketing communications by ticking the relevant box or when you refresh your marketing preferences when responding to a request from us to do so and consent to continue receiving electronic marketing communications from us.

If you consent to our use of any non-essential cookies, we will use the cookies described in our Cookie Policy to collect Behavioural and Identity information from you.

If we request consent to use recordings of inbound and outbound telephone calls, we will use those recordings for training and monitoring purposes.

You may withdraw your consent for any future use by us of your personal information at any time. Please see Withdrawing your consent for further details.

Where required to comply with our legal obligations

We will use your personal information to comply with our legal obligations:

• to assist any public authority or criminal investigatory body, where we are under a legal obligation to do so;
• to identify you when you contact us where we are obliged under applicable law to do so;
• to verify the accuracy of data we hold about you; and
• to respond to and resolve your complaints in relation to our services.

Where processing is necessary for us to pursue our legitimate interests

We may use and process your personal information where it is necessary for us to pursue our legitimate interests as a business, for, in particular, the following purposes:

Processing necessary for our legitimate interests in promoting our business as well as our products and services:

• to evaluate certain aspects about you and analyse this to obtain insight about market or industry trends, customer behaviours which inform our marketing strategy, and to enhance and personalise your experience as a visitor;

Processing necessary for our legitimate interests in supporting our customers and prospects with sales and other enquiries:

• to correspond and communicate with you when supporting you in connection with our products or services or your queries in relation to them;
• to share your personal information with our associated companies for the purposes of audit, administration, investigations, analytics reporting, and business development;

Processing necessary for our legitimate interests in responding to changing market conditions and our customers' needs:

• for market research (including to perform and analyse customer surveys and feedback) in order to improve the products and services that we provide;
• to share your information with third parties to allow them to contact you to carry out customer surveys and feedback about the Company;
• to notify you about changes to our business as well as our products and services;

Processing necessary for our legitimate interests in operating the administrative and technical aspects of our business efficiently and effectively:

• to administer the ICar Multi-Franchise Website and our social media pages and for our internal operations, including troubleshooting, testing and statistical reporting purposes;
• for the detection and prevention of fraud and other criminal activities;
• to verify the accuracy of information we hold about you and create a better understanding of you as a visitor to the ICar Multi-Franchise Website;
• to authenticate your identity to allow you to access security-controlled areas of the ICar Multi-Franchise Website;
• for network and information security purposes in order for us to take steps to protect your and our information and property against loss or damage, theft or unauthorised access;
• to comply with a request from you in connection with the exercise of your rights where required under applicable data protection law;
• for training and monitoring purposes, including by reviewing audio recordings of inbound and outbound telephone calls;
• for the purposes of a corporate restructure or reorganisation or sale of our business or assets;
• for efficiency, accuracy or other improvements of our databases and systems;
• to place and read cookies that are essential for the ICar Multi-Franchise Website to function properly, as described in our Cookie Policy;
• to inform you of updates to our terms and conditions and policies;
• to enforce or protect our contractual or other legal rights or to bring or defend legal proceedings; and
• for general administration including financial planning, control and reporting and managing your queries, complaints, or claims, to send service messages and to provide you with important information about our business.

Disclosure of your personal information

Associated companies

We may share your personal information with other companies associated with ICar Multi-Franchise and they may use your personal information for the purposes and ways set out in "Uses made of your personal information", in connection with the services they provide and activities they undertake. In particular, if you submit an enquiry using the enquiry form available on the ICar Multi-Franchise Website, your enquiry and any personal information you provide in it will be sent to the Company or its associated businesses. Your personal information may then be held by the Company or its associated businesses as part of its enquiry/customer database.

Our suppliers, service providers and other recipients

We may share your personal information with our third-party service providers, agents, subcontractors and other organisations (as listed below) for the purposes of providing services to us or directly to you on our behalf:

• Accountancy and auditing services
• Advertising & PR agencies
• Banks, payment processors and financial services providers
• Cloud storage service providers
• Government tax administration offices
• Delivery service providers
• Insurance service providers
• Legal advisors
• Market research service providers

Your personal information may also be disclosed to other third parties:

• To business partners for the performance of any contractual obligations we have to them.
• In the event any business of the Company sells or buys any business or assets, in which case your personal information may be disclosed to the prospective seller or buyer of such business or assets.
• If the Company or substantially all of its assets are acquired by a third party, in which case personal information held by it about its customers will be one of the transferred assets.
• If the Company is under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply the ICar Multi-Franchise Website's Terms of Use and other agreements; or to protect the rights, property, or safety of the Company, customers, or others.

We may also disclose your personal information to public authorities, courts or tribunals to detect, prevent or report a crime, where required by applicable law. We will always take steps with the aim of ensuring that your privacy rights continue to be protected.

When we use third party service providers as our data processors, we only disclose to them any personal information that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions.

Where your personal information is stored

Information you provide to us may be transferred to countries or regions outside the jurisdiction where the information is collected. These countries or regions may not have data protection laws similar to the laws of the jurisdiction in which you live or work and so may not protect the use of your personal information to the same standard.

If we transfer your information outside of a jurisdiction in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy.

How we keep your personal information secure

The Company will take all steps reasonably necessary including the putting in place of technical and organisational measures to ensure your data is treated securely, to prevent unauthorised access or disclosure and in accordance with this Privacy Policy. This may include storing your data using AES 128bit database encryption. Unfortunately, the transmission of information via the internet is not completely secure. Although all steps reasonably necessary will be taken to protect your personal information, the security of your data transmitted to the ICar Multi-Franchise Website cannot be guaranteed; any such transmission is at your own risk. Once your information is received, strict procedures and security features will be used to try to prevent unauthorised access.

For how long is your personal information kept?

The time period for which your personal information is kept varies according to what your information is used for. In some cases, there are legal or regulatory requirements to keep data for a minimum period. Unless there is a specific legal requirement to keep the information, it will be retained for no longer than is necessary for the purposes for which the data was collected or for which it is to be further processed.

We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for seven years after the date it is no longer needed by us for any of the purposes listed above in this policy.

The exceptions to the above are where:

• we need your personal information for a longer period to troubleshoot problems;
• you exercise your right to require us to retain your personal information for a period longer than our stated retention period;
• you exercise your right to have the personal information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law;
• we bring or defend a legal claim or other proceedings or enforce our legal rights during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible;
• we archive your personal information in which case we will delete it in accordance with our deletion cycle; or
• in limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.

Your data protection rights

You have certain rights in relation to your personal information under applicable South African data protection law, including the Protection of Personal Information Act (POPIA). In relation to certain rights, we may ask you for further information to confirm your identity. We will respond to you within the timeframe set out under applicable law.

You have the right to:

i. obtain information regarding the processing and protection of your personal information and access to the personal information which the Company holds about you;

ii. ask us to provide a copy of the personal information we hold about you;

iii. have your personal information deleted in certain circumstances or have any inaccurate personal information about you corrected or updated;

iv. request the transfer of your personal information to another controller in a structured format whenever this is technically feasible;

v. object to the processing of your personal information, including for direct marketing purposes;

vi. not be subject to a decision made by purely automated means where that decision has a legal or other significant effect on you;

vii. withdraw your consent at any time by contacting us using the details at the end of this policy;

viii. to restrict processing your personal information where you believe it is unlawful for us to continue processing, you have objected to its use and our investigation is pending or you require us to keep it in connection with legal proceedings; and

ix. lodge a complaint with the Information Regulator of South Africa in respect of any alleged interference with the protection of your personal information.

If we are relying on your consent to process your personal information for certain activities, you are free to limit or withdraw your consent at any time by contacting us using the contact details below. If you withdraw your consent, it will not affect the lawfulness of any processing based on your consent before you withdrew it.

If you would like to exercise any of your rights in relation to the personal information we hold about you, you can make such a request by emailing us using the contact details below.

You have the right to ask for your personal information not to be processed for direct marketing purposes. You can exercise your right at any time by contacting us at the contact details below.

When you fill in a form on the ICar Multi-Franchise Website (for example, the enquiry form), you must use any check boxes to indicate your preferences regarding the use of your personal information. If you do not want your personal information to be used in this way, please ensure that you indicate this using the relevant box.

The ICar Multi-Franchise Website may contain links to and from the websites of other businesses or partner networks. If you follow a link to any of these websites, please note these websites have their own privacy policies. Please check these policies before you submit any personal information to these websites.

Children's personal information

The Company does not knowingly collect the information of, or make contact with, children. If you are aged under 18, please do not provide any of your personal information to us.

Changes to this Privacy Policy

Any changes made to this Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to the ICar Multi-Franchise Website's Privacy Policy.

Contact

Questions, comments and requests regarding this Privacy Policy are welcome and should be addressed to: sales@icarmf.co.za

Last updated: 25 March 2026