PRIVACY POLICY

Last updated: 7 July 2026

1. Introduction

ARPC Direct ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). This Privacy Policy explains what personal information we collect when you use arpcdirect.co.za (the "Website"), why we collect it, how we use and protect it, and what rights you have.

2. Responsible Party

ARPC Direct, a division of ARPC, is the "responsible party" for personal information collected through the Website. You can contact us regarding privacy matters at:

• Email: sales@arpcdirect.co.za
• Phone: 060 593 8466
• Centurion: 1242 Entobeni Avenue, Die Hoewes, Centurion, 0157
• Bloemfontein: 72 Harvey Road, Oranjesig, Bloemfontein, 9301

3. What Personal Information We Collect

Depending on how you interact with the Website, we may collect:

• Contact details — name, email address, phone number, delivery and billing address.
• Order information — items purchased, order history, vehicle make/model/year or VIN details you provide to find compatible parts.
• Partner/trade account information — business name, contact person, and details submitted when applying for a trade account.
• Payment-related information — processed directly by our payment gateway, PayFast; we do not store your full card details.
• Technical and usage information — IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools (see our Cookie Policy).
• Communications — messages you send us via our contact form, enquiry form, email, phone or WhatsApp.

4. How We Use Your Information

We process your personal information for purposes including:

• Processing and fulfilling orders, including arranging courier delivery;
• Communicating with you about your order, enquiry, or account;
• Assessing and managing trade/partner account applications;
• Improving our Website, product range and customer service;
• Complying with our legal, tax and accounting obligations; and
• Sending you marketing communications, where you have consented to receive them, which you may opt out of at any time.

5. Legal Basis for Processing

We process your personal information on one or more of the following bases recognised under POPIA: your consent; the necessity of processing to perform a contract with you (such as fulfilling an order); our compliance with a legal obligation; and our legitimate business interests, provided these do not unjustifiably infringe your privacy.

6. Sharing Your Information

We do not sell your personal information. We may share it with:

• Courier and logistics partners, to deliver your order;
• PayFast, to process payments securely;
• IT service providers who host the Website and support our systems;
• Professional advisors and regulators, where required by law; and
• Any party you direct us to share information with.

Where a third-party service provider processes personal information on our behalf, we take reasonable steps to ensure they apply appropriate safeguards consistent with POPIA.

7. Security of Your Information

We use reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, alteration or disclosure. No method of transmission or storage is completely secure, and while we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting, or reporting requirements, after which it is securely deleted or anonymised.

9. Your Rights Under POPIA

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you;
• Request correction or deletion of inaccurate, outdated or unlawfully processed personal information;
• Object to the processing of your personal information for direct marketing purposes;
• Withdraw consent, where processing is based on consent, without affecting processing carried out before withdrawal; and
• Lodge a complaint with the Information Regulator (South Africa) if you believe we have not complied with POPIA.

To exercise any of these rights, contact us using the details in section 2. The Information Regulator can be contacted via www.justice.gov.za/inforeg.

10. Direct Marketing

In line with POPIA and the Consumer Protection Act, we will only send you direct marketing communications if you have consented to receive them, or as otherwise permitted by law. You may opt out of marketing communications at any time by using the unsubscribe option provided, or by contacting us directly.

11. Children's Privacy

Our Website and services are intended for use by persons who are legally able to conclude a contract in South Africa. We do not knowingly collect personal information from children without the consent of a parent or guardian, as required under POPIA.

12. Cookies

Our Website uses cookies and similar technologies. Please see our Cookie Policy for details on what cookies we use and how you can manage them.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please contact us at sales@arpcdirect.co.za or 060 593 8466.