Privacy Policy
Ondela Fleet Management Services (Pty) Ltd
Last updated: August 2026
1. About This Policy
Ondela Fleet Management Services (Pty) Ltd ("Ondela", "we", "us", or "our") is committed to protecting the personal information of all individuals who interact with our website and services. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over your data.
This policy is compliant with South Africa's Protection of Personal Information Act (POPIA), Act 4 of 2013, and is aligned with the principles of the General Data Protection Regulation (GDPR) of the European Union, to the extent applicable to our operations.
2. Responsible Party / Data Controller
Under POPIA, the Responsible Party is the entity that determines the purpose and means of processing personal information. Under GDPR, this is referred to as the Data Controller.
Ondela Fleet Management Services (Pty) Ltd
South Africa
Email: ondela@quantumfleet.com
Phone: +27 79 665 1875
Website: www.quantumfleet.com
3. What Personal Information We Collect
We only collect personal information that you voluntarily provide to us through our website contact forms. This includes:
- Full name
- Email address
- Company or organisation name (optional)
- Your enquiry or message content
- The nature of your interest (e.g. discovery call, general enquiry, partnership)
We do not collect sensitive personal information (as defined under POPIA Section 26 / GDPR Article 9), including health data, biometric data, racial or ethnic origin, political opinions, religious beliefs, or criminal records, through this website.
We do not collect phone numbers, physical addresses, or financial information via this website.
4. Lawful Basis for Processing
We process your personal information on the following lawful grounds:
Consent (POPIA s11(1)(a) / GDPR Art. 6(1)(a))
By submitting a contact form, you consent to us processing your information to respond to your enquiry.
Legitimate Interest (POPIA s11(1)(f) / GDPR Art. 6(1)(f))
We have a legitimate interest in responding to business enquiries and maintaining records of communications.
Performance of a Contract (GDPR Art. 6(1)(b))
Where your enquiry relates to an existing or prospective service agreement, processing is necessary to fulfil that agreement.
5. How We Use Your Personal Information
Your personal information is used solely for the following purposes:
- To respond to your enquiry or question
- To follow up on a discovery call or meeting request
- To route your enquiry to the appropriate team member
- To maintain a record of our communications for business continuity
- To comply with legal obligations where required
We do not use your personal information for automated decision-making or profiling, and we do not sell, rent, or share your personal information with any third parties for marketing or commercial purposes.
6. Data Sharing & Third-Party Processors
We may share your personal information with trusted third-party service providers who assist us in operating our website and delivering our services. These include:
- Email delivery services: to transmit your enquiry to our team
- Cloud hosting and database providers: to store submitted form data securely
- Analytics providers: to understand aggregate website usage (no personally identifiable data)
All third-party processors are contractually required to handle your personal information in accordance with applicable data protection laws. We do not transfer your personal information outside of South Africa except where adequate data protection safeguards are in place, consistent with POPIA Chapter 9 and GDPR Chapter V.
7. Data Retention
We retain your personal information only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. Specifically:
- Enquiry correspondence is retained for up to 3 years for business record-keeping purposes
- If no ongoing business relationship is established, data is deleted or anonymised within 12 months of the last interaction
- You may request earlier deletion at any time (see Section 9 below)
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These measures include:
- Encrypted data transmission (HTTPS/TLS) across all website pages
- Access controls limiting who within our organisation can view submitted enquiries
- Secure cloud infrastructure with industry-standard security certifications
- Regular review of our data handling practices
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Regulator of South Africa and affected individuals as required under POPIA Section 22.
9. Your Rights as a Data Subject
Under POPIA and GDPR, you have the following rights regarding your personal information:
Right of Access
Request a copy of the personal information we hold about you (Data Subject Access Request, DSAR).
Right to Rectification
Request correction of inaccurate or incomplete personal information.
Right to Erasure
Request deletion of your personal information, subject to legal retention obligations.
Right to Restriction
Request that we restrict the processing of your personal information in certain circumstances.
Right to Object
Object to the processing of your personal information where we rely on legitimate interest as the lawful basis.
Right to Data Portability
Request that we provide your personal information in a structured, machine-readable format (GDPR Art. 20).
Right to Withdraw Consent
Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
Lodge a complaint with the Information Regulator of South Africa or a relevant supervisory authority in your jurisdiction.
10. How to Submit a Data Subject Access Request (DSAR)
To exercise any of your rights listed above, please submit a written request to our designated Information Officer. We will respond within 30 days of receiving your request, as required under POPIA and GDPR.
Submit your DSAR to:
Please include your full name, contact details, and a clear description of your request. We may need to verify your identity before processing your request.
11. Cookies & Analytics
This website may use basic analytics tools to understand how visitors interact with our pages (e.g. page views, referral sources, session duration). These tools collect aggregate, anonymised data only. No personally identifiable information is collected through analytics.
- We do not use advertising cookies or third-party tracking pixels
- We do not use cookies to build individual user profiles
- Essential cookies may be used to ensure the website functions correctly
By continuing to use this website, you consent to the use of essential and analytics cookies as described above. You may disable cookies in your browser settings at any time, though this may affect certain website functionality.
12. Children's Privacy
Our website and services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, please contact us immediately at ondela@quantumfleet.com and we will delete it promptly.
13. Information Regulator of South Africa
If you are not satisfied with how we have handled your personal information or your DSAR, you have the right to lodge a complaint with the Information Regulator of South Africa:
Information Regulator (South Africa)
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg
14. Terms of Use
By using this website, you agree to the following:
- All content on this website is the intellectual property of Ondela Fleet Management Services and may not be reproduced without written permission.
- The information on this site is provided in good faith for general information purposes only and does not constitute a binding commercial offer.
- Links to third-party websites (such as Quantum Fleet Solutions or Udemy) are provided for convenience only. Ondela is not responsible for the content or privacy practices of those sites.
- We reserve the right to update this Privacy Policy and these Terms at any time. The most current version will always be available on this page.
15. Contact Us
For any questions about this Privacy Policy, how we handle your personal information, or to submit a data subject access request, please contact our Information Officer directly: