Privacy Policy
Last updated: 7 July 2026
iMoto GT ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our vehicle marketplace platform.
We comply with the General Data Protection Regulation (GDPR) and the Protection of Personal Information Act (POPIA) in South Africa. This policy applies to all users of our website and services.
Account Information
When you create an account, we collect your email address, name, and optional profile information such as your phone number and location.
Vehicle Listings
When you list a vehicle, we collect details about the vehicle including make, model, year, price, images, and contact preferences.
Usage Data
We collect information about how you interact with our platform, including pages visited, searches performed, and vehicles saved to your favorites.
Technical Data
We automatically collect certain technical information including your IP address, browser type, device information, and cookies necessary for the platform to function.
Service Delivery
To provide and maintain our vehicle marketplace platform, process your listings, and enable communication between buyers and sellers.
Account Management
To manage your account, authenticate your identity, and provide customer support when needed.
Platform Improvement
To analyze usage patterns and improve our platform's functionality, performance, and user experience.
Legal Basis
We process your data based on: (1) your consent, (2) contractual necessity to provide our services, (3) our legitimate interests in operating the platform, and (4) legal obligations.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Account data: Until you delete your account or request deletion
- Vehicle listings: Until the listing is removed or sold
- Transaction records: 7 years for legal and tax compliance
- Technical logs: 90 days for security and debugging purposes
We work with trusted third-party service providers who process data on our behalf:
- Supabase - Database hosting and authentication services (EU/US)
- Vercel - Website hosting and content delivery (Global)
All third-party processors are bound by data processing agreements that ensure GDPR compliance and appropriate data protection measures.
Under GDPR and POPIA, you have the following rights regarding your personal data:
- Right to Access - Request a copy of your personal data
- Right to Rectification - Correct inaccurate or incomplete data
- Right to Erasure - Request deletion of your personal data
- Right to Restriction - Limit how we process your data
- Right to Data Portability - Receive your data in a portable format
- Right to Object - Object to processing based on legitimate interests
- Right to Withdraw Consent - Withdraw consent at any time
To exercise any of these rights, please contact us using the details below.
We use cookies and local storage to ensure our platform functions correctly:
- Strictly Necessary - Authentication, session management, and essential caching for performance
- Functional - Remembering your preferences and settings
- Analytics - Understanding how users interact with our platform (when consented)
- Marketing - Displaying relevant content (when consented)
You can manage your cookie preferences at any time through the cookie settings in the menu.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Email: privacy@imotogt.com
Data Protection Officer: dpo@imotogt.com
You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.