Privacy Policy
Privacy Policy
Last updated: 29 April 2026
This Privacy Policy explains how Quadtech t/a ExpressRoad ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our website, request a quote, book a shipment, or interact with our services. We are committed to protecting your privacy in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African and international data protection laws.
By using our website or services, you consent to the practices described in this policy.
1. Who We Are
Quadtech t/a ExpressRoad is a South African online courier and logistics business. Our registered legal entity is Quadtech (VAT No. 4560194211), trading as ExpressRoad. For privacy-related queries, you can reach us at info@expressroad.co.za or on 086 9990 559.
2. Information We Collect
We collect personal information that is necessary to provide our services and operate our website. The information we collect falls into the following categories:
| Category | Examples | Purpose |
|---|---|---|
| Identity & contact | Full name, email address, telephone number, company name | Account creation, communication, order fulfilment |
| Address | Collection address, delivery address, billing address | Quoting, routing, courier dispatch |
| Shipment | Parcel dimensions, weight, contents description, declared value | Pricing, customs clearance, insurance |
| Payment | Card details (processed by our payment gateway, never stored on our servers), transaction records | Processing payment for services rendered |
| Technical | IP address, browser type, device type, pages visited, cookies | Site security, analytics, user experience improvement |
| Account history | Past orders, quote requests, communications | Customer support, dispute resolution |
3. How We Use Your Information
We use your personal information for the following purposes:
- To provide quotes, book shipments, and arrange courier collection and delivery
- To process payments and issue invoices
- To communicate with you about your shipments, including waybills, tracking updates, and delivery confirmations
- To respond to your enquiries and provide customer support
- To improve our website, services, and customer experience
- To comply with our legal, tax, and regulatory obligations
- To detect and prevent fraud, abuse, or security incidents
- To send service-related notifications (e.g. delays, policy updates)
We do not sell your personal information to third parties, and we do not use it for unrelated marketing without your explicit consent.
4. Lawful Basis for Processing
Under POPIA, we process your personal information on one or more of the following lawful bases:
- Contract: Processing is necessary to deliver the courier service you have booked.
- Legal obligation: Tax invoicing, customs declarations, and record-keeping required by South African law.
- Legitimate interest: Site security, fraud prevention, and reasonable business operations.
- Consent: Marketing communications, optional cookies, and any other use beyond direct service provision. You may withdraw consent at any time.
5. Sharing With Third Parties
To deliver our services, we share necessary information with the following categories of trusted third parties:
- Courier partners who physically collect, transport, and deliver your shipment
- Payment processors (PayFast) for secure payment handling
- Email service providers (SMTP2Go) for transactional notifications
- Mapping and address validation services (Google Maps Platform) for accurate routing
- Cloud hosting providers for the secure operation of our website and database
- Insurers and claims administrators when processing claims for damaged or lost shipments
- Regulators, tax authorities, or law enforcement when required by law
All third parties are contractually bound to handle your information in accordance with POPIA and only for the purposes for which we share it.
6. International Transfers
For international shipments, we may need to share consignee details with foreign courier networks and customs authorities in the destination country. Where personal information is transferred outside South Africa, we take reasonable steps to ensure it is protected to a standard at least equivalent to POPIA.
7. Storage and Retention
Your personal information is stored on secure servers hosted within reputable cloud infrastructure. We retain your information only for as long as is necessary to fulfil the purposes described in this policy and to comply with our legal and regulatory obligations:
- Order and shipment records: 5 years (in line with South African tax and customs record-keeping requirements)
- Account information: for the lifetime of your account, plus 1 year after closure for dispute resolution
- Quote enquiries: 12 months
- Marketing consents: until you withdraw consent
- Website analytics: up to 2 years (anonymised)
When information is no longer required, we securely delete or anonymise it.
8. Security
We take the security of your personal information seriously and have implemented appropriate technical and organisational measures, including:
- 256-bit SSL/TLS encryption for all data in transit
- Encrypted database storage and access controls for data at rest
- Restricted access to personal information on a need-to-know basis
- Regular security reviews and software updates
- Secure payment processing through PCI-DSS-compliant gateways
9. Your Rights Under POPIA
You have the following rights in relation to the personal information we hold about you:
- Right of access: Request a copy of the personal information we hold about you.
- Right to correction: Request correction of inaccurate or incomplete information.
- Right to deletion: Request deletion of your personal information (subject to legal retention obligations).
- Right to object: Object to the processing of your personal information for direct marketing or legitimate-interest purposes.
- Right to withdraw consent: Withdraw consent for any processing based on consent at any time.
- Right to lodge a complaint: Submit a complaint to the Information Regulator of South Africa if you believe we have not handled your information properly.
To exercise any of these rights, please contact us at info@expressroad.co.za. We will respond within a reasonable period and at most within 30 days of receiving your request.
10. Cookies
We use cookies and similar tracking technologies on our website. For full details, please see our Cookie Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.
12. Information Regulator (South Africa)
If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator:
- Website: https://inforegulator.org.za
- Email: complaints.IR@justice.gov.za