1. Introduction
BIDA (Pty) Ltd (“BIDA”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) and other applicable South African laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you:
- Use our website (bida.co.za)
- Register as a vendor, driver, or customer
- Place or fulfill orders
- Participate in auctions
- Use our logistics or dispatch services
- Interact with us via email, SMS, WhatsApp, or phone
By using our platform, you agree to this policy.
2. Information We Collect
2.1 Information You Provide
Depending on your role (Customer, Vendor, Driver, Administrator), we may collect:
- Full name
- Company name
- ID number / Company registration number
- VAT number
- Email address
- Phone number
- Physical address
- Delivery address
- Banking details (for vendor payouts)
- Vehicle details (drivers)
- KYC documents (vendors)
- Tax information (where applicable)
- Account login credentials
- Product listings and auction details
2.2 Transaction Information
When you place an order or bid:
- Order ID
- Payment method
- Order value
- Auction bid history
- Invoice details
- Delivery status
- QR dispatch logs
2.3 Payment Information
Payments are processed via secure third-party payment providers. BIDA does not store full card details.
We may store:
- Payment confirmation
- Transaction reference
- Payment status
2.4 Automatically Collected Data
When using our website, we may collect:
- IP address
- Browser type
- Device type
- Pages visited
- Session duration
- Cookies and tracking data
3. How We Use Your Information
We use your personal information to:
- Create and manage accounts
- Process orders and auction transactions
- Verify vendor and driver identities
- Perform KYC and compliance checks
- Generate invoices and sales orders
- Integrate with accounting systems (e.g., Sage 300 / Tier300)
- Coordinate courier and logistics services
- Send order confirmations and delivery notifications
- Provide customer support
- Prevent fraud and abuse
- Improve platform functionality
- Comply with legal obligations
4. ERP, Courier & Third-Party Integrations
To operate the BIDA platform, we may share relevant information with:
- Accounting systems (e.g., Sage 300 via API integration)
- Courier providers
- Payment gateways
- SMS notification providers
- Hosting providers
- Cloud infrastructure services
- Email service providers
We only share information necessary for operational purposes.
5. Cookies & Tracking
We use cookies to:
- Maintain login sessions
- Store cart contents
- Improve performance
- Analyse user behaviour
- Enable security features
You may disable cookies in your browser settings, but some functionality may not work correctly.
6. Legal Basis for Processing (POPIA)
Under POPIA, we process your information based on:
- Your consent
- Performance of a contract
- Compliance with legal obligations
- Legitimate business interests
- Protection of your vital interests
7. Data Security
We implement:
- SSL encryption
- Secure hosting environments
- Role-based access controls
- Password hashing
- API authentication (Bearer tokens)
- Firewall and server-level protections
However, no system is 100% secure. You use the platform at your own risk.
8. Data Retention
We retain personal information:
- For as long as your account is active
- For legal compliance (e.g., tax record retention)
- For dispute resolution
- As required by financial regulations
Inactive accounts may be archived or anonymised.
9. Your Rights Under POPIA
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion (where legally permissible)
- Withdraw consent
- Object to processing
- Lodge a complaint with the Information Regulator of South Africa
Information Regulator Website:
Information Regulator South Africa
10. Cross-Border Transfers
Your data may be stored or processed on servers located outside South Africa. Where this occurs, we ensure adequate data protection safeguards are in place.
11. Vendor & Driver Specific Provisions
Vendors and drivers acknowledge that:
- KYC documentation may be required for compliance.
- Identity verification is mandatory before activation.
- Order and dispatch logs are retained for audit purposes.
- Fraudulent activity will result in suspension and reporting.
12. Marketing Communications
We may send:
- Order updates
- Platform notifications
- Vendor updates
- Operational alerts
You may opt out of marketing communications at any time.
13. Children’s Information
BIDA does not knowingly collect personal information from individuals under 18 without parental consent.
14. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be published on this page with a revised “Last Updated” date.
15. Contact Information
If you have questions about this Privacy Policy, contact:
BIDA (Pty) Ltd
Email: info@bida.co.za
Website: https://bida.co.za
