Privacy Policy
Last updated: 23 May 2026
This Privacy Policy explains how Forecourt (Pty) Ltd, registration number 2026/407708/07(“Forecourt”, “we”, “us”, “our”), collects, uses, stores, and protects personal information when you use the Forecourt platform (“the Service”).
We are committed to protecting your privacy and to processing personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.
1. Who we are
Forecourt (Pty) Ltd is the responsible party (data controller) for the personal information processed through the Service, except where we process Customer Data on your behalf, in which case we act as an operator (data processor) and you are the responsible party.
2. Information we collect
We collect and process the following categories of information:
Account information — name, email address, and role of users you register or invite to your organisation.
Business and operational data— fuel station details, end-of-day reports, sales and stock data, supplier and creditor information, bank statement data you upload for reconciliation, and other business records you submit to the Service (“Customer Data”).
Integration data — data exchanged with third-party services you connect, such as Zoho Books, including accounting records, invoices, items, and inventory data.
Usage and technical data — log data, device and browser information, IP address, and information about how you interact with the Service, used to operate, secure, and improve the Service.
We do not intentionally collect special categories of personal information. Please do not submit special personal information through the Service unless necessary for the operation of your business records.
3. How we use information
We use the information we collect to:
- Provide, operate, and maintain the Service;
- Process end-of-day reports, generate accounting entries, and perform reconciliations;
- Integrate with the third-party services you connect;
- Authenticate users and manage access and roles;
- Communicate with you about your account, billing, and the Service;
- Monitor, secure, and improve the Service, including error monitoring;
- Comply with our legal and regulatory obligations.
We process Customer Data solely for the purpose of providing the Service to you and in accordance with your instructions.
4. Lawful basis for processing
We process personal information on the basis of:
- The performance of our contract with you (providing the Service);
- Your consent, where applicable;
- Our legitimate interests in operating and securing the Service;
- Compliance with legal obligations.
5. Where your information is stored
The Service is hosted on infrastructure located in the European Union. This means that personal information you submit may be transferred to and stored on servers outside South Africa.
Where personal information is transferred outside South Africa, we take reasonable steps to ensure it is processed by parties subject to laws, binding agreements, or rules that provide an adequate level of protection comparable to POPIA, as required by section 72 of POPIA.
Our key sub-processors include:
- Supabase — database, authentication, and storage (EU region);
- Vercel — application hosting;
- Zoho — accounting integration (only where you connect it);
- Resend — transactional email delivery;
- Sentry — error monitoring;
- Our payment processor, for subscription billing.
6. Sharing of information
We do not sell your personal information. We share information only:
- With sub-processors who provide infrastructure and services on our behalf, under appropriate confidentiality and data-protection obligations;
- With third-party services you choose to connect to your account;
- Where required by law, regulation, or valid legal process;
- To protect our rights, safety, or property, or that of others.
7. Data retention
We retain personal information for as long as your account is active and as needed to provide the Service. After termination, we retain or delete Customer Data in accordance with our contractual and legal obligations. You may request deletion of your data, subject to any legal retention requirements.
8. Security
We implement appropriate technical and organisational measures to protect personal information against loss, unauthorised access, alteration, and disclosure. These include encryption in transit, access controls, row-level security on our database, and authentication safeguards.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
9. Your rights
Under POPIA, you have the right to:
- Request access to the personal information we hold about you;
- Request correction or deletion of your personal information;
- Object to the processing of your personal information;
- Lodge a complaint with the Information Regulator of South Africa.
To exercise these rights, contact us at privacy@forecourt.africa.
You may also contact the Information Regulator (South Africa):
Website: inforegulator.org.za
Email: enquiries@inforegulator.org.za
10. Cookies and tracking
The Service uses cookies and similar technologies necessary for authentication, session management, and security. We do not use advertising cookies.
11. Children
The Service is intended for business use and is not directed at children. We do not knowingly collect personal information from children.
12. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated Policy on our website and update the “Last updated” date. Material changes will be communicated to you.
13. Contact
For privacy queries or to exercise your rights, contact:
Forecourt (Pty) Ltd
Registration number: 2026/407708/07
Republic of South Africa