Last updated: March 2025
Privacy Policy
1. Introduction
EV24 ("we", "our", "us") operates the EV24 Tracking platform (the "Service"), accessible at tracking.ev24.africa. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service.
By creating an account or using the EV24 Tracking platform, you acknowledge that you have read and understood this Privacy Policy.
EV24 is committed to protecting your privacy and handling your personal data in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) where applicable.
2. Who We Are
- Company: Africar Group Pty Ltd
- ABN: 19 615 339 047
- Registered address: Sydney, New South Wales, Australia
- Trading as: EV24
- Service: EV24 Tracking — Vehicle Order Tracking Platform
- Contact: [email protected]
- Operations: Pan-African vehicle import and commerce, with operations across Morocco, Côte d'Ivoire, Senegal, South Africa, Rwanda, and other African markets.
3. Data We Collect
3.1 Account & Identity Information
When your account is created (by EV24 or by yourself), we collect:
- First name and last name
- Email address
- Phone number
- Postal address (street, city, postal code, country)
- Preferred language
3.2 Order & Vehicle Information
In connection with your vehicle order, we collect and store:
- Vehicle details (brand, model, year, version, color, VIN, mileage)
- Order details (order number, date, destination country, currency, pricing)
- Order status and stage history
- Documents related to your order (quotes, invoices, payment confirmations, customs documents, delivery notes, bills of lading, certificates of origin)
- Photos and videos of your vehicle(s) at various stages of the process
3.3 Authentication Data
- Encrypted password (hashed — never stored in plain text)
- Session tokens
- Password reset tokens (temporary, expire within 1 hour)
3.4 Usage Data
- Login timestamps and IP addresses (for security purposes)
- Pages visited within the platform
- Browser type and device information
3.5 Communications
- Email notifications sent regarding order updates
- Any communications you initiate with our support team
4. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contract performance |
| Providing order tracking and status updates | Contract performance |
| Uploading and sharing order documents | Contract performance |
| Sending email notifications about your order | Contract performance / Legitimate interest |
| Ensuring platform security and preventing fraud | Legitimate interest |
| Improving our platform and services | Legitimate interest |
| Complying with legal and regulatory obligations | Legal obligation |
| Customer support and communication | Contract performance / Legitimate interest |
We do not use your data for automated decision-making or profiling that produces legal effects.
5. AI Features & Data Processing
EV24 Tracking uses the Anthropic Claude API to power certain features, including:
- Automatic translation of order notes between English and French
- Intelligent summaries of order status
- Suggestions for missing documents or steps
When these features are used, relevant order data (such as order notes, stage descriptions, and vehicle details) may be processed by Anthropic's API. This data is used solely to generate the requested output and is not used to train AI models. Please refer to Anthropic's Privacy Policy for further details.
6. File & Media Storage
Documents, photos, and videos associated with your order are stored securely on Cloudinary, a cloud media management service. Files are stored in private, access-controlled folders and are only accessible via authenticated, signed URLs generated by our platform.
Please refer to Cloudinary's Privacy Policy for details on their data handling practices.
7. Data Sharing & Third Parties
We do not sell your personal data. We may share your data with:
- Cloudinary — for secure file and media storage
- Anthropic — for AI-powered features (order notes translation, summaries)
- Resend / Email providers — for transactional email notifications
- Railway — our cloud infrastructure provider where the platform and database are hosted
- EV24 staff and authorized administrators — who manage your order on our platform
- Legal authorities — if required by applicable law, court order, or regulatory obligation
All third-party providers are selected for their commitment to data security and privacy standards.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Account & personal information | Duration of the relationship + 3 years |
| Order data & documents | 7 years (legal/tax compliance) |
| Authentication logs | 12 months |
| Password reset tokens | 1 hour (auto-deleted) |
| Session data | 30 days of inactivity |
After retention periods expire, data is permanently deleted or anonymized.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate or incomplete data
- Right to erasure — Request deletion of your data, subject to legal retention obligations
- Right to restriction — Request that we limit how we process your data
- Right to data portability — Receive your data in a structured, machine-readable format
- Right to object — Object to processing based on legitimate interest
- Right to withdraw consent — Where processing is based on consent
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Data Security
We implement the following security measures to protect your data:
- All passwords are hashed using industry-standard algorithms (bcrypt)
- All data in transit is encrypted via HTTPS/TLS
- Database access is restricted and protected by environment-level credentials
- File access requires authenticated, time-limited signed URLs
- Admin access is role-controlled and logged
- Regular security reviews of our infrastructure
Despite these measures, no system is 100% immune to security risks. In the event of a data breach that affects your rights, we will notify you as required by applicable law.
11. Cookies & Tracking
EV24 Tracking uses only essential cookies necessary for the platform to function:
- Session cookies — to maintain your authenticated session
- Preference cookies — to remember your language selection
We do not use advertising cookies, third-party tracking cookies, or analytics cookies that share data with external parties.
12. International Data Transfers
EV24 operates across Africa and works with cloud providers whose infrastructure may be located outside your country of residence. When your data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses where required.
13. Children's Privacy
The EV24 Tracking platform is intended for use by adults (18 years and older) who are customers of EV24. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at [email protected].
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or via a notice on the platform.
15. Contact
For any questions, requests, or concerns regarding this Privacy Policy:
Email: [email protected]
Subject line: "Privacy Request — EV24 Tracking"