Last updated: 6 October 2026

GT AUCTION respects your privacy and is committed to protecting your personal information.

This Privacy & POPIA Policy explains how we collect, use, store, share and protect personal information when you use the GT AUCTION website, register as a bidder, participate in an auction, make or receive payments, purchase a vehicle, arrange collection or otherwise interact with us.

This Policy is intended to comply with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws.

1. WHO WE ARE

GT AUCTION is operated by:

Legal company name: GT SPARES AND SALVAGE (PTY) LTD
Trading name: GT AUCTION
Registration number: 2012 / 086938 / 07
VAT number: [VAT NUMBER / NOT VAT REGISTERED]
Physical address: 32 Amsterdam Avenue, Park Central Business Park, Selby, Johannesburg
Website: www.gtauction.co.za
Email: info@gtauction.co.za

For purposes of POPIA, the entity identified above is the Responsible Party for personal information processed through GT AUCTION.

2. OUR INFORMATION OFFICER

GT AUCTION’s Information Officer is responsible for overseeing compliance with POPIA and responding to privacy-related requests.

Information Officer: Nikita van Heerden
Email: info@gtauction.co.za
Physical address: 32 Amsterdam Avenue, Park Central Business Park, Selby, Johannesburg

Requests relating to access, correction, deletion, objection or other privacy matters may be directed to the Information Officer.

3. PERSONAL INFORMATION WE COLLECT

Depending on how you interact with GT AUCTION, we may collect and process the following personal information:

• Full name and surname;
• South African identity number, passport number or other identification information;
• Copies of identity documents or passports;
• Date of birth or age where required for verification;
• Nationality or traffic-register details where applicable;
• Residential and postal address;
• Proof of residence;
• Email address;
• Mobile and telephone numbers;
• Username and account information;
• Signature where required;
• Company name and registration details where the bidder is a business or juristic person;
• Details of directors, members, beneficial owners, representatives or authorised persons where applicable;
• Authority, mandate or resolution documentation;
• VAT information where applicable;
• Bank account details required for refunds or payment verification;
• Payment and transaction information;
• Auction registrations;
• Bidder number;
• Lot views, bids and auto-bids;
• Date and time of bids;
• Bidding history;
• Vehicles purchased;
• Invoices, deposits, fees and payment records;
• Refund and bank-account verification information;
• Vehicle documents;
• Vehicle collection information;
• Release Notes;
• Details of authorised third-party collectors or transporters;
• Communications between you and GT AUCTION;
• Customer service, complaint and dispute records;
• Fraud prevention and security information;
• Website usage information;
• IP address, device identifiers and browser information;
• Login history and audit logs;
• CCTV images and site-access records where applicable;
• Cookie and analytics information; and
• Any other information reasonably required to provide our services or comply with applicable law.

We will endeavour to collect only information that is adequate, relevant and reasonably necessary for the purpose for which it is processed.

4. HOW WE COLLECT PERSONAL INFORMATION

We generally collect personal information directly from you when you:

• Create a GT AUCTION account;
• Register to become an approved bidder;
• Upload identity or supporting documentation;
• Pay a bidder deposit;
• Participate in an auction;
• Place a bid or auto-bid;
• Purchase a vehicle;
• Make a payment;
• Request a deposit refund;
• Arrange vehicle collection;
• Authorise a third party to collect a vehicle;
• Contact us by telephone, email, website form or another communication channel;
• Visit or use our website; or
• Subscribe to marketing communications.

Where lawful and necessary, we may also obtain or verify personal information through:

• Sellers;
• Insurers;
• Banks and financial institutions;
• Payment service providers;
• Identity or address verification services;
• Fraud-prevention services;
• Transporters;
• Licensing authorities;
• Public registers;
• Regulators;
• Law-enforcement bodies; and
• Authorised representatives.

If you provide GT AUCTION with another person’s personal information, including the details of a representative or third-party collector, you confirm that you are authorised to provide that information and that you have brought this Privacy & POPIA Policy to that person’s attention where appropriate.

5. WHY WE PROCESS YOUR PERSONAL INFORMATION

GT AUCTION may process personal information for purposes including:

• Creating, securing and administering user accounts;
• Establishing bidder eligibility;
• Verifying bidder identity;
• Reviewing and approving bidder applications;
• Verifying authority to act on behalf of a company or another person;
• Preventing duplicate, fraudulent or unauthorised accounts;
• Processing refundable bidder deposits;
• Registering bidders and issuing bidder numbers;
• Administering online auctions;
• Recording and verifying bids and auto-bids;
• Maintaining required auction and bidder records;
• Identifying successful bidders;
• Creating transaction records;
• Calculating charges and generating invoices;
• Processing and verifying payments;
• Processing deposit refunds;
• Preventing fraud, chargebacks and unauthorised transactions;
• Reconciling accounts;
• Verifying sale and vehicle documents;
• Issuing Release Notes;
• Releasing vehicles to the correct Buyer or authorised collector;
• Administering vehicle collection and transport arrangements;
• Maintaining transaction, accounting and audit records;
• Responding to enquiries, complaints and disputes;
• Enforcing our Terms and Conditions and Rules of Auction;
• Protecting people, vehicles, premises, systems and legal rights;
• Investigating suspected fraud, misconduct or security incidents;
• Complying with legal, regulatory, tax, accounting, road-traffic and licensing requirements;
• Complying with court orders and lawful requests from regulatory or law-enforcement authorities;
• Providing essential account, auction, payment, collection and security communications;
• Maintaining and improving our website and services;
• Website security and technical administration;
• Analytics and service improvement; and
• Sending marketing communications where legally permitted.

6. LEGAL BASIS FOR PROCESSING

GT AUCTION processes personal information only where a lawful justification applies.

Depending on the circumstances, processing may be necessary:

• To perform a contract with you or take steps requested by you before entering into a contract;
• To comply with a legal obligation;
• To protect your legitimate interests;
• To pursue a legitimate interest of GT AUCTION or a third party where permitted by POPIA;
• Where you have provided valid consent; or
• Where another lawful basis recognised by POPIA applies.

Consent is not the only lawful basis on which GT AUCTION processes personal information.

Where processing is necessary to administer an auction, verify a bidder, complete a transaction, comply with a legal obligation or prevent fraud, withdrawing consent will not necessarily require GT AUCTION to stop that processing.

7. INFORMATION REQUIRED TO REGISTER AND BID

Certain information is required for GT AUCTION to verify your identity, approve your bidder account and administer auctions safely and lawfully.

This may include your identity document or passport, proof of residence, contact information, payment information and, where applicable, documentation establishing your authority to act on behalf of a company or another person.

Where required information is not provided, or where GT AUCTION cannot reasonably verify the information supplied, we may be unable to:

• Approve or activate your bidder account;
• Allow you to participate in auctions;
• Accept or administer a bid;
• Process certain payments or refunds;
• Issue a Release Note;
• Release a purchased vehicle; or
• Provide other services that require identity or authority verification.

Providing information for optional marketing purposes is voluntary and is not a condition of participating in an auction.

8. ID DOCUMENTS AND PROOF OF RESIDENCE

GT AUCTION may require bidders to provide identity documents, proof of residence and related verification documentation.

These documents are collected for purposes including identity verification, fraud prevention, bidder approval, transaction administration, vehicle release, recordkeeping and compliance with applicable legal requirements.

Identity documents, proof of residence and related verification documents will be stored using restricted-access document storage.

Access will be controlled through role-based permissions and limited to authorised personnel and service providers who reasonably require access for legitimate business or legal purposes.

GT AUCTION will implement reasonable technical and organisational safeguards designed to protect these documents against unauthorised access, loss, alteration, disclosure or destruction.

Verification documents will be retained only for as long as reasonably necessary or as required or permitted by applicable law, after which they will be securely deleted, destroyed or de-identified where appropriate.

9. PAYMENT INFORMATION

Payments may be processed through third-party payment service providers.

GT AUCTION may receive transaction information from these providers, including payment status, amount, payment reference and information required to reconcile or verify a payment.

Where card or banking information is entered directly into a third-party payment gateway, that information may be processed by the payment provider rather than stored directly by GT AUCTION.

The relevant payment provider’s own privacy and security terms may also apply.

GT AUCTION may retain payment and banking information reasonably required for accounting, fraud prevention, transaction verification, refunds, chargeback prevention, disputes and legal compliance.

10. BID AND AUCTION RECORDS

GT AUCTION records information relating to participation in auctions, which may include:

• Auction registration;
• Bidder identification;
• Bidder number;
• Lot views;
• Bid and auto-bid amounts;
• Date and time of bids;
• Bid history;
• Successful and unsuccessful bids;
• Winning bidder information;
• Auction results;
• Payment information; and
• Related transaction records.

These records may be retained where reasonably necessary to administer auctions, resolve disputes, enforce agreements, maintain audit records and comply with legal obligations.

11. WHO WE MAY SHARE PERSONAL INFORMATION WITH

GT AUCTION does not sell personal information.

Where reasonably necessary and lawful, we may disclose personal information to:

• Employees and authorised contractors;
• Sellers and principals where appropriate;
• Banks and payment service providers;
• Identity and address verification providers;
• Fraud-prevention providers;
• Website hosting and information technology providers;
• Auction technology and software providers;
• Cloud and data-storage providers;
• Email, SMS, WhatsApp and other communications providers;
• Licensing and vehicle-document service providers;
• Approved transporters and collection service providers;
• Insurers;
• Accountants, auditors and professional advisers;
• Attorneys and other legal advisers;
• Courts and tribunals;
• The Information Regulator;
• The National Consumer Commission;
• Government departments and regulatory authorities;
• Law-enforcement authorities where lawfully required; and
• Any other person where disclosure is required or permitted by law.

Service providers processing personal information on our behalf are expected to be subject to appropriate confidentiality and security obligations.

12. CROSS-BORDER PROCESSING

Some website, cloud, support, email, analytics, security, payment or other technology providers used by GT AUCTION may process or store information outside South Africa.

Where personal information is transferred outside South Africa, GT AUCTION will use a lawful transfer mechanism and take reasonable steps to ensure an adequate level of protection consistent with POPIA.

Further information about material cross-border processing may be requested from our Information Officer.

13. HOW LONG WE KEEP PERSONAL INFORMATION

GT AUCTION will not retain personal information for longer than reasonably necessary unless retention is required or permitted by law.

Retention periods may depend on:

• The purpose for which the information was collected;
• The duration of the customer relationship;
• Contractual requirements;
• Auction record requirements;
• Tax and accounting obligations;
• Vehicle and transaction records;
• Fraud prevention;
• Dispute resolution;
• Legal claims; and
• Other regulatory or legal requirements.

Prescribed auction records will be retained for at least the period required by applicable auction regulations.

Other tax, accounting, anti-fraud, vehicle or litigation records may require longer retention periods under applicable law.

When personal information is no longer required or authorised to be retained, it will be securely deleted, destroyed or de-identified.

Identity documents and proof of residence will not be retained indefinitely merely because they were uploaded during bidder registration.

Further information regarding applicable retention periods may be requested from the Information Officer.

14. SECURITY OF PERSONAL INFORMATION

GT AUCTION will implement appropriate and reasonable technical and organisational safeguards designed to protect personal information against loss, damage, unauthorised destruction, unlawful access or unlawful processing.

These safeguards may include:

• Restricted-access document storage;
• Role-based access permissions;
• User authentication;
• Restricted administrative access;
• Secure transmission;
• Secure hosting;
• Encryption where appropriate;
• Audit logging;
• Software and security updates;
• Backups;
• Malware and security monitoring;
• Vendor and service-provider controls;
• Staff confidentiality requirements;
• Secure document handling; and
• Procedures for responding to suspected security incidents.

No internet-based service can guarantee absolute security. GT AUCTION nevertheless takes reasonable measures appropriate to the nature of the personal information processed and the risks involved.

15. PERSONAL INFORMATION SECURITY COMPROMISES

If GT AUCTION becomes aware of a security compromise involving personal information, we will investigate the incident and take appropriate steps in accordance with POPIA.

Where a security compromise triggers a legal notification obligation, GT AUCTION will notify the Information Regulator and affected data subjects as required by applicable law.

Any notification may include information about the nature of the compromise and reasonable measures that affected persons can take to reduce potential harm.

16. YOUR RIGHTS UNDER POPIA

Subject to POPIA, PAIA and other applicable law, you may have the right to:

• Ask whether GT AUCTION holds personal information about you;
• Request access to your personal information;
• Request correction of inaccurate, irrelevant, excessive, out-of-date, incomplete or misleading information;
• Request deletion or destruction of personal information where legally permitted;
• Object to certain processing of your personal information;
• Withdraw consent where processing is based on consent;
• Object to direct marketing;
• Request information regarding applicable processing of your personal information; and
• Lodge a complaint with GT AUCTION or the Information Regulator.

Some rights are subject to legal limitations.

GT AUCTION may be required or permitted to retain certain personal information despite a request for deletion where retention is required or authorised by law, contract, dispute preservation or another lawful basis.

17. HOW TO EXERCISE YOUR RIGHTS

Requests relating to your personal information should be submitted to:

Information Officer: Nikita van Heerden
Email: info@gtauction.co.za
Physical address: 32 Amsterdam Avenue, Park Central Business Park, Selby, Johannesburg

GT AUCTION may require adequate proof of identity before providing access to, correcting or deleting personal information.

Where applicable, a request may need to be made using forms prescribed under POPIA or the Promotion of Access to Information Act 2 of 2000 (“PAIA”).

We will respond to valid requests in accordance with applicable law.

18. DIRECT MARKETING

Service communications concerning your account, bidder approval, bids, invoices, payments, refunds, collection, storage or account security are not regarded as marketing communications for purposes of this Policy.

GT AUCTION will send electronic direct marketing only where permitted by applicable law.

Where consent is required, marketing consent will be requested separately and will not be a condition of registering or bidding.

You may opt out of marketing communications at any time, free of charge and without unnecessary formality, by using the unsubscribe facility provided in the communication or by contacting:

info@gtauction.co.za

Opting out of marketing will not prevent GT AUCTION from sending essential transaction, account or security communications.

19. COOKIES AND WEBSITE TECHNOLOGIES

The GT AUCTION website may use cookies and similar technologies to:

• Enable essential website functionality;
• Sign users into their accounts;
• Protect accounts and website security;
• Maintain auction and bidding functionality;
• Process transactions;
• Remember preferences;
• Measure website performance;
• Understand how visitors use the website; and
• Support analytics or marketing where applicable.

Some cookies are necessary for the website and auction functionality to operate correctly.

Analytics, preference and advertising cookies will be described in the applicable Cookie Notice and, where required, used only after a valid choice has been made.

Users should be able to revisit and change their non-essential cookie preferences where applicable.

Blocking necessary cookies may prevent account, bidding or transaction functions from operating correctly.

20. THIRD-PARTY WEBSITES AND SERVICES

The GT AUCTION website may contain links to third-party websites or use services provided by independent third parties.

GT AUCTION is not responsible for the privacy practices of independent third parties.

Users should review the privacy policies and terms of relevant third-party websites and service providers before providing personal information directly to them.

21. CHILDREN

GT AUCTION’s bidding services are intended for persons who are legally capable of participating in vehicle auction transactions.

GT AUCTION does not knowingly permit children to register as approved bidders.

If GT AUCTION becomes aware that a child’s personal information has been collected without an appropriate lawful basis, reasonable steps will be taken to address the matter in accordance with POPIA.

22. AUTOMATED DECISION-MAKING

GT AUCTION does not ordinarily make decisions producing legal or similarly significant effects solely through automated processing.

Automated fraud, security or risk indicators may be used to flag an account or transaction for human review.

If GT AUCTION introduces solely automated decision-making of a type regulated by POPIA, appropriate notice and safeguards will be provided in accordance with applicable law.

23. CHANGES TO THIS POLICY

GT AUCTION may update this Privacy & POPIA Policy from time to time to reflect changes to our services, technology, legal obligations or privacy practices.

The current version will be published on the GT AUCTION website together with its effective or last-updated date.

Where reasonably practicable, prior material versions will be retained or made available.

Changes to this Policy will not retrospectively authorise incompatible processing of personal information.

24. INFORMATION REGULATOR

If you believe that your personal information has been processed unlawfully, you may contact GT AUCTION’s Information Officer so that we can investigate your concern.

You also have the right to lodge a complaint with the Information Regulator (South Africa).

Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Drive
Woodmead
Johannesburg

Telephone: 010 023 5200
Toll-free: 0800 017 160
Email: enquiries@inforegulator.org.za

Information about complaints and data-subject rights is available from the Information Regulator.

25. CONTACT US

For questions regarding this Privacy & POPIA Policy or the processing of your personal information, please contact:

GT AUCTION

Information Officer: Nikita van Heerden
Physical address: 32 Amsterdam Avenue, Park Central Business Park, Selby, Johannesburg
Email: info@gtauction.co.za
Website: www.gtauction.co.za