PRIVACY / REVIEW DRAFT
YOUR INFORMATION.
A CLEAR PURPOSE.
The responsible legal entity, information officer, privacy contact, retention periods and complete provider particulars have not yet been confirmed. This draft is not a claim of legal approval. Do not include sensitive personal information in an enquiry.
1. Information this website collects
The enquiry form collects your name, email, phone number, preferred contact method, optional company, enquiry type and message. Depending on the enquiry, it also asks for quantity, location, timeframe, fleet size and receiving notes. It does not ask for identity documents or banking information.
The form also records your chosen service journey, industry, grade preference and any planning estimate you choose to attach. Calculator inputs are kept in this browser tab’s session storage only when you choose to carry an estimate into an enquiry. They expire for transfer after two hours, can be removed from the form and are cleared after successful submission. Contact details are not saved in this browser storage.
A selected market reference adds its product, zone, source and effective date to the enquiry. If you carry an unmatched delivery location from town search, that text stays in this tab’s session storage for transfer for up to two hours and is cleared after a successful enquiry. You can edit the receiving location and remove a market reference before sending.
2. Why it is collected
Enquiry details allow the business to understand and respond to a fuel requirement, discuss availability and prepare a quotation. An enquiry does not subscribe you to updates or create an advertising profile.
The separate update form records email, optional name, fuel/region preferences, consent wording and version, and the consent timestamp in an encrypted subscriber record. Without configured email infrastructure it records pending interest and sends no message. Fictional addresses can be verified through the staff-only local sandbox using expiring single-use links. Verified subscribers are eligible only for matching sandbox alerts. Unsubscribed, bounced or complained addresses remain suppressed; re-registration does not reactivate them. Enquiries never create subscriptions.
3. Storage and access
This website saves enquiry details and internal notes in an encrypted database. Access to the inbox requires a staff login. Enquiry type, status, timestamps and random references are stored as operational metadata. The website does not publish enquiries or include personal details in URLs.
The published website runs on a Corvanta-managed virtual server. Its enquiry database is held on a protected server volume, separate from the development workspace. Access is restricted to authorised administration. Provider particulars, retention and any cross-border processing remain under review.
4. Notifications and sharing
No email provider is enabled. The notification adapter sends no email and does not transmit enquiries to an external provider. A future notification or CRM integration requires a separate configuration and review of recipients, providers and safeguards. The test inbox records local adapter outcomes separately from receipt; a local test record is not evidence of email delivery. Staff can inspect encrypted sandbox message bodies and consent records. Alert receipts prevent duplicate local sends for the same publication/version.
5. Cookies and technical protection
The public website does not use analytics, advertising cookies or third-party tracking. Staff sign-in creates an essential, HTTP-only session cookie lasting up to eight hours. The server uses a short-lived form token and rate-limit records to reduce abuse. When configured behind a trusted proxy, a keyed hash of the connection address can be used for rate limiting; raw connection addresses are not stored by this application.
Verification links expire after 24 hours; alert preference/unsubscribe links expire after 30 days and are single-use. Tokens use URL fragments that the page removes immediately and submits privately to the server. No subscriber record is returned by these public token actions. Staff actions, content approvals and protected CSV exports are audited. No automatic deletion schedule is configured yet.
6. Retention and your requests
Retention periods, deletion procedures and the process for access, correction, objection or deletion requests are awaiting approval. A public privacy contact has not been supplied. Records currently remain in restricted storage until authorised deletion; no retention period or completed legal review is claimed.
7. Review requirements
Review this notice against the actual operating arrangements and the Protection of Personal Information Act. Confirm the legal basis for processing, any required regulatory contact information, retention schedule, incident procedures and approved service providers.
Reference for legal review: Protection of Personal Information Act 4 of 2013.