1. Private body
Name: NALO MOBILITY FINTECH (Pty) Ltd
Trading name: Nalo
Registration number: 2026/009830/07
Address: CSIR Office Park, Meiring Naude Road, Brummeria, Gauteng, 0184, South Africa
Website: https://nalonode.com
Information Officer: The Head of NALO MOBILITY FINTECH (Pty) Ltd, acting in the capacity prescribed by POPIA and PAIA
Email for PAIA/POPIA requests: support@nalonode.com
2. Purpose
This manual explains the records held by Nalo, how a person may request access under the Promotion of Access to Information Act 2 of 2000 (PAIA), and how personal-information rights may be exercised under POPIA.
3. Information Regulator guide
The Information Regulator publishes a guide explaining how to use PAIA, together with forms and procedures. The guide and current forms are available at https://inforegulator.org.za/paia/.
4. Records that may be held
| Subject | Typical records |
|---|---|
| Corporate and governance | Incorporation and statutory records, policies, governance resolutions and compliance records. |
| Customers and contracts | Quotations, subscription schedules, agreements, onboarding records, invoices, statements, service tickets and correspondence. |
| Fleet, vehicle and platform | Vehicle/asset details, telematics records, GPS/trip records, alerts, driver-identification records, reports, maintenance and workshop records, field-service records and uploaded documents. |
| Suppliers and merchants | Supplier onboarding, agreements, purchase/order records, invoices, service records and due-diligence information. |
| Employees and contractors | Employment or contractor records, payroll-related records, performance/training and operational records, subject to legal restrictions. |
| Finance and tax | Accounting records, payment records, tax records, banking and audit information. |
| Technology and security | System logs, access records, incident records, architecture, configuration, audit and security records, subject to lawful security and confidentiality grounds for refusal. |
| Legal and regulatory | Licences/registrations where applicable, complaints, litigation, legal opinions, regulator correspondence and compliance assessments. |
5. Automatically available information
Public website content, published service descriptions, public policies, contact information and other records deliberately made public may be accessed without a formal PAIA request. Other records require a request where PAIA applies.
6. How to request access under PAIA
A requester should use the current prescribed PAIA Form 02 available from the Information Regulator and send it to support@nalonode.com or deliver it to CSIR Office Park, Meiring Naude Road, Brummeria, Gauteng, 0184, South Africa. The request must identify the record, the requester, the right being exercised or protected where PAIA requires that explanation, the preferred form of access and the required contact details.
Prescribed request and access fees may apply. Nalo may refuse access only on a ground permitted by PAIA, including protection of privacy, confidential commercial information, safety or security, legal privilege and other statutory grounds.
7. POPIA requests
A data subject may request confirmation, access, correction, deletion where legally justified, or object to certain processing. Requests should be sent to support@nalonode.com with sufficient information to verify identity and locate the relevant record. Nalo will request only information reasonably necessary to authenticate the requester and protect other persons' information.
8. Categories of data subjects
Nalo may process information about individual subscribers, customer representatives, employees, drivers, contractors, supplier and merchant personnel, website users, authorised platform users, complainants, prospective customers and other persons whose information is lawfully supplied in connection with Nalo's services.
9. Purpose of processing
Purposes include contract administration, telematics and fleet services, customer support, billing, security, fraud prevention, reporting, maintenance/field-service coordination, legal compliance, business administration and the establishment or defence of legal rights.
10. Recipients
Personal information may be disclosed where lawful to authorised customer users, Nalo personnel, operators and service providers, payment processors, connectivity and hosting providers, professional advisers, roadside/recovery providers, regulators and law-enforcement or judicial authorities where legally required.
11. Cross-border flows
Where information is transferred outside South Africa, Nalo applies section 72 of POPIA and uses an appropriate lawful safeguard.
12. Security measures
Nalo applies reasonable technical and organisational measures proportionate to the risks of the information processed. These may include access control, authentication, audit logging, network/application safeguards, encryption where appropriate, backups, supplier controls and incident response.
13. Remedies
A requester or data subject may complain to the Information Regulator where the law permits. Current complaint and support channels are available at https://eservices.inforegulator.org.za/services.aspx.
14. Availability of this manual
This manual is available on Nalo's website and from Nalo at the address above. It will be reviewed when material legal or operational changes occur.