privacy policy

last updated: April 2026

1. who we are

CFP1 (PTY) LTD is incorporated in the Republic of South Africa and is responsible for the processing of your personal information as described in this policy.

2. what we collect

When you create an account: your email address, vehicle information (model and details) provided during signup, and an auto-generated username (e.g. ABCXXXXX). The username is derived from the first three characters of your email address plus five random alphanumeric characters (A–Z, 0–9). The full username is stored internally; only the masked form (e.g. ABCXXXXX) is shown publicly.

When you use the service: guides viewed, contributions made.

Original guides submitted through the guide creation tool — attributed permanently to your username_display in the guide's version history and author credit.

Discussion posts and replies — collected from WRENCH and WORKSHOP subscribers only. READ subscribers do not generate discussion content.

When you subscribe (monthly or annually): payment is processed by Yoco — we do not store card details.

We use cookies only for authentication (Supabase session token). We do not use tracking cookies or third-party analytics.

2. how we use your data

Your email is used to:

Your masked username is used to attribute your guide contributions, proposals, and discussion posts publicly. Your email address is never shown to other users.

We do not sell your data. We do not share your data with third parties except as necessary to operate the service (Supabase for database, Yoco for payments, Resend for email).

3. data storage

Your data is stored on Supabase infrastructure. Data is stored within the European Union or United States depending on Supabase region configuration. We apply appropriate security measures.

4. your rights

Under POPIA (Protection of Personal Information Act, South Africa) you have the right to:

To exercise these rights, email hi@cfp1.co.za

5. data retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law.

Your username and any guide contributions or discussion posts made under it are retained permanently as part of the guide version history, even after account deletion. These records use only the masked username — no personally identifiable information is retained in public records.

6. cookies

We use one session cookie (Supabase auth token) to keep you logged in. This cookie is strictly necessary and cannot be disabled while using the service.

11. information officer

In terms of the Protection of Personal Information Act 4 of 2013 (POPIA), the designated Information Officer of CFP1 (PTY) LTD is:

To exercise your rights under POPIA or to lodge a complaint about how CFP1 handles your personal information, contact the Information Officer directly at hi@cfp1.co.za

You also have the right to lodge a complaint directly with the Information Regulator:

7. contact