Purpose, choice and minimum necessary data

Privacy when researching a car or requesting buyer offers

This notice explains market selection, cookies, analytics, buyer enquiries and when Hagalu may share details with a selected showroom, finance or insurance provider at the buyer’s request.

Who is responsible

Hagalu and this website

Hagalu determines why and how information submitted directly through hagalu.com is used and therefore acts as the responsible party or data controller for that processing, subject to applicable law. Contact contact@hagalu.com with the subject “Privacy request”.

A showroom, finance or insurance provider receiving an enquiry with the buyer’s permission is responsible for its own quotation, communications, systems and subsequent processing. Its privacy notice also applies.

Country selection

Saved choice first, country-level detection second

The adaptive homepage checks a manually selected Hagalu market first. If no supported selection is saved, the site may use a trusted country code derived from the request IP by the configured infrastructure provider. Unsupported or unavailable locations fall back to South Africa.

Hagalu uses this result to select local models, currency and links. It is not used for precise-location tracking. Normal security, server or CDN logs may still process an IP address for delivery, abuse prevention and diagnostics.

Information processed

Different actions require different data

ActivityTypical informationPurpose
Ordinary browsingRequested page, device/browser information, approximate country, timestamps and security events.Deliver, secure and improve the site.
Country switchingSelected country slug stored in a functional cookie.Show the requested local market on the homepage.
Comparison and preferencesSelected models or interface state stored in browser storage.Keep the user’s research consistent between pages.
Showroom-offer enquiryContact details, country or city, chosen vehicle or variant, buying timeframe and information voluntarily supplied.Respond and, with permission, connect the enquiry to a relevant seller.
Correction or rights requestContact information, page URL, evidence and correspondence.Investigate and maintain an accountable record.

Do not submit identity documents, bank credentials, card details, passwords or unnecessary sensitive information through a general Hagalu enquiry. Hagalu’s finance tools are educational estimators and are not credit applications.

Buyer offer enquiries

No provider sharing without a clear buyer instruction

Hagalu may share the minimum necessary enquiry details with relevant showroom sellers, finance providers or intermediaries, insurers, or insurance intermediaries only when the buyer consents or clearly asks for that connection. Before submission, the interface should explain the purpose and intended provider category.

The provider may contact the buyer about the requested vehicle, quotation, eligibility or related terms. Hagalu does not guarantee a response, discount, approval, premium or transaction.

Commercial independence

Personal information is not a general marketing list

Hagalu does not sell personal information as an unrelated marketing database. A lead or referral fee may apply to a facilitated enquiry, but it does not permit unrelated reuse and does not change editorial rankings or reviews.

Hagalu may also disclose information to service providers that host, secure, analyse or operate the platform under appropriate instructions, or where disclosure is legally required.

Retention

Kept for the purpose, not forever

Market preference

Up to 365 days unless replaced or cleared by the user.

Buyer enquiries

Up to 24 months after resolution, unless a shorter period is sufficient or law requires a longer record.

Operational records

Security, analytics, correction and consent records follow purpose-specific provider or operational retention settings.

Analytics, advertising and infrastructure

Third parties may process limited technical data

Production Hagalu may use providers for analytics, advertising, hosting, content delivery, email or operational support. Those providers may process request information and use their own technologies under their notices. Non-essential services should be configured and presented according to the consent requirements applicable to the visitor.

Hagalu does not send finance-calculator inputs, saved vehicle comparisons or buyer-enquiry contents to advertising providers for personalised advertising.

Country privacy rights

Access, correction, objection and deletion

Depending on location and applicable law, users may request access to personal information, correction, deletion, restriction or objection, withdraw consent, and complain to the relevant regulator.

South Africa

Protection of Personal Information Act, 2013 (POPIA) and the Information Regulator.

Kenya

Data Protection Act, 2019 and the Office of the Data Protection Commissioner.

Send a request to contact@hagalu.com. Hagalu may need proportionate information to verify the requester before disclosing or deleting a record.

Security

Reasonable technical and organisational safeguards

Measures include encrypted transport, access controls, limited operational access, provider review and incident handling. No internet service can promise absolute security.

Children

Adult new-car buying service

Hagalu’s buyer-enquiry and vehicle-finance content is intended for adults. If information from a child was submitted improperly, contact Hagalu for review and deletion.

Enquiry lifecycle

What should happen after a buyer requests an offer

  1. ChooseThe user selects the country, request type and relevant vehicle or buying need.
  2. UnderstandThe interface identifies what information is requested, why it is needed and the category of provider that may receive it.
  3. ConsentNo provider introduction occurs merely because a person browses, compares models or uses an educational calculator.
  4. RouteOnly information reasonably necessary for the requested showroom, finance or insurance enquiry is sent to an appropriate provider.
  5. ControlThe user may ask Hagalu about access, correction, withdrawal of an unprocessed request or deletion where applicable.

Showroom, finance and insurance enquiries

Browsing Hagalu does not automatically send personal information to a showroom, lender, credit intermediary, insurer or broker. We share enquiry details only after the user takes an intentional action and gives the applicable consent.

For a requested offer, Hagalu limits sharing to information reasonably needed for that enquiry. The receiving provider is responsible for its quotation, eligibility checks, credit decision, insurance underwriting, privacy notice and regulatory duties. Users may contact Hagalu to withdraw an unprocessed request or exercise applicable privacy rights.

Effective and reviewed . Material changes will update this date.