Privacy Policy

Plant X operates a heavy-equipment rental marketplace for South Africa. For the purposes of POPIA, Plant X is the “responsible party” that determines how and why your personal information is processed.

Our Information Officer can be reached at privacy@plantx.co.za.

Depending on how you use Plant X, we may process:

• Account details — name, email address, phone number and password (passwords are handled by our authentication provider and never stored by us in plain text).
• Verification (KYC) information — identity documents, proof of address and business registration details where you list equipment or transact.
• Listing and booking information — equipment details, locations, dates, messages and rental history.
• Payment information — processed securely by our payment provider (Paystack); we receive transaction references and status, not your full card details.
• Usage information — pages and machines you view (used to personalise your home page), device and log data, and approximate location where you provide it.

We process your information to:

• Provide the marketplace — create your account, show listings, and manage bookings and payments (necessary to perform our contract with you).
• Verify users and equipment to keep the platform safe and trusted (legitimate interest and legal obligation).
• Personalise your experience, such as “recently viewed” and recommendations (with your consent — see cookies below).
• Communicate with you about bookings, verification and support.
• Comply with legal, tax and regulatory obligations, and prevent fraud.

We share personal information only as needed to run the service, with operators bound to protect it:

• Other users — owners and renters see the information necessary to fulfil a booking (e.g. names, listing and site details).
• Payment processing — Paystack, to take and release escrow-backed payments.
• Authentication and hosting — our identity provider and cloud/storage providers that run the platform.
• Authorities — where required by law or to protect our rights and users.

We do not sell your personal information.

Essential cookies keep you signed in and the platform secure. With your consent we also use a cookie that remembers the machines you view to personalise your home page. You can accept or limit non-essential cookies via the banner shown on your first visit, and change your mind any time by clearing the px_cookie_consent cookie in your browser.

We keep personal information only as long as needed for the purposes above or as required by law (for example, tax and transaction records). We apply reasonable technical and organisational safeguards — encryption in transit, access controls and escrow-backed payments — to protect your information.

You have the right to access, correct or delete your personal information, to object to certain processing, and to lodge a complaint. See our POPIA & your data rights page for how to exercise these rights and how to contact the Information Regulator (South Africa).

We may update this policy from time to time. We’ll change the “last updated” date above and, for material changes, let you know in the app.