Legal
Privacy policy
How GoLula collects, uses and protects your personal information, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
Who we are
GoLula is an all-electric chauffeur service operating in Sandton, Johannesburg. For any privacy question, or to exercise any right below, email hello@golula.co.za.
What we collect and why
To provide a ride: your name, mobile number, email address, pick-up and drop-off addresses, travel date and time, passenger numbers, vehicle preference, flight number where given, and any notes you add. We cannot provide the service without these.
To run the trip: your chauffeur’s location while your trip is active, so that dispatch and you can see the car approaching. This is collected from the chauffeur’s device, not yours, and stops when the trip is completed.
Corporate accounts: traveller name, cost centre and trip detail, so we can invoice and report accurately to the account holder.
Website: standard server logs and, if you accept them, cookies used to understand how the site is used. You can decline non-essential cookies and the site will still work.
What we do not do
We do not sell your personal information. We do not share it for third-party marketing. We do not track your location as a passenger.
Who we share it with
Only where necessary: the chauffeur assigned to your trip receives your name, pick-up and drop-off details and phone number; our hosting and email providers process data on our behalf under contract; and if you travel on a corporate account, trip details are shared with that account holder. We may disclose information where the law requires it.
Where it is stored
Booking data is stored in a secured database hosted with our infrastructure provider, which may process and store data outside South Africa. Where that happens, we rely on providers offering protection comparable to POPIA.
How long we keep it
Booking and trip records are kept for up to five years to meet tax and accounting obligations. Chauffeur location points tied to a trip are kept for 12 months and then deleted. Marketing consent is kept until you withdraw it.
Your rights
You may ask what we hold about you, ask us to correct or delete it, object to processing, or withdraw consent at any time. Email us and we will respond as soon as reasonably possible. If you are not satisfied, you may complain to the Information Regulator (South Africa) at complaints.IR@justice.gov.za.
Security
Access to booking data is restricted to the people who need it to run your trip. Our site and apps are served over encrypted connections. No system is perfect, but we take reasonable technical and organisational steps to protect your information.
Changes
If this policy changes materially we will update this page and the date below.
Last updated: August 2026.