Privacy Policy
Effective 12 November 2026
ShyInc operates this Motor Warranty referral website. This notice explains how we handle your personal information when you request a quote. For privacy requests, email studio@shyinc.com.
1. Information we collect
We collect your full name, mobile number, optional email address, your acceptance by form submission, the exact consent notice and version, the page where consent was provided, and the submission date and time. Your vehicle details will be requested by the provider during follow-up; they are not collected by the current website form. Historical records may include vehicle details submitted through the earlier form. We also record the outcome of validation, delivery attempts, supplier HTTP and response codes, supplier lead references and any recorded sale outcome.
Campaign links may contain source tags, campaign identifiers and advertising click identifiers. We retain the identifiers present in your link to attribute referrals. We use a keyed hash of your IP address for abuse prevention rather than storing the raw address in our lead database. Cloudflare may process network and security information in providing hosting services.
2. Why we use it
We use this information to process your requested quote referral, check campaign eligibility, evidence your consent, prevent abuse and duplicate requests, diagnose delivery problems, and report campaign performance. Contact and sharing for this quote are based on the consent you give when submitting. Operational and security records support the proper functioning of the service.
3. Who receives it
With your consent, your name, mobile number, optional email address and quote-consent details are sent to ReturnX Digital through LeadByte and to participating motor warranty providers for follow-up. These organisations are responsible for their own processing and should explain their privacy practices when contacting you. Cloudflare hosts the website and database. Access to individual lead records is restricted to authorised administrators.
4. International processing
Our hosting and integration providers may process data outside South Africa, including through the supplier's UK-domain LeadByte service. Cross-border handling must meet applicable requirements under the Protection of Personal Information Act (POPIA). Contact us if you need information about the arrangements relevant to your request.
5. Retention and security
We retain referral, consent and delivery records while needed to complete and reconcile the referral, resolve complaints, meet applicable obligations and support campaign reporting. Records are reviewed for deletion or de-identification when no longer needed. This service does not promise an automatic fixed deletion date. We use HTTPS, restricted administrator access and server-side storage. No system can guarantee absolute security.
6. Browser storage
The website uses a session-storage identifier to count a browser session once. Campaign tags are taken from the page link. We do not install third-party advertising pixels. Administrator sign-in uses an essential secure, HttpOnly session cookie; it is not used for advertising. This site does not store your form contact details in browser local storage.
7. Your choices and rights
Subject to applicable law, you may ask to access, correct or delete your information, object to processing, or withdraw consent. Withdrawing consent does not change the lawfulness of earlier processing. Email studio@shyinc.com with your request reference if available. We may need to verify your identity before releasing or changing personal records. Ask any provider that contacts you to stop unwanted marketing directly.
You may raise an unresolved concern with South Africa's Information Regulator through its official website at inforegulator.org.za.
8. Updates
Changes will be published on this page with an updated effective date. Your submission retains the consent version shown at the time you submitted. See also our Terms and Conditions.