This notice explains how Motoring Excellence processes information through MyMEX Cards, including self-service signup, subscriptions, tenant workspaces, public cards, CRM conversations, analytics and support.
Motoring Excellence operates MyMEX Cards. For platform account, billing, security and support administration, Motoring Excellence acts as the responsible party. Each tenant is responsible for the staff, customer, lead and content information it chooses to process in its own workspace, while MyMEX provides the secured service and authorised support layer.
Depending on the feature used, information may include account and identity details, company and industry information, card-holder profiles, credentials in protected form, brand media, public card content, customer enquiries, CRM notes and messages, consent preferences, subscription quantities and provider references, email delivery records, push subscriptions, analytics events, support requests and technical security records.
Information may be supplied directly during signup, onboarding, card creation, support or customer interaction; added by an authorised tenant user; generated when a card or platform feature is used; or returned by a configured service such as PayPal, an email provider or a browser push service. Tenants must have a lawful basis to upload or import personal information.
We process information to create and secure accounts, verify email addresses, provision tenants, administer subscriptions, publish digital cards, route enquiries, support customer conversations, measure engagement, deliver requested notifications, prevent misuse, maintain audit records, diagnose problems and provide platform support. We do not sell personal information.
Processing is limited to an applicable contract, legitimate service or security purpose, legal obligation, consent or another lawful basis. MyMEX is designed to separate tenant data, restrict roles and collect only what the active workflow needs. A tenant must not use the platform to collect excessive, irrelevant or unlawfully obtained information.
PayPal processes payment credentials and recurring payments under its own privacy terms. MyMEX does not store a customer’s full card or PayPal login details. We retain provider references, billing cycle, purchased quantity, subscription status, payment-event status and audit information needed to activate capacity, reconcile webhooks, assist support and meet legal obligations.
Information deliberately published on a digital card is publicly accessible through its share link, QR code, installed app or search metadata where enabled. Card holders and tenant administrators must review public fields before publishing. Removing a field or archiving a card limits future access but cannot retract copies that another person lawfully saved or shared earlier.
Jarvis may assist with explanations, drafting, classification and recommendations. Only information necessary for the requested, authorised task should be sent to an AI service. AI output remains reviewable and does not bypass permissions, consent or business rules. Platform credentials stay server-side, and important customer-facing actions require a separate confirmed workflow.
Messages and notifications are subject to tenant permissions, available consent or service purpose, suppression and delivery controls. WhatsApp hand-offs may be recorded before the external app opens. Push notifications require an opt-in browser subscription and can be disabled in the browser. Delivery records may be retained for audit, retry and support.
MyMEX uses essential session cookies and limited browser storage for security, authentication, interface preferences, install behaviour and reliable app operation. Workspace and card analytics may record page, action, device and campaign context without requiring unnecessary message content. We do not use the public platform to sell third-party behavioural advertising profiles.
Authorised hosting, payment, email, AI, mapping, browser and support providers may process limited information needed to perform their service. Where information is processed outside South Africa, Motoring Excellence and the tenant must use appropriate contractual, legal and security safeguards for the circumstances.
Information is kept only for the active service, recovery, security, audit, dispute and legal periods that apply. Retention differs by record type. Account, payment and security logs may outlast a public card; temporary verification tokens expire sooner. When deletion is appropriate, information is removed or de-identified through a controlled process and backups age out according to the backup cycle.
Safeguards include hashed passwords and one-time tokens, CSRF protection, server-side role checks, workspace scoping, protected secrets, prepared database operations, signed webhook verification, audit records and restricted administration. No system can guarantee absolute security, so users must protect credentials and report suspicious access promptly.
Subject to POPIA and any applicable exceptions, a data subject may ask whether information is held, request access or correction, object to certain processing, withdraw consent where consent is the basis, or request deletion. We may verify identity and coordinate with the responsible tenant before acting. A concern may also be raised with South Africa’s Information Regulator.
Suspected unauthorised access is investigated and contained. Where notification is legally required, the responsible party, Information Regulator and affected data subjects will be notified in the manner and timeframe applicable to the incident. Tenants must promptly tell Motoring Excellence about an incident affecting their workspace or credentials.
Privacy and support enquiries may be submitted through the secure support form, emailed to admin@motoringexcellence.com, or raised by calling +27 84 922 0000. We may update this notice when the platform, providers or legal requirements change and will publish the new effective date.