Privacy Notice – Sasol Rewards Loyalty Programme

Sasol Rewards Loyalty Programme (also referred to as “Sasol Rewards”) is a loyalty programme which allows you to earn instant points on fuel purchases and spend your points on fuel and selected in-store purchases at participating Sasol Convenience Centres. We would like to make you aware of how we use your personal information when you register for Sasol Rewards.

This notice will provide you with details of processing activities you can expect from us, how we will protect your personal information and your rights under applicable data protection laws such as the Protection of Personal Information Act (”POPIA”).

Personal information is any information that can be used to determine who you are (including juristic persons in South Africa), for example your name, your e-mail address, IP address, mobile number and identity number.

Who is responsible for processing personal information and who is the Data Privacy Officer?

Sasol Oil Proprietary Limited (also referred to as “Sasol, we, us, our”) is the responsible party relating to your personal information, meaning that we decide how we hold, use and secure your personal information.

Address:  50 Katherine Street, Sandton, South Africa, 2196. 

For any enquiries, you can reach our Data Privacy Officer at privacy@sasol.com.

Which categories of personal information do we process?

We will collect the following types of personal information when you register for Sasol Rewards:

• Title and full name;
• Identity number (or asylum / passport number for non-South African citizens who participate in Sasol Rewards);
• Mobile number;
• e-mail address; and
• Date of birth (where applicable).

This personal information will be collected when you register for Sasol Rewards through any of the following ways:

• via the Sasol Rewards website (sasolrewards.co.za);
• via quick response (QR) code;
• via WhatsApp; or
• via the payment terminal at the fuel pump at participating Sasol Convenience Centres.

For what purposes and on what legal basis is personal information processed?

We will process, use and disclose the personal information referred to above for the following purposes:

• To verify your identity;
• To register you for Sasol Rewards, create your unique profile and account, issue a Sasol Rewards card to you and link your Sasol Rewards card to your unique profile and account;
• To enable the allocation of Sasol Rewards points to your profile;
• To enable you to log into the Sasol Rewards website or Sasol Rewards App to check your points balance and account status;
• To enable you to redeem your Sasol Rewards points in accordance with your unique profile;
• To send you periodic and relevant communications regarding your Sasol Rewards points (including pending expiry of such points);
• To ensure the efficient administration of Sasol Rewards;
• To detect, prevent and investigate fraud in instances where there are reasonable suspicions of fraud having been committed through the use of a Sasol Rewards card and / or account;
• To ensure the security of your Sasol Rewards account and proper allocation of Sasol Rewards points;
• To conduct analysis pertaining to your purchases of Sasol products at participating Sasol Convenience Centres (i.e. transaction history) in order to provide you with specific, personalised and relevant Sasol Rewards offers which may be of interest to you;
• To provide you with specialised Sasol Rewards offers based on your unique profile and account; and
• To tell you about exciting product promotions we think you might be interested in, being offered at either our participating Sasol Convenience Centres or by our Rewards partners.

Consent to participate in Sasol Rewards

The processing of your personal information is based primarily on your voluntary, specific and informed consent. By registering for Sasol Rewards, you are consenting to the collection and processing of your personal information in accordance with this Privacy Notice.

You may withdraw your consent to participate in Sasol Rewards at any time. However, please note that this may result in the permanent deletion of your personal information as well as Sasol Rewards profile and account, including your Sasol Rewards points (which would accordingly be forfeited). Accordingly, you will not be able to earn any additional Sasol Rewards points unless you obtain a new Sasol Rewards card and re-register for Sasol Rewards.

Processing based on legitimate interests, legal or contractual obligations

Whilst the processing of your personal information is based primarily on your consent, certain instances may necessitate that we process your personal information to fulfil a legal obligation, where such processing is in your or our legitimate interests, or where applicable, in terms of an agreement that we have entered into with you.

Whilst you may not object to processing that is based on legal or contractual obligations, you may object to processing that is based on legitimate interests.

Direct Marketing consent

As a Sasol Rewards member, Sasol may process your personal information to inform you about Sasol Rewards promotions and related product information as indicated above, via your mobile number, email address or any other preferred method of communication.

Should you not wish to receive any direct marketing communications from us, you may update your marketing preferences at any time by visiting the Sasol Rewards website www.sasolrewards.co.za, contacting the Sasol Rewards Contact Centre (031 001 5703), or by editing your preferences on the Sasol Rewards App.

Who obtains your personal information?

Within Sasol, your personal information will only be accessed by the individuals who need it in order to facilitate the purposes listed above.

We may have to share your personal information with specific third parties, including third-party service providers who are engaged to perform services on our behalf such as product or service delivery, project execution and analytics and insights providers for the efficient administration of Sasol Rewards. Furthermore, before disclosing personal information to any third party, we contractually mandate such third party to implement appropriate technical and organisational security measures to protect the personal information we disclose, to comply with applicable law and to process such personal information only for the purposes disclosed.

Where reasonably possible, we first try to ensure that personal information is anonymised before disclosure. However, if this is not possible, we disclose only the minimum necessary personal information to fulfil the purposes listed above, in compliance with applicable data protection laws.

Sharing your personal information outside of South Africa

The sharing of your personal information may involve transferring and processing your information outside of South Africa.

In the event that we do transfer personal information outside of South Africa, we will ensure that it is afforded a similar degree of protection as that provided by POPIA.  In this regard, we will enter into appropriate binding agreements with any third-party recipient to incorporate such protections.

Which privacy rights can you assert as a data subject?

POPIA provides you with certain rights in relation to the processing of your personal information, including the right to request details on your personal information stored and processed by us, objecting to the processing of your personal information under certain circumstances, and requesting that your personal information be rectified (where inaccurate or incorrect) or deleted.  If you do object, we will carefully assess your objection and if we disagree with it, we will provide you with our reasons and continue to process the relevant personal information.

To exercise or find out more about your privacy rights, kindly contact our Data Privacy Officer using the contact details above.

Security Safeguards

We have implemented appropriate and reasonable, technical and organisational measures to prevent loss of, damage to, unauthorised use of or destruction of, and unlawful access to, or processing of your personal information.

Where can you complain?

If you believe that Sasol SA is using your personal information contrary to POPIA, please contact our Data Privacy Officer mentioned above. If you are not satisfied with the outcome, then you have the right to submit a complaint to the Information Regulator of South Africa using the following details below:

Tel: 010 023 5241/42

Email: POPIAComplaints@inforegulator.org.za

How long is your personal information stored?

We will securely and permanently delete your personal information in accordance with our relevant legal, regulatory and reporting as well as legitimate operational requirements. Therefore, we will only retain your personal information, for as long as it is necessary to fulfil the purposes for which we collected it or where we are legally entitled to do so.

In this regard, where you have cancelled and/or withdrawn your participation in Sasol Rewards, we will ensure that your personal information is permanently deleted. However, as mentioned above, this will result in the permanent deletion of your Sasol Rewards profile and account, including the forfeiture of your Sasol Rewards points.

Please note that where you have withdrawn your participation in Sasol Rewards and request that your personal information be deleted, it may take up to 30 (thirty) days after your request has been received, to delete your personal information. 

Sasol Oil Proprietary Limited

Last update: May 2025