Who Controls the Lead Before You Meet the Customer?

In the last article I wrote about who controls the data inside a dealership. The DMS, the CRM, the provider contracts, the exit test. That piece looked inward. This one looks outward, to the moment before the customer ever reaches your showroom, your website or your sales team.

Most dealerships do not meet the customer first. A vehicle aggregation or marketing platform does. The customer browses listings, clicks to enquire, and submits a name, contact number, email and the vehicle they are interested in. The platform then forwards that lead to the dealership by email, by phone, or through a direct link to the dealership's WhatsApp Business account. At that point, a data chain begins that the dealership did not design and does not fully control.

The platform that built the form, set the fields and defined the purposes in its privacy policy determined the purpose and means of that collection. Under POPIA, that makes it a responsible party for the information it gathered. The customer saw the platform's terms, not the dealership's. The customer consented to the platform's purposes: to forward the lead, to develop user profiles, to understand market trends, to retarget with similar vehicles. Those purposes belong to the platform. They do not automatically transfer to the dealership.

When the lead arrives, the dealership becomes a responsible party for its own processing. But the lead carries conditions. The platform may restrict how the dealership contacts the customer, how long it may retain the lead, or whether it may market other vehicles. The dealership's privacy policy governs what it does next, yet the customer never saw that policy when they submitted the enquiry. The dealership must still justify its processing under POPIA and ensure the customer is aware of its purpose.

Related operating context: Who Owns Your Dealership's Data? – What the Automotive Industry Gets Wrong About Customer Experience – What Automotive Retail Teaches You About People.

The channel matters

If the lead arrives by email, the dealership receives the customer's contact details into its own system. If it arrives by phone, the salesperson takes the call and the platform may or may not record that the connection was made. If the platform links the enquiry directly to the dealership's WhatsApp Business account, the customer clicks, a chat opens, and the dealership receives a phone number and message content. The platform's infrastructure processes that message. The platform may or may not receive confirmation that a conversation started. The customer may not realise the dealership now holds their number independently of the platform. In every case, the dealership must ask what POPIA requires it to tell that customer before it begins its own processing.

The platform's relationship outlasts the sale

After delivery, the data sits in the dealership's DMS. But the platform that originated the lead may still hold the original enquiry record. It may still profile that customer, retarget them, and use their interaction history to refine its market intelligence. The platform's relationship with the customer outlasts the dealership's. The dealership supplied the inventory data that made the platform's listings valuable. The platform controls the customer relationship that made the sale possible.

That raises the same aggregation question a DMS provider raises. A platform with lead data across many dealerships can read demand patterns, price sensitivity and geographic trends better than any single dealer. It can benchmark conversion rates, stock turn and pricing power. The dealers supplying the raw data get the leads back, one at a time. They do not get the aggregated view.

The questions to ask

You should know what is aggregated, who receives the output, how competitors are separated, how re-identification is prevented and how the value is shared. You should also know what happens when the advertising relationship ends. Can you export your enquiry history? Does the lead data stay with the platform? Can the platform continue to market to your former customers? These are operating questions. Treating them as contract details you review once a year is how control slips away before you notice it.

The same tests apply here as with your DMS. Who controls the data at each handover point? What was the customer told? What purpose authorised each transfer? Who profits from aggregation? What happens when the relationship ends?

A dealership that can answer those questions controls its data. A dealership that cannot does not have a data asset. It has a dependency it has not yet measured, and this one starts before the customer ever walks through the door.

---

Personal views only. Content does not represent any employer, partner, client, association or organisation. This article is general commentary and education, not legal, financial or professional advice.

Sources

1. Protection of Personal Information Act 4 of 2013, particularly sections 1, 13 to 15 and 18 to 23.
2. Competition Commission of South Africa, Guidelines for Competition in the South African Automotive Aftermarket, 2024, section 12.