Not fully cancelled

I had an policy with DOTsure which I cancelled 29.06.2024.

As part of the policy when I commenced this insurance was that I was obligated to install a smart tracking box. They did tell me that should I cancel within the first 3 years after the installation I would be liable for the installation costs.

This unit has been in my vehicle for more than 3 years.

When cancelling my policy in June there was no correspondence or word about the tracker.

I have been debited directly by Netstar for the past 3 months. Upon phoning them I was told that I had to cancel directly through them even though I never directly engaged an contract with them and also had to give them a calendar month notice.

Does Dotsure not go against POPI act for sharing my banking details with Netstar? Are they not obligated to cancel the tracker if it was initiated by them?