FinChoice is committed to business practices in compliance with all applicable privacy legislation. FinChoice operates in different jurisdictions and the “applicable legislation” to which we refer in this policy includes (i) the South African Protection of Personal Information Act 4 of 2013 (“POPI”), the Mauritian Data Protection Act 20 of 2017 (“MU DPA”) and the Botswanan Data Protection Act 535 of 2018 (“Botswana DPA”). “Personal information” (or referred to simply as “information”) includes any personal information as specified in the applicable legislation.
In this policy “FinChoice” refers to any or all of (i) FinChoice a division of HomeChoice (Pty) Limited in South Africa; (ii) FinChoice Africa Ltd – incorporated in Mauritius, and (iii) FinChoice Botswana – incorporated in Botswana, whichever applies in the context. This policy applies whenever we process personal information of a customer or a person that we regard as a potential customer (“you” or “customer”) who visits or makes use of any of our platforms or communicates with us through any channel. It also applies if you are a third-party and we process your information as a result of your relationship with our customers (for example if you are a beneficiary under a policy of our customer).
We may amend this policy from time to time, in line with changes required by legislation or our business. You must therefore review the policy whenever you visit any of our channels for any such changes. The amended version shall supersede and replace all previous versions. If you have any questions about it or do not agree with it, please contact us directly at firstname.lastname@example.org or by calling our contact centre at 0861 346 246. By entering into any agreement with us, or by applying to enter any such agreement, or by using our mobi site, or any other FinChoice platform you agree to the terms of this policy.
Different privacy policies may apply to employee and supplier information.
FinChoice intends to protect your personal information and shall take reasonable internal technical and organisational security measures to prevent loss of or damage to personal information, unauthorised access, disclosure, modification, or unauthorised destruction of the data. However, information transmitted to us online (via the internet) is done so at your own risk. When entering your personal information via the internet, it is your responsibility to ensure that you use a secure computer or other electronic device. The internet is an open and often vulnerable system and the transfer of information via the internet is not completely secure, it is your responsibility to ensure that you always use a secure and trusted internet connection. Once we have received your personal information, we will store all information in secured environments, for example on secured servers in a protected data centre.
We also have physical and electronic access controls to our buildings.
We only authorise access to information to those employees who require it to fulfil their designated responsibilities.
When you use some of our electronic channels for transactions, you may be given an access number, username, password and/or personal identification number (PIN). You are responsible to keep all of this information safe and confidential.
The FinChoice channels, platforms and our correspondence with you may include links to other apps or third-party websites which do not fall under our supervision. We cannot accept any responsibility for your privacy or the content of these third-party sites, but we display these links in order to make it easier for you to find information about specific subjects, products or services. Your use of and reliance on these links is at your own risk.
You have certain rights in relation to your personal information. As available and except as limited by POPI, the MU DPA and the Botswana DPA, you have the following rights in respect of your personal information:
Where you have previously provided consent for us to process your personal information, you may also withdraw your consent. However, we may continue to process or store your personal information if another legal justification exists for the processing or storage.
Quality: we want to ensure that your personal information is accurate and up to date. You may ask us to correct or remove any personal information that you think is inaccurate, by sending us an email at email@example.com or calling our contact centre at 0861 346 246. Please also inform us promptly of any updates to your personal information.
Access: you have the right to request that we provide you with personal information that we hold about you. You must contact us directly to do so or send an email to firstname.lastname@example.org. This request may be subject to an access to information request in terms of applicable laws and may require you to verify your identity, identify the rights you are wishing to exercise and pay a fee.
The right to access your personal information may further be limited in terms of applicable law.
We collect information about you as follows:
We typically use your information for the following purposes:
We aim to only process personal information in a manner that is adequate, relevant and not excessive, considering our purposes of use.
Some marketing and credit risk decisions are done solely through automated processes. In instances where these may have a legal impact or affect you significantly, we implement adequate measures to protect your legitimate interests.
If you qualify as our customer or we obtained your details in the context of a sale we will market to you unless you opt out. We share your information with other HomeChoice International PLC group companies, and they may also market to you unless you opt out. Where we believe that third party products outside of the group may interest you, we will also market these third-party products to you. You can always opt out from these. We will never sell your information to third-parties for marketing purposes.
We will only process information about children with the consent of a competent person (someone like the parent or guardian) or if the applicable laws otherwise allow it.
We do not intend to use any ‘special/sensitive personal information’ as defined in the applicable laws, other than health related information when we offer you credit insurance, criminal behaviour for the purposes of assessing insurance claims or fraud related information when conducting compliance and risk assessments
We will keep your personal information confidential and only share it for purposes set out in this policy or if you have consented thereto, or if we otherwise have a legal right or obligation to share it.
We have trusted relationships with various third-parties who provide services to us or on our behalf and who may process your personal information on our behalf. We will share information with them on a need-to-know basis and subject to a contract to maintain the security of your personal information and to use it for our specified purposes only.
In addition, we may share information with the following parties:
When you apply to us for any financial product or service, we may request your credit report which will provide us with your credit profile. Whether or not your application is successful, the credit bureau will place an enquiry (footprint) on your credit profile that may be seen by other credit providers. Large numbers of applications within a short time period may affect your credit profile.
We will report any security breach to both the Regulator and the individuals or companies involved. If you want to report any concerns about our privacy practices or if you suspect any breach regarding your personal information, kindly notify us by sending an email to email@example.com.
You may, on reasonable grounds, object to us using your Information. If you object, we will stop using your information, except if the law allows its continued use or retention.
If you believe we are using your information unlawfully, you may lodge a complaint directly to us at:
Alternatively, you may lodge a complaint to the appropriate Information Regulator with the following contact details:
The Information and Data Protection Commission has not yet been established. Contact us directly by sending an email to firstname.lastname@example.org to assist with your complaint.
We want to ensure that your information is accurate and up to date. You may ask us to correct any personal information that you think is inaccurate or request us to remove your information by sending an email to email@example.com. Please note that such a request may require you to verify your identity and may be subject to the requirements set out in the Promotion of Access to Information Act (PAIA).
You may request a record of personal information that we hold about you by sending an email to firstname.lastname@example.org.
We retain personal information in accordance with the required retention periods in law or for legitimate business purposes. We will only retain your personal information for the purposes explicitly set out in this policy. We may keep personal information indefinitely in a de-identified format for statistical purposes.
We may transfer your personal information to foreign countries mainly for the business purposes of the companies within the HomeChoice International PLC group, for retention or if our service providers are cross border or make use of cross border systems. If you continue to use our website or apply to or enter into an agreement with us, you expressly agree that we may transfer the personal information cross border for these purposes. We will only share information cross border to recipients who have laws similar to the applicable laws, or who have entered into an agreement with us to include the relevant principles prescribed by the applicable laws.