Privacy Policy

1. Introduction

T&C Financial Services ("we", "us", "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.

By using our services, you consent to the collection and processing of your personal information as described in this Privacy Policy.

2. Definitions

• "Personal Information" means information relating to an identifiable, living, natural person
• "Processing" means any operation or activity concerning personal information
• "Responsible Party" means T&C Financial Services, the entity responsible for processing your personal information
• "Data Subject" means the person to whom personal information relates
• "Information Officer" means the person appointed to oversee POPIA compliance

3. Information We Collect

3.1 Personal Information

We may collect the following personal information:

• Full name and surname
• South African identity number
• Contact details (phone number, email address, physical address)
• Employment information and income details
• Banking and financial information
• Credit history and credit bureau information
• Loan application and transaction history

3.2 Special Personal Information

We do not collect special personal information (such as religious beliefs, health information, or biometric data) unless required for specific purposes and with your explicit consent.

3.3 Information from Third Parties

We may obtain information about you from credit bureaus, employers, and other financial institutions to assess your creditworthiness and verify information provided in your application.

4. How We Use Your Information

We use your personal information for the following purposes:

• To process and assess your loan applications
• To provide credit and related financial services
• To verify your identity and prevent fraud
• To communicate with you about your account and services
• To comply with legal and regulatory requirements
• To improve our services and develop new products
• To conduct market research and customer satisfaction surveys

5. Lawful Basis for Processing

We process your personal information based on the following lawful grounds under POPIA:

• Consent: Where you have provided explicit consent
• Contract: To perform our contractual obligations
• Legitimate Interest: For our legitimate business interests
• Legal Obligation: To comply with applicable laws
• Public Interest: Where processing is necessary for public interest purposes

6. Information Sharing and Disclosure

6.1 Third Parties

We may share your information with:

• Credit bureaus for credit assessments
• Service providers who assist us in providing services
• Legal and regulatory authorities when required by law
• Debt collection agencies in case of default
• Professional advisors (lawyers, auditors) under confidentiality agreements

6.2 International Transfers

We do not transfer personal information outside South Africa unless adequate protection measures are in place or your explicit consent is obtained.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Secure data storage systems
• Access controls and authentication procedures
• Regular security assessments and audits
• Employee training on data protection
• Incident response procedures

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods vary depending on the type of information and the purpose of processing.

Personal information related to credit agreements is typically retained for a minimum of 5 years after the agreement is terminated, in accordance with the National Credit Act.

9. Your Rights as a Data Subject

Under POPIA, you have the following rights:

• Right to Access: Request access to your personal information
• Right to Correction: Request correction of inaccurate information
• Right to Deletion: Request deletion of your personal information
• Right to Object: Object to processing in certain circumstances
• Right to Restriction: Request restriction of processing
• Right to Portability: Request transfer of your data
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

10. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience and analyze website usage. You can control cookie settings through your browser preferences.

For more information about our use of cookies, please refer to our Cookie Policy.

11. Direct Marketing

We may use your contact information to send you marketing communications about our products and services. You have the right to opt out of direct marketing at any time.

You can unsubscribe from marketing communications by clicking the unsubscribe link in our emails or contacting us directly.

12. Complaints and Concerns

If you have any concerns about how we handle your personal information, please contact our Information Officer. We will investigate and respond to your complaint within a reasonable time.

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa.

13. Information Officer

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our website.

Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data subject rights, please contact us: