RandCash ("RandCash", "we", "us", or "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) 4 of 2013. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website, platform, and services.
1. Information We Collect
We collect the following categories of personal information:
1.1 Information You Provide
- Identity Information: Full name, South African ID number, date of birth, gender.
- Contact Information: Email address, phone number, residential address.
- Financial Information: Bank account details, income information, employment details.
- Application Information: Loan amount, purpose, and term preferences.
- Communication Information: Messages, emails, and phone calls with our team.
1.2 Information We Collect Automatically
- Device Information: IP address, browser type, operating system, device identifiers.
- Usage Information: Pages visited, time spent on pages, click patterns, referring URLs.
- Location Information: General geographic location based on IP address.
1.3 Information from Third Parties
- Credit Bureau Information: Credit reports, credit scores, and credit history from registered credit bureaus (TransUnion, Experian, XDS, Compuscan).
- Employment Verification: Confirmation of employment status and income from employers or payroll providers.
- Bank Statement Data: Transaction history for affordability assessment (with your consent).
2. How We Use Your Information
We use your personal information for the following purposes:
- Lender Matching: To share your details with partner lenders for assessment of your loan enquiry.
- Enquiry Management: To manage your loan enquiry and communications with you and partner lenders.
- Legal Compliance: To comply with the NCA, FICA (Financial Intelligence Centre Act), and other applicable legislation.
- Communication: To send you important notifications about your loan, as well as marketing communications (with your consent).
- Service Improvement: To analyse usage patterns and improve our platform and services.
- Fraud Prevention: To detect and prevent fraudulent activity and protect our business and customers.
- Credit Bureau Reporting: Partner lenders may report your payment behaviour to credit bureaus as required by the NCA.
3. Third-Party Sharing
We may share your personal information with the following third parties:
- Credit Bureaus: TransUnion, Experian, XDS, and Compuscan for credit checks and reporting.
- Payment Processors: To process debit orders and loan disbursements.
- Service Providers: IT providers, data storage providers, and communication service providers who assist us in operating our platform.
- Regulatory Bodies: The NCR, South African Reserve Bank, and Financial Intelligence Centre as required by law.
- Debt Collectors: In the event of default, lenders may engage registered debt collectors to recover outstanding amounts on their own loans.
- Legal Advisors: For legal proceedings and compliance purposes.
We require all third parties to process your information in accordance with POPIA and to implement appropriate security measures.
4. Your Rights Under POPIA
As a data subject, you have the following rights:
- Right to Access: You may request a copy of the personal information we hold about you.
- Right to Correction: You may request that we correct any inaccurate or incomplete information.
- Right to Deletion: You may request that we delete your personal information, subject to legal retention requirements.
- Right to Object: You may object to the processing of your personal information for direct marketing purposes.
- Right to Complain: You may lodge a complaint with the Information Regulator if you believe your rights have been infringed.
To exercise any of these rights, please contact our Information Officer (details below).
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
- Encrypted storage of sensitive data at rest.
- Access controls and authentication measures to prevent unauthorised access.
- Regular security audits and vulnerability assessments.
- Employee training on data protection and security practices.
- Incident response procedures for data breaches.
While we take all reasonable steps to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.
6. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, and as required by applicable laws, including:
- Loan account records: For the duration of the loan plus 5 years after settlement.
- Declined applications: 12 months from the date of application.
- Financial records: As required by the Companies Act and tax legislation.
- Communication records: 3 years from the date of communication.
7. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Types of cookies we use:
- Essential Cookies: Required for the website to function correctly.
- Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
- Functional Cookies: Remember your preferences and settings.
- Marketing Cookies: Used to deliver relevant advertisements (with your consent).
You can manage your cookie preferences through your browser settings or our cookie consent banner. Please note that disabling certain cookies may affect the functionality of our website.
8. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will take steps to delete that information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be published on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
10. Contact Our Information Officer
If you have any questions about this Privacy Policy or wish to exercise your POPIA rights, please contact our Information Officer:
- Email: [email protected]
- Address: Johannesburg, Gauteng, South Africa
You may also contact the Information Regulator:
- Phone: 012 406 4818
- Email: [email protected]
- Website: www.justice.gov.za/inforeg