1. Introduction

Acquifin (Pty) Ltd ("Acquifin", "we", "us" or "our") respects your right to privacy and is committed to protecting the personal information of data subjects in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA").

This Privacy Notice explains how we collect, use, store, disclose and protect personal information when you visit our website or engage with us in the ordinary course of business.

2. Who is the Responsible Party?

Acquifin (Pty) Ltd is the responsible party as contemplated in POPIA.

3. Information Officer

For any privacy related queries, access requests, objections or complaints, please contact our Deputy Information Officer:

4. What Personal Information We Collect

Depending on your interaction with us, we may collect and process the following categories of personal information:

4.1 Website related information

• IP address
• Browser type and version
• Device type and operating system
• Date and time of access
• Pages visited and referring URLs

4.2 Contact and enquiry information

• Name and surname
• Email address
• Telephone number
• Information you provide when completing a contact form or sending us correspondence

4.3 Client, debtor and service related information

Where applicable and lawful:

• Identity numbers
• Contact details
• Financial information
• Account, payment, and transaction details

5. How We Collect Personal Information

We collect personal information:

• Directly from you (e.g. via contact forms, emails, or phone calls);
• Automatically when you use our website (via cookies and server logs); or
• From third parties or clients where lawful and required for the administration of accounts.

6. Purpose of Processing Personal Information

We process personal information for purposes including but not limited to:

• Operating and maintaining our website;
• Responding to enquiries and correspondence;
• Acquiring and managing debtor books;
• Administering and enforcing financial obligations owed to Acquifin;
• Maintaining accurate account records;
• Complying with legal and regulatory obligations;
• General business administration; and
• Ensuring the security and integrity of our systems.

7. Lawful Basis for Processing

We process personal information in accordance with POPIA only where processing is lawful, including where:

• Processing is necessary to perform or conclude a contract;
• Processing is required by law;
• Processing is necessary for a legitimate interest of Acquifin or a third party; or
• Consent has been obtained where required.

8. Outsourced Processing

Acquifin may appoint Acquifin Holdings (Pty) Ltd as an operator to perform debt administration and collection activities on its behalf.

Acquifin remains the responsible party under POPIA and ensures that all operators process personal information only on our instructions and subject to appropriate security and confidentiality safeguards.

9. Cookies and Website Analytics

9.1 Cookies

• Our website may use cookies to enhance functionality, security and performance.
• Cookies are small text files stored on your device.
• You may control or disable cookies through your browser settings. Disabling cookies may affect website functionality.

9.2 Analytics

We may use website analytics tools to understand website usage trends. Information collected is used in aggregated form and, where reasonably practicable, anonymised.

10. Disclosure of Personal Information

We may disclose personal information to:

• Authorised operators, service providers or contractors acting on our instructions;
• Regulatory or governmental bodies, where required by law; or
• Any party where disclosure is legally mandated or permitted.

All operators processing personal information on our behalf are contractually required to implement appropriate security safeguards.

11. Cross Border Transfers

Where personal information is transferred outside the Republic of South Africa, we ensure that such transfer complies with section 72 of POPIA, including that adequate protection is in place or that the transfer is legally permitted.

12. Retention of Personal Information

We retain personal information only for as long as necessary for the purpose for which it was collected, unless:

• Retention is required or permitted by law; or
• Retention is necessary for lawful business purposes.

13. Security Safeguards

Acquifin implements appropriate technical and organisational measures to protect personal information against:

• Unauthorised access;
• Loss or damage;
• Misuse or unlawful processing.

These measures include access controls, secure systems, policies, training and contractual safeguards.

14. Data Subject Rights

As a data subject, you have the right to:

• Request confirmation whether we hold personal information about you;
• Request access to your personal information;
• Request correction or deletion of inaccurate or excessive information;
• Object to the processing of your personal information on reasonable grounds;
• Lodge a complaint with the Information Regulator.

Requests may be directed to our Deputy Information Officer using the contact details above.

15. Complaints to the Information Regulator

If you believe that we have not complied with POPIA, you may lodge a complaint with:

16. Changes to this Privacy Notice

We reserve the right to update this Privacy Notice from time to time. The latest version will always be available on our website.