Legal
POPIA Compliance
Credit Registry SA is committed to full compliance with the Protection of Personal Information Act 4 of 2013 (POPIA). This page outlines our commitment to your privacy rights and how we uphold the eight conditions for lawful processing.
Our POPIA Commitment
As the responsible party, Credit Registry SA processes your personal information lawfully, transparently, and only for specified purposes. We do not sell your data. We do not process your data for purposes incompatible with those for which it was collected. We implement reasonable security measures to protect all personal information we hold.
Eight Conditions for Lawful Processing
Accountability
We take responsibility for processing personal information in compliance with POPIA.
Processing Limitation
We process personal information only for the purposes for which it was collected and with your consent or another lawful basis.
Purpose Specification
Personal information is collected for specific, explicitly defined, and lawful purposes.
Further Processing Limitation
We do not process personal information in a way incompatible with its original collection purpose.
Information Quality
We take reasonable steps to ensure personal information we hold is complete, accurate, and up to date.
Openness
We maintain documentation of all processing operations and make this policy available to data subjects.
Security Safeguards
We implement appropriate technical and organisational measures to protect personal information.
Data Subject Participation
We facilitate data subjects in exercising their rights under POPIA without undue delay.
Your Rights as a Data Subject
Right to Access
You may request a record of the personal information Credit Registry SA holds about you at any time.
Right to Correction
You may request correction or deletion of inaccurate, irrelevant, excessive, outdated, or misleading personal information.
Right to Object
You may object to the processing of your personal information on reasonable grounds relating to your particular situation.
Right to Complain
You have the right to submit a complaint to the Information Regulator of South Africa if you believe your rights have been infringed.
Right to Deletion
You may request the deletion of your personal information where there is no longer a lawful basis for its retention.
Right to Restriction
You may request that we restrict the processing of your personal information in certain defined circumstances.
Exercise Your Rights
To exercise any of your POPIA rights or to submit a data subject access request, contact our Information Officer at:
privacy@creditregistrysa.co.za
To lodge a complaint with the Information Regulator of South Africa: www.justice.gov.za/inforeg or inforeg@justice.gov.za. We will respond to all requests within the timeframe stipulated by POPIA.