Privacy Policy

1. Who We Are

Credit Registry SA is an independent credit intelligence and monitoring platform. We are the responsible party for personal information processed through this platform, as defined under the Protection of Personal Information Act 4 of 2013 (POPIA).

We are not a registered credit bureau and are not affiliated with any government authority or the National Credit Regulator (NCR).

2. Information We Collect

We collect and process the following categories of personal information:

Identity information: Full name, South African ID number, date of birth. Contact information: Email address, mobile number, physical address. Financial indicators: Credit profile data facilitated through bureau access, income indicators provided voluntarily. Behavioural data: Platform usage patterns, dashboard engagement, feature interaction. Technical data: IP address, device type, browser, access timestamps. Communication records: Support correspondence, submitted forms.

We only collect information that is necessary, adequate, and relevant to providing our services.

3. How We Use Your Information

Your personal information is used for the following purposes:

Service delivery: Providing your membership services, credit monitoring, intelligence briefings, and dashboard functionality. Identity verification: Confirming your identity for secure account access. Billing: Processing membership payments via PayFast. Communication: Sending account notifications, alerts, intelligence briefs, and support correspondence. Platform improvement: Understanding usage patterns to improve the platform experience. Compliance: Fulfilling legal obligations under POPIA and other applicable legislation.

We do not use your personal information for unsolicited advertising or sell your data to third parties.

4. Legal Basis for Processing

We process your personal information on the following grounds: your explicit consent provided at registration; necessity to perform the membership contract you have entered into with us; compliance with legal obligations applicable to Credit Registry SA; and our legitimate interests in operating and improving the platform, where such interests are not overridden by your rights.

5. Data Sharing

We may share your personal information only in the following circumstances:

Service providers: With vetted third-party service providers who assist in operating the platform (e.g., payment processors, hosting providers). These parties are contractually obligated to protect your data. Credit bureaus: As necessary to facilitate credit report access you have requested. Legal requirements: Where required by law, court order, or regulatory authority. Business transfers: In the event of a merger, acquisition, or asset sale, subject to equivalent privacy protections.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information for as long as your membership is active and for a reasonable period thereafter as required by law or legitimate business need. Specific retention periods are as follows:

Account data: Retained for the duration of membership plus 5 years. Transaction records: Retained for 7 years in compliance with financial record-keeping obligations. Communication records: Retained for 3 years.

On verified request for deletion, we will process deletion of your data within 30 days, subject to any legal retention obligations.

7. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

Right to access: Request a record of your personal information held by us. Right to correction: Request correction of inaccurate or outdated information. Right to deletion: Request deletion of your personal information where no legal obligation requires its retention. Right to object: Object to the processing of your information in certain circumstances. Right to complain: Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at: privacy@creditregistrysa.co.za. We will respond within the timeframe required by POPIA.

8. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or disclosure. These measures include encrypted data storage, secure transmission protocols, access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Cookies and Tracking

Our platform uses cookies and similar tracking technologies to maintain session state, personalise your experience, and analyse platform usage. You may adjust your cookie preferences through your browser settings. Disabling certain cookies may impact the functionality of the platform.

We do not use third-party advertising cookies or tracking pixels for advertising purposes.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered members via email with at least 30 days' notice before the effective date. The current version is always available on this page.

11. Contact and Complaints

For any privacy-related enquiries or to exercise your rights: privacy@creditregistrysa.co.za.

To lodge a complaint with the Information Regulator of South Africa: www.justice.gov.za/inforeg/ or inforeg@justice.gov.za.