Privacy Policy

1. Who is responsible for your information

For the purposes of POPIA, the responsible party is MyWealth Capital (Pty) Ltd (registration number 2023/540559/07), 9 Long Street, Cape Town, Western Cape, 8000.

2. Laws we comply with

We process your Personal Information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and, where relevant, the Electronic Communications and Transactions Act 25 of 2002 and the Consumer Protection Act 68 of 2008. Because we access credit information with your consent, we also handle that information in a manner consistent with the protections of the National Credit Act 34 of 2005, while noting that we are not ourselves a registered credit bureau.

3. Our Information Officer

Our Information Officer, Ian Kinsey, is responsible for compliance with POPIA and is registered with the Information Regulator. You can contact the Information Officer at info@mywealthcapital.co.za or 021 054 1788.

4. The information we collect

Depending on how you use the Services, we may collect:

Identifying information: your full name, South African ID number and/or date of birth, and contact details (telephone number, email address, postal and physical address).

Profile and eligibility information: employment status, employer details where you provide them, income or affordability information, and the financial products or services you are interested in.

Credit information: information obtained, with your consent, from registered Credit Bureaus, such as your credit profile, accounts, payment history, and credit score.

Technical and usage information: device, browser, IP address, and information about how you use the Services, including through cookies (see clause 16).

5. How we collect it

We collect information directly from you when you register, complete a form or questionnaire, or contact us; automatically when you use the Services; and, with your consent, from registered Credit Bureaus and other lawful sources. We may also receive information from Partner Providers in connection with a product you have engaged with.

6. Why we use your information, and our legal basis

We process your Personal Information to:

provide the Services, including showing you your credit position and matching you with suitable financial products;

verify your identity and prevent, detect, and investigate fraud;

facilitate product applications with Partner Providers where you have expressed interest;

communicate with you about your account and the Services;

send you marketing about products and services where you have consented (see clause 15);

improve, secure, and develop the Services, including through aggregated and de-identified analysis; and

comply with our legal and regulatory obligations.

Our lawful bases under POPIA include your consent, the performance of a contract or steps taken at your request, compliance with a legal obligation, and our legitimate interests (and those of Partner Providers), provided these are not overridden by your rights.

7. Consent and how to withdraw it

Where we rely on your consent — for example, to access your credit information or to send you marketing — you may withdraw that consent at any time by contacting us. Withdrawing consent does not affect processing carried out before withdrawal, and may mean we can no longer provide certain features of the Services.

8. Credit bureau information

With your consent, we obtain credit information about you from registered Credit Bureaus — namely XDS (Xpert Decision Systems) and VCCB (Vericred) — to provide the credit-related features of the Services. We are not a Credit Bureau and do not maintain or amend bureau records. If you believe bureau-held information is inaccurate, you must lodge a dispute directly with the relevant Credit Bureau, which is obliged to investigate it. On request, we will identify which of these bureaus supplied a particular item so you can direct your dispute correctly.

9. Who we share your information with

We do not sell your Personal Information. We share it only as described below:

Partner Providers: where you express interest in a product or complete a matching questionnaire, so they can assess your eligibility and present an offer. Once you engage with a Partner Provider, their own privacy policy applies.

Credit Bureaus: XDS (Xpert Decision Systems) and VCCB (Vericred), to request your credit information with your consent.

Operators (service providers): third parties that process information on our behalf — for example hosting, identity verification, communications, and analytics providers — under written contracts requiring them to protect your information and process it only on our instructions.

Within our group: other companies in our group where necessary to operate the Services. Confirm group structure / holding company if this applies.

Legal and protective disclosures: where required by law, regulation, or legal process, or to protect our rights, the safety of any person, or to prevent fraud.

10. Referral fees and commission

We may receive a referral fee or commission from a Partner Provider if you take up one of their products. This is paid by the Partner Provider and does not affect the price or terms offered to you, and does not change how we protect your information.

11. Cross-border transfers

We store and process your Personal Information in South Africa wherever reasonably possible. We will not transfer your Personal Information outside South Africa unless permitted under POPIA — for example where the recipient is subject to laws or binding agreements providing an adequate level of protection, or where you have consented.

12. How we protect your information

We maintain appropriate technical and organisational measures designed to protect your Personal Information against loss, unauthorised access, alteration, or disclosure. These include access controls, encryption of information in transit, and limiting access to those who need it to perform their duties. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If a security compromise affecting your Personal Information occurs, we will notify you and the Information Regulator as required by POPIA.

13. How long we keep your information

We keep your Personal Information only for as long as necessary for the purposes described in this Policy, or for as long as required by law. Where you close your account or withdraw consent, we may retain certain information for a limited period to comply with legal obligations and to handle potential disputes, after which it is securely deleted or de-identified.

14. Your rights under POPIA

Subject to POPIA, you have the right to:

ask whether we hold Personal Information about you, and to request access to it;

request that we correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained;

object, on reasonable grounds, to the processing of your information;

withdraw consent where we rely on it; and

lodge a complaint with the Information Regulator.

To exercise these rights, contact our Information Officer at info@mywealthcapital.co.za. A request for access to information is dealt with under our PAIA Manual. You may also complain to the Information Regulator (contact details in clause 19).

15. Direct marketing

We will only send you electronic marketing where you have consented or where the law otherwise permits. Every marketing message includes a simple way to opt out, and you may also unsubscribe by contacting us or through your account settings. If you opt out, we will still send you essential service communications relating to your account.

16. Cookies

Our website uses cookies and similar technologies to operate the site, remember your preferences, keep your session secure, and understand how the site is used so we can improve it. Strictly necessary cookies are required for the site to function. You can manage non-essential cookies through the cookie banner or your browser settings; disabling some cookies may affect how the site works.

17. Children

The Services are intended for people aged 18 and over. We do not knowingly collect Personal Information from anyone under 18. If we become aware that we have collected such information without proper consent, we will delete it.

18. Changes to this Policy

We may update this Privacy Policy from time to time. The current version, with its effective date, will always be posted on the website. Where a change is material, we will take reasonable steps to notify you.

19. Contact and the Information Regulator

For privacy questions or to exercise your rights, contact our Information Officer at info@mywealthcapital.co.za or 021 054 1788.

You also have the right to complain to the Information Regulator of South Africa:

The Information Regulator (South Africa)

Email (general): inforeg@inforegulator.org.za

Email (POPIA complaints): POPIAComplaints@inforegulator.org.za

Website: https://inforegulator.org.za

Physical: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Postal: PO Box 31533, Braamfontein, Johannesburg, 2017

Telephone: 010 023 5200