1. Introduction

1.1. Blu Label Data Solutions (Pty) Limited (Registration Number 2008/011699/07) [BLDS/we/us/our] is a private company registered in the Republic of South Africa, which conducts the business of a lead generation and marketing services company. Our business involves data verification, management & maintenance, storage and analytics, direct marketing, the making of offers for products and services, lead generation and lead supply via various communication channels both electronic and non electronic and matters related thereto. [together referred to as the "Marketing Services")

1.2. The Marketing Services are conducted via our websites and various other online sites, domains , sub domains, divisions and brands * and includes various communication channels , like, telephone, SMS, WhatsApp, automated voice messages ("AVM"), electronic mail, television advertising, landing pages, and other means of lead generation ("Communication Platforms") (together referred to as the "Sites") to users ("you") to enable you to contract with third party service providers ("Service Providers") in various industries by making offers, marketing and advertising products and services, the latest deals, specials and promotions offered by these Service Providers ("Offers").

1.3. The Service Providers on whose behalf we conduct Marketing Services typically operate in a variety of diverse industries, including: insurance, financial services, credit, motor industry, asset providers, betting and gambling, general maintenance, cellular services, retail and contact centers. Please click on the industry description to find out who the relevant Service Providers are. These Services Providers and industries may change from time to time.

1.4. This Privacy Policy (Policy) explains how we will collect, use, store and share your personal information when you interact with us, use our Services and / or any of our Sites. This Policy and our Terms and Conditions as well as any offer related terms which you agree to will apply to our Marketing Services and to your interactions on the Sites and our interactions with you.

1.5. If you do not agree with this Policy, you should not continue to use the Sites and/ or Marketing Services and you should not interact with us on any Communication Platform as it will apply to all such interaction.

2. Scope & Purpose of this Policy

2.1. The processing of personal information is central to the nature of our business and the Marketing Services we provide.

2.2. This Policy explains our approach to processing of personal information in the provision of our Marketing Services and your use of the Sites as required by the Protection of Personal Information Act 4 of 2013 (POPIA) and your rights in respect of our processing of your personal information.

2.3. Our Policy has been developed to provide a framework for the appropriate level of privacy protection and represents our commitment to compliance with South African data protection legislation and any other applicable worldwide data protection laws, to try and achieve the highest standards in protecting your personal information.

2.4. This Policy is intended to assist you in making informed decisions when you interact with us. Please take a moment to read and understand it.

3. The BLT Group

3.1. BLDS is a wholly owned subsidiary of Blu Label Telecoms Limited, Registration No 2006/022679/06 ("BLT").

3.2. BLT has established a central data processing structure for all entities forming part of the BLT Group* of companies (BLT Group) and personal information processed by us as a member of the Group will be designated as BLT Group data.

3.3. Therefore, when you give us personal information, or we collect it from other sources in terms of this Policy, your personal information will form part of BLT Group Data and may be used by the BLT Group for the purposes contained in this Policy. This Policy will apply to such processing by the BLT Group.

3.4. As such, references in this Policy to BLDS may include each business unit, branch and/or representative office of any business of BLDS; any holding companies or subsidiaries of BLDS or subsidiaries of such holding companies or companies connected to BLDS; and any of BLDS's associates, cessionaries, delegates or successors in title or appointed third parties such as its authorised agents, advisors, partners and contractors. It also includes the companies making up the BLT Group from time to time, in particular, without limitation, BluNova (Pty) Limited, which is the central processor for the BLT Group.

4. Application

4.1. This Policy applies to personal information that we collect from you during your interactions with us, including through any of the Sites and/ or Communication Platforms and/ or personal information that we may collect offline or receive from third parties or as a member of the BLT Group in terms of this Policy.

4.2. This Policy will apply to personal information that we process regardless of the Site and/ or Communication Platform through which you interact with us. This Policy will apply when you interact with us, regardless of the manner of your interaction and or the Site and/ or Communication Platform through which the interaction takes place.

4.3. By submitting your details to us or visiting or using the Sites and/ or interacting with us you will be accepting this Policy and updates thereto and expressly consent to the processing of your personal information in the way described herein.

4.4. This Policy will apply to your personal information we already hold as at the date hereof, as an existing customer on our database ("customer database") and this Policy will apply unless and until you request to be removed from the customer database or opt-out, which you are always entitled to do.

4.5. We review our Policy from time to time and may need to change or update it. The most current version of this Policy will always be posted under the Privacy Policy tab of the Website and will be effective from the date of posting.

4.6. You agree that you will check the Policy from time to time. By not asking to be removed from our customer database and/ or continuing to use the Services and/or continuing to access and/or use the Sites and/ or interact on Communication Platforms after we make changes to this Policy, you agree to be bound by the revised Policy.

4.7. Where we use third parties to process personal information on our behalf, this Policy will apply to such third parties in the processing of your personal information.

4.8. Where you take up offers with Service Providers, their Privacy Policies will apply in relation to your relationship with them.

4.9. This Policy applies to BLT Group to the extent that it processes your personal information as BLT Group data.

5. Important Terms

5.1. Personal Information

5.1.1. Personal information is defined in POPIA as information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, and includes any information that identifies or relates specifically to you, including, for example, your name, age and identity number or other national identifier, your contact address, your location, your banking details, and contact numbers. In short, any information that we can use to specifically identify you will be personal information.

5.1.2. Some types of personal information are considered special personal information. These include personal information revealing or related to a person's health, racial or ethnic origin, religious or philosophical beliefs, sex life, political affiliation, or trade union membership; criminal behaviour and proceedings related thereto.

5.2. Processing

5.2.1. Processing is defined in POPIA as any operation or activity or set of operations involving personal information, whether or not by automatic means, including collecting, receiving, recording, organising, collating, storing, updating, modifying, retrieving, altering, consulting or using; disseminating by means of transmission, distribution or making available in any other form; or merging, linking, as well as restriction, degradation, erasure or destruction of personal information. In short anything that is done with personal information from collection to destruction.

5.2.2. When processing, we may combine your Personal Information and use the combined Personal Information for any of the purposes stated in this Policy.

5.2.3. Sometimes you may provide us with specific consent to process your Personal Information in a particular manner and/ or for a particular purpose. Read the specific consents given carefully because they will be binding on you.

5.2.4. If BLDS processes Personal Information for another party like a Service Provider under a contract or a mandate and direction of the Service Provider (as an operator), the Service Providers privacy policy may apply to the processing.

6. When will we process your Personal Information

6.1. We will only process Personal Information for lawful purposes relating to our business if the following applies:

• 6.1.1. Where you are an existing customer on our customer database and you have not opted out of Marketing Services;
• 6.1.2. We identify offers which would be appropriate for you;
• 6.1.3. we process your information as operator on behalf of a third party duly authorized;
• 6.1.4. Where you interact with us on the Sites;
• 6.1.5. Where your personal information is held by another member in the BLT Group and you have agreed to the processing thereof by the BLT Group;
• 6.1.6. if, where required, you have consented thereto;
• 6.1.7. if a person legally authorised by you, the law or a court, has consented thereto;
• 6.1.8. if it is necessary to conclude or perform under a contract;
• 6.1.9. if the law requires or permits it; or
• 6.1.10. if it is required to protect or pursue your, our or a third party's legitimate interest.

7. When will we process your Special Personal Information

7.1. We may process your special Personal Information in the following circumstances:

• 7.1.1. if you have consented to such processing;
• 7.1.2. if the processing is needed to create, use or protect a right or obligation in law;
• 7.1.3. if the processing is for statistical or research purposes;
• 7.1.4. if the special Personal Information was made public by you;
• 7.1.5. if the processing is required by law;
• 7.1.6. if racial information is processed, and the processing is required to identify you; and / or
• 7.1.7. if health information is processed, and the processing is to determine your insurance risk, or to comply with an insurance policy or to enforce an insurance right or obligation.

8. What Categories of Personal Information We Collect

8.1. We collect a variety of types of Personal Information. Examples include:

• 8.1.1. Identifiers and contact information, such as your identification number, name, address, phone number/s, or email address;
• 8.1.2. Purchase or other commercial information, such as the items you purchase, shipping or delivery address, and contact information;
• 8.1.3. Payment information, such as your payment method and payment information (such as debit or credit card number and information), and billing address;
• 8.1.4. Preference information, such as your contact and marketing preferences, and brand and merchandise interests;
• 8.1.5. Profile and account information, which may include contact, purchase, and preference information as well as information about items you have purchased or Offers you have shown an interest in, product review information, account;
• 8.1.6. Transaction information and contract performance information;
• 8.1.7. BLT Group information;
• 8.1.8. Communications and interactions, which may include email messages, chat sessions, text messages, and phone calls that we exchange with you;
• 8.1.9. Demographic information, which may include age or birthdate, gender, postal code, your status as a consumer, and other information about you;
• 8.1.10. Call recordings, including information about your call and what you share when you call us or we call you on the phone;
• 8.1.11. Location or geolocation information of your device that you use, if your device settings allow us to collect location information;
• 8.1.12. Device and browsing information and other Internet activity information, including information about your phone, tablet, computer, or device, and online browsing activity (collectively, "automatically collected information"). Automatically collected information may include IP addresses, unique device identifiers, cookie identifiers, device and browser settings and information, and Internet service provider information. Automatically collected information also may include information about when and how you access and use our Sites or how you interact with us on our Sites, such as the date and time of your visit or use, the websites you visit before coming and after leaving our Sites, how you navigate and what you search for using our Sites, the website pages and items you view using our Website and Communication Channels, and the items you purchase or Offers you show an interest in; and
• 8.1.13. Inferences about any of the information above that may relate to your preferences, or other matters.
• 8.1.14. When we collect information that does not personally identify you, including, information that has been anonymised or aggregated, if we link this information with your personal information, we will treat such linked information as personal information.

8.2. You can choose not to provide personal information to us when requested. However, if this is necessary to provide you with our Marketing Services and Offers, access to our Sites, or to perform administrative functions, we may be unable to do these things.

9. Where we obtain Personal Information about you

9.1. We collect Personal Information about you from various different sources, including the following:

• 9.1.1. From you directly.
• 9.1.2. From and based on your use of our, Marketing Services or Sites and Offers.
• 9.1.3. From and based on how you engage or interact with us such as on social media, emails, letters, telephone calls, surveys, competitions and promotions.
• 9.1.4. From public domain sources (like CIPC).
• 9.1.5. Third parties we interact with for the purposes of conducting our business (like partners, reward partners, list providers, our customer loyalty rewards programmed retail and online partners or our Service Providers). Third parties from whom we may collect Personal Information include members of the BLT Group any connected companies, subsidiary companies, its associates, cessionaries, delegates, assigns, affiliates or successors in title and / or appointed third parties (like its authorised agents, partners, contractors and suppliers), spouses, dependents, partners, employer, joint applicant or account holder and other similar sources (If the law requires us to do so, we will ask for your consent before collecting Personal Information about you from third parties).
• 9.1.6. persons you have authorised to share Personal Information.
• 9.1.7. Parties who you choose to engage with directly as a result of marketing material and /or offers you have received from us as part of marketing services which we conduct on their behalf.
• 9.1.8. attorneys, tracing agents, debt collectors and other persons that assist with the enforcement of agreements.
• 9.1.9. payment processing services providers, merchants, banks and other persons that assist with the processing of your payment instructions, like card scheme providers (like VISA or MasterCard).
• 9.1.10. law enforcement and fraud prevention agencies and other persons tasked with the prevention and prosecution of crime.
• 9.1.11. From regulatory authorities, industry ombudsman, governmental departments, local and international tax authorities.
• 9.1.12. credit bureau and similar verification agencies.
• 9.1.13. trustees, Executors or Curators appointed by a court of law;
• 9.1.14. our service providers, agents and sub-contractors like couriers and other persons we use to offer and provide products and services to consumers;
• 9.1.15. participating partners, whether retail or online, in customer loyalty reward programmes operated by the BLT Group or our Service Providers;
• 9.1.16. when we respond to your inquiries and requests, obtain feedback from you
• 9.1.17. third party Service Providers who you have contracted with, where you have consented thereto;
• 9.1.18. when you contact us for information, including for customer support or complaints. We want to provide you with the best possible service, so calls to BLDS will be recorded and/or monitored for quality checks and staff training. Recordings may also be used to help us combat fraud;
• 9.1.19. when you send information to us by posting to a forum or blog or in an advertisement, is stored on our servers. We do not specifically use that information except to allow it to be read, but you will see in our User Terms that we reserve a right to use it in any way we decide.
• 9.1.20. Where we have appropriate legal justification to do so, from our joint venture partners; and / or
• 9.1.21. Where you have consented thereto, from other marketing services companies with whom we contract and/ or partner.

9.2. We collect the following information when you visit and use our Sites and Services:

• 9.2.1. Location information - depending on the services and products that you use, and your settings or device permissions, we may collect your precise or approximate location information as determined through data such as GPS, IP address and WIFI.
• 9.2.2. Transaction information - We collect transaction details relating to your use of the Sites and services, products purchased, (including the type of products and services you requested, date and time of the service, and number of products).
• 9.2.3. Usage and preference information - We collect information about how you interact with the Sites, preferences expressed, and settings chosen. In some cases, we do this through the use of cookies, pixel tags, and similar technologies that create and maintain unique identifiers.
• 9.2.4. Device information - We may collect information about the devices you use to access and use the Sites.
• 9.2.5. Log information - information about your interaction with and access to the Sites.
• 9.2.6. Information from referring websites/applications.
• 9.2.7. Information about how you use our or a third party's services and products, such as the types of content you view or engage with, the type of product you buy, or the frequency and duration of your activities.
• 9.2.8. We collect Personal Information from other sources including our trusted partnerships with third-parties and where we operate accounts on third-party platforms: For example, when you use the "like" functionality on Facebook or the +1 functionality on Google+.
• 9.2.9. We may track the products you buy when you click on one of our display adverts and go on to purchase products.
• 9.2.10. We may also collect technical information to help us identify your device for fraud prevention and diagnostic purposes and verify your identity.
• 9.2.11. When you send a message, we collect the data you have given to us in that message in order to obtain confirmation that you are entitled to receive the information and to provide to you the information you need. We record your request and our reply in order to increase the efficiency of our business / organisation.

9.3. We may also collect personal information from third parties, including public databases, social media sites, business partners with whom we offer co-branded services or engage in joint marketing activities and third parties that provide list enhancement or similar services.

10. What purpose do we use Personal Information for

10.1. We use Personal Information for the following reasons:

• 10.1.1. sending marketing communications via the appropriate Communication Platform (SMS, WhatsApp, E-mail, AVM, Telephonic Calls) with the latest Offers of Service Providers;
• 10.1.2. to market products, goods and services of Service Providers to you;
• 10.1.3. to respond to your enquiries and complaints;
• 10.1.4. providing information about goods and/or services you may have requested and notifying you about important changes or developments to these goods and/or services;
• 10.1.5. to update your personal information on our customer database to ensure that it is and remains accurate as required by POPIA;
• 10.1.6. to follow up as part of our customer care procedures;
• 10.1.7. updating our records;
• 10.1.8. internal record keeping;
• 10.1.9. administering and recording Offers and engagement with Service Providers;
• 10.1.10. to improve our products and services and give feedback to Service Providers;
• 10.1.11. To personalise your access to our Sites, for example, by telling you about new features that may be of interest to you.
• 10.1.12. For analytical purposes and to research, develop and improve programs, products, services, Offers and content.
• 10.1.13. To authenticate the identity of individuals contacting us by telephone, electronic means or otherwise.
• 10.1.14. To enforce this Policy and other rules about your use of our Site.
• 10.1.15. To the extent that data is aggregated and anonymized for business purpose, such as analyzing usage trends and seeking compatible advertisers and partners.
• 10.1.16. to track whether you open, read or click on the content of emails, WhatsApp or SMS communications from us to see what you are interested in so that we can give you more content that we think you are more likely to enjoy. We use this data to profile your likes and dislikes.
• 10.1.17. Based on profile information, to give you advertising that we think you will like and want to see as you view content from us or from our network of publishers that we advertise with. We may use your current location to serve advertising to you that is to do with promotions or events that are happening nearby that we think you might be interested in.
• 10.1.18. In respect of information, we collect about your computer, which may at times be able to identify you, for any lawful business purpose, including without limitation to help diagnose problems with our servers, to gather broad demographic information and to otherwise administer our Sites.
• 10.1.19. In respect of information which does not identify any individual may be used in a general way by us or third parties, to provide class information, for example relating to demographics or usage of a particular page or service.
• 10.1.20. to comply with legislative, regulatory, risk and compliance requirements (including directives, sanctions and rules), voluntary and involuntary codes of conduct and industry agreements or to fulfill reporting requirements and information requests;
• 10.1.21. crime detection prevention and prosecution;
• 10.1.22. competitions and other promotions;
• 10.1.23. evaluating the effectiveness of our Marketing Services and for research, training and statistical analysis with the aim of improving our Marketing Services;
• 10.1.24. making our Marketing Services or those of our Service Providers easier for you to use and providing you with access to related Marketing Services and Offers;
• 10.1.25. to contact you for market research purposes;
• 10.1.26. to detect, prevent and report theft, fraud, money laundering and other crimes. This may include the processing of Special Personal Information, like alleged criminal behavior or like the supply of false, misleading or dishonest information or avoiding liability by way of deception;
• 10.1.27. to enforce and collect on any agreement when you are in default or breach of the agreement terms and conditions, or to institute legal proceedings against you;
• 10.1.28. to conduct market and behavioural research, including scoring and analysis to determine if you qualify for Offers or to determine your credit or insurance risk for purposes of pre vetting or as consented to;
• 10.1.29. for historical, statistical and research purposes, like market segmentation;
• 10.1.30. to monitor interactions and outcomes on Offers made;
• 10.1.31. to record and/or assist Service Providers and / or the BLT Group to process instructions payment instructions (like a debit order or EFT);
• 10.1.32. to disclose and obtain Personal Information from credit bureau regarding your credit history to conduct affordability assessments, credit assessments and credit scoring to make you Offers;
• 10.1.33. to develop credit models and credit tools for the BLT Group and to enhance Offers and Marketing Services;
• 10.1.34. to manage and maintain your relationship with us, our Service providers and/ or the BLT Group;
• 10.1.35. to enable us to deliver goods, documents or notices to you;
• 10.1.36. for security, identity verification and to check the accuracy of your Personal Information;
• 10.1.37. to communicate with you and carry out your instructions and requests;
• 10.1.38. for customer satisfaction surveys;
• 10.1.39. to enable you to take part in loyalty reward programmes, to determine your qualification for participation, earning of reward points, determining your rewards level, monitoring your buying behaviour with our rewards partners to allocate the correct points or inform you of appropriate products, goods and services you may be interested in or to inform our reward partners about your purchasing behaviour;
• 10.1.40. to enable you to take part in and make use of value-added products and services offered by our Service providers and the BLT Group;
• 10.1.41. To manage any complaints and/ or requests made by you; and / or
• 10.1.42. for any other related purposes.

10.2. We may do these things either for BLDS, any entity in the BLT Group or on behalf of our Service Providers or business partners.

10.3. At the time you provide us with any information in response to a request from us, such information will be used in terms of this Policy or any specific details provided.

10.4. We may contact you by any Communication Platform, including, without limitation, e-mail, telephone, SMS, WhatsApp or mail in relation to the purposes set out in this section and by providing such information you are deemed to have agreed to us contacting you by these methods of communication. We will continue to contact you by way of such Communication Platform until you advise us you no longer wish to be contacted by certain Communication Platforms.

11. Use of Personal Information for lead generation and marketing

11.1. We provide the Marketing Services.

11.2. We may provide you from time to time with information about new Offers and other information.

11.3. We will use Personal Information to market Offers to you from Service Providers and business partners.

11.4. Service Providers and business partners may also market Offers to you directly;

11.5. We and our will do this by using the Sites and Communication Platforms.

11.6. If you are not our customer on our existing customer database, a customer of the BLT Group or in any other instances where the law requires, we will only market to you by electronic communications with your consent. If you have consented, this Policy will apply to the marketing services we provide to you.

11.7. You may opt-out of direct marketing campaigns at any time, at which point we will not send you any direct marketing related to a specific service, Offer or associated campaign. Should you decide to opt out of all or any direct marketing received from us you can go to www.blds.co.za/opt-out follow the prompts on the relevant Communication Channel

11.8. You can also click on the following - https://www.nationaloptout.org/ or register on the do not contact list of the Direct Marketing Association of South Africa which can be found on www.dmasa.org.

11.9. In all cases you can request us to stop sending marketing communications to you at any time.

11.10. If we, the BLT Group or a Service Provider and/ or a business partner is providing you with products and/ or services, you will also be subject to the specific terms and conditions relating to the product or services you are being provided with and these terms will include additional information as to how we or any of our customers or business partners may contact you.

11.11. The reason you have given us personal information is to receive Marketing Services from us, we will continue to provide this information to you unless you ask us not to do so.

12. When will we use Personal Information to make automated decisions

12.1. An automated decision is made when Personal Information is analysed to make a decision without human intervention in that decision-making process.

12.2. We may use your Personal Information to make an automated decision as allowed by the law.

12.3. You have a right to query any such decisions made and we will provide reasons for the decisions as far as reasonably possible.

13. Sharing Personal Information

13.1. In general, we will only share your Personal Information if any one or more of the following apply:

• 13.1.1. If the law allows it;
• 13.1.2. in terms of this Policy which you have agreed to;
• 13.1.3. to provide the Marketing Services;
• 13.1.4. if, where necessary, you have otherwise, consented to this;
• 13.1.5. if it is necessary to conclude or perform under a contract, we have with you;
• 13.1.6. if the law requires it; and / or
• 13.1.7. if it's necessary to protect or pursue your, our or a third party's legitimate interest.

13.2. In line with the aforesaid, in terms of this Policy, we may share your Personal Information with the following persons. These persons have an obligation to keep your Personal Information secure and confidential:

• 13.2.1. other members of the BLT Group;
• 13.2.2. Service Providers, including, without limitation, insurance companies, credit provision companies, retailers, cell phone companies, car sales companies, gambling and betting companies who have entered into agreements with us;
• 13.2.3. our subsidiaries, provided that BLDS is the party responsible for the management of jointly used personal information;
• 13.2.4. business partners with whom we offer co-branded services or engage in joint marketing activities;
• 13.2.5. third parties/clients who contract with us for lead generation and marketing services;
• 13.2.6. our employees as required by their employment conditions;
• 13.2.7. attorneys, tracing agents, debt collectors and other persons that assist with the enforcement of agreements;
• 13.2.8. payment processing services providers, merchants, banks and other persons that assist with the processing of your payment instructions, like card scheme providers (like VISA or MasterCard);
• 13.2.9. Service Providers and third parties who advise us that you have consented to such sharing;
• 13.2.10. law enforcement and fraud prevention agencies and other persons tasked with the prevention and prosecution of crime;
• 13.2.11. regulatory authorities, industry ombuds, governmental departments, local and international tax authorities and other persons the law requires us to share your Personal Information with;
• 13.2.12. credit bureau and similar verification agencies;
• 13.2.13. our, agents and sub-contractors like couriers and other persons we use to offer and provide products and services to you
• 13.2.14. persons to whom we have ceded our rights or delegated our obligations to under agreements, like where a business is sold;
• 13.2.15. the general public where you submit content to our social media sites like our Facebook page;
• 13.2.16. trustees, Executors or Curators appointed by a court of law;
• 13.2.17. participating partners in our customer loyalty reward programmes, those of our Service Providers or the BLT Group, where you purchase goods, products and service or spend loyalty rewards;
• 13.2.18. our joint venture and other partners with whom we have concluded business agreements;
• 13.2.19. third party service providers to provide operational services or facilitate transactions on our behalf, including but not limited to processing of orders, assisting with sales-related activities or post-sales support, client support, email delivery, data analytics and auditing;
• 13.2.20. in connection with any joint venture, merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or to another company;
• 13.2.21. credit reference, fraud prevention;
• 13.2.22. business scoring agencies, or other credit scoring agencies, with consent where required;
• 13.2.23. debt collection agencies or other debt recovery organisations, where you have consented; in response to a request for information by a competent authority in accordance with, or required by any applicable law, regulation or legal process;
• 13.2.24. where necessary to comply with judicial proceedings, court orders or government orders.
• 13.2.25. to protect the rights, property or safety of BLDS, its business partners, you, or others, or as otherwise required by applicable law; and / or
• 13.2.26. to any person other than as described herein if we notify you and you consent to the sharing;

13.3. Any third parties with whom we share personal information are contractually required to implement appropriate data protection and security measures to protect personal information and are not permitted to use personal information for any purpose other than the purpose for which they are provided with or given access to personal information.

14. Obtaining and sharing your Personal Information from/with credit bureau & other verification agencies

14.1. We may obtain your Personal Information from credit bureau for any one or more of the following reasons:

• 14.1.1. if you requested us to do so or agreed that we may do so;
• 14.1.2. to verify (check and confirm) your identity;
• 14.1.3. to obtain or verify your employment details;
• 14.1.4. to obtain and verify your marital status;
• 14.1.5. to obtain, verify or update your contact or address details;
• 14.1.6. if lawfully contracted to do so on behalf of a client to obtain a credit report about you (which includes your credit history and credit score);
• 14.1.7. to determine your credit risk;
• 14.1.8. to determine your insurance risk;
• 14.1.9. to determine fraudulent activities;
• 14.1.10. for debt recovery;
• 14.1.11. to trace your whereabouts;
• 14.1.12. to update your contact details
• 14.1.13. to conduct research, statistical analysis or system testing;
• 14.1.14. to determine the source(s) of your income;
• 14.1.15. to build credit scorecards which are used to evaluate credit applications; and / or
• 14.1.16. to determine which products and services to promote or to offer to you.

15. Transfer of Personal Information to other countries

15.1. We will only transfer your Personal Information to third parties in another country in any one or more of the following circumstances:

• 15.1.1. where your Personal Information will be adequately protected under the other country's laws or an agreement with the third-party recipient
• 15.1.2. where the transfer is necessary to enter into or perform under a contract with you, or a contract with a third party that is in your interest;
• 15.1.3. where you have consented to the transfer; and / or
• 15.1.4. where it is not reasonably practical to obtain your consent, the transfer is in your interest

15.2. This transfer will happen within the requirements and safeguards of the law.

15.3. Where possible, the party processing your Personal Information in the other country will agree to apply the same level of protection as available by law in South Africa or if the other country's laws provide better protection the other country's laws would be agreed to and applied.

16. What are your rights

16.1. You have the right to:

• 16.1.1. information about your personal details.
• 16.1.2. access free of charge the information about yourself stored by us and its use.
• 16.1.3. correct, destroy, or delete this data.
• 16.1.4. opt-out of direct marketing.
• 16.1.5. remove your data from a direct marketing list.
• 16.1.6. object on reasonable grounds to the processing of your personal information.
• 16.1.7. withdraw your consent to the processing of your personal information.

16.2. You also have the right to lodge a complaint with a Regulatory Authority. You have the right to lodge a complaint directly with any local Regulatory Authority about how we process your Personal Information.

17. Security of your personal information

17.1. BLDS is committed to protecting your personal information from accidental or unlawful destruction, damage, loss, alteration, unauthorised access or disclosure by using reasonable, appropriate, physical, administrative and technical safeguards and contractually requiring that third parties to whom we disclose your personal information do the same.

17.2. In all circumstances the information is held by us on our secure systems. We take all reasonable and appropriate technical and organisational steps to ensure that your personal information is kept secure and is protected against unauthorised or unlawful processing, misuse, unauthorised disclosure, loss, interference, destruction or damage, alteration, disclosure or access.

17.3. Our security measures (including physical security, computer and network security, secure communications, security in contracting out activities and functions technological and procedural safeguards) will be appropriate and reasonable.

17.4. This includes the following:

• 17.4.1. keeping our systems secure (like monitoring access and usage);
• 17.4.2. storing our records securely;
• 17.4.3. controlling the access to our buildings, systems and/or records; and
• 17.4.4. safely retaining or destroying or deleting records.

17.5. When we contract with third parties, we impose appropriate security, privacy and confidentiality obligations on them to ensure that Personal Information that we remain responsible for, is kept secure.

17.6. Our security systems are in line with industry standards and We monitor developments to ensure that our security systems evolve, as required. We also test our systems regularly.

17.7. Personal information is destroyed or anonymised when you opt out of our Marketing Service, no longer needed or when we are no longer required by law to retain it (whichever is the later).

17.8. We will promptly notify you if we become aware of any unauthorised use, disclosure or processing of your personal information.

17.9. We may store your personal information with the web-hosting service provider appointed by us from time to time. The storage may be in South Africa or in another country.

17.10. Where storage is in another country, your personal information will be stored in a jurisdiction that has equivalent, or better, data protection legislation than South Africa or with a service provider which is subject to an agreement requiring it to observe data protection requirements equivalent to or better than those applicable in South Africa.

17.11. You can also protect your Personal Information by always exercising caution.

17.12. Notwithstanding the above, no data transmission over the Internet or data storage system can be guaranteed to be completely secure. Please do not send us sensitive information through email. If you have reason to believe that your interaction with us is not secure (for example, if you feel that the security of any account you might have with us has been compromised), you must immediately notify us of the problem by contacting us at support@blds.co.za.

18. Disclaimer and Indemnity

18.1. Whilst we will do all things reasonably necessary to protect your rights of privacy, we cannot guarantee or accept any liability whatsoever for unauthorised or unlawful disclosures of your personal information, whilst in our possession, made by third parties who are not subject to our control, unless such disclosure is as a result of our gross negligence or non-compliance with applicable laws.

18.2. If you disclose your personal information to a third party, such as an entity which operates a website or mobile application linked to the Sites or anyone other than BLDS, BLDS shall not be liable for any loss or damage, howsoever arising, suffered by you as a result of the disclosure of such information to the third party. This is because we do not regulate or control how that third party uses your personal information. You should always ensure that you read the privacy policy of any third party.

19. How long do we keep Personal Information

19.1. We will keep your Personal Information only for as long as reasonably necessary, for as long as:

• 19.1.1. the law requires us to keep it;
• 19.1.2. you have not opted-out of the Marketing Services provided;
• 19.1.3. a contract between you and us requires us to keep it;
• 19.1.4. you have consented for us keeping it;
• 19.1.5. we are required to keep it to achieve the purposes listed in this Policy;
• 19.1.6. we require it for statistical or research purposes;
• 19.1.7. a code of conduct requires us to keep it; and / or
• 19.1.8. we require it for our lawful business purposes.

19.2. You agree that we can further process your personal information in the future for the purposes mentioned in our Terms and this Policy, without needing to notify you. You can ask us to delete any information we have of you at any time subject to our legal obligations.

20. Cookies and Similar Technologies

20.1. When you access our Sites, we use cookies (small text files containing a unique ID number which are placed on your PC or device) and similar technologies including scripts, embedded web links and web beacons. We use cookies to assist us with activities such as:

• 20.1.1. Enabling you to sign in to our Sites;
• 20.1.2. Authenticating you;
• 20.1.3. Keeping track of information, you have provided to us;
• 20.1.4. Improving your browsing experience;
• 20.1.5. Customising our interactions with you;
• 20.1.6. Storing and managing your preferences and settings;
• 20.1.7. Compiling statistical data;
• 20.1.8. Analysing the performance and usability of our Sites;
• 20.1.9. Measuring traffic patterns for our Sites; and
• 20.1.10. Determining which areas of our Sites have been visited.

20.2. These technologies collect information that your browser sends to our Sites including your browser type, information about your IP address (a unique identifier assigned to your computer or device which allows your PC or device to communicate over the Internet), together with the date, time and duration of your visit, the pages you view and the links you click.

20.3. The information that we collect using cookies is non-personal information. You are always free to decline our cookies if your browser permits, but some parts of our websites may not work properly for you if you do so. We do not allow third parties to place cookies on our websites.

20.4. Our Sites may also contain web beacons or similar technologies from third party analytics providers, through which they collect information about your activities across our Sites to help us compile aggregated statistics.

21. Links to third party websites and applications

Our Sites may contain links to third party websites and applications. We are not responsible for and make no representations or warranties in relation to the privacy practices or content of any third-party websites and applications. Your use of such sites and applications is subject to the applicable third-party privacy policy and is at your own risk.

22. Personal Information of juristic persons and person related to juristic persons

22.1. If you are a juristic person (like a company or close corporation), we may collect and use Personal Information relating to the juristic person's directors, officers, employees, beneficial owners, partners, shareholders, members, authorised signatories, representatives, agents, payers, payees, customers, guarantors, spouses of guarantors, sureties, spouses of sureties, other security providers and other persons related to the juristic person. These are related persons.

22.2. If you provide the Personal Information of a related person to us, you warrant that the related person is aware that you are sharing their Personal Information with us and that the related person has consented thereto.

22.3. We will process the Personal Information of related persons as stated in this Policy, thus references to "you" or "your" in this Policy will include related persons with the necessary amendments.

24. Information Regulator

If you are not satisfied with our response to your complaint or believe our processing of your Personal Information does not comply with the POPIA, you have the right to lodge a complaint with the Information Regulator. The Information Regulator can be contacted as follows: