Website Privacy Policy

1Introduction

Risk ResQ (Pty) Ltd (“Risk ResQ”, “we”, “us” or “our”) respects your right to privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how Risk ResQ collects, uses, stores, shares and protects personal information when you visit our website, submit an enquiry through our website, communicate with us, or otherwise interact with us in connection with our services.

Risk ResQ processes personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws and regulatory requirements.

2Scope of this Privacy Policy

This Privacy Policy applies primarily to personal information collected through or in connection with the Risk ResQ website, including information submitted through our Contact Us / Enquiry Form.

Where an enquiry develops into a client relationship or an application for a financial product or service, Risk ResQ may be required to collect additional information in accordance with applicable financial-services legislation, regulatory requirements, contractual requirements and our internal policies.

3Personal information we may collect

The type of personal information we collect will depend on how you interact with Risk ResQ.

Information you provide directly to us may include:

• Name and surname;
• Telephone or mobile number;
• Email address;
• Information contained in your enquiry or correspondence;
• Information voluntarily supplied when communicating with Risk ResQ; and
• Any other information reasonably necessary for us to respond to your enquiry or provide the requested service.

If you subsequently become a client or apply for a product or service through Risk ResQ, we may need to collect additional information, which may include identification information, contact and residential details, employment information, financial information, banking information and other information required for regulatory, compliance or service-delivery purposes.

We will endeavour to collect only information that is adequate, relevant and reasonably necessary for the purpose for which it is processed.

4Information collected through our website

When you visit our website, certain technical information may be collected automatically by our website, hosting provider or analytics services.

Depending on the technologies implemented on the website, this may include:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Pages viewed;
• Date and time of access;
• Referring website; and
• General website interaction and usage information.

This information may be used to maintain website security, diagnose technical problems, understand website usage and improve the functionality and performance of our website.

5Contact Us / Enquiry Form

When you submit an enquiry using the Contact Us / Enquiry Form on our website, Risk ResQ will process the information you provide for purposes including:

• Responding to your enquiry;
• Contacting you regarding the services in which you have expressed an interest;
• Providing requested information;
• Directing your enquiry to the appropriate representative or department;
• Maintaining appropriate records of communications; and
• Complying with applicable legal and regulatory obligations.

Submitting an enquiry does not automatically constitute consent to receive unrelated direct marketing communications.

6How we use personal information

Risk ResQ may process personal information for purposes including:

• Responding to enquiries and requests;
• Providing information regarding our products and services;
• Assessing or facilitating requests for financial products or services where applicable;
• Establishing and managing client relationships;
• Providing customer support;
• Verifying information and identity where necessary;
• Maintaining appropriate business and client records;
• Preventing fraud, unlawful activity and misuse of our services;
• Administering and securing our website and information systems;
• Improving our website, products and services;
• Complying with applicable legislation and regulatory obligations;
• Communicating important information relating to our services; and
• Conducting direct marketing where permitted by law.

7Lawful processing of personal information

Risk ResQ will process personal information only where there is an appropriate lawful justification for doing so.

Depending on the circumstances, this may include processing:

• With the data subject’s consent;
• Where processing is necessary for the conclusion or performance of a contract;
• To comply with an obligation imposed by law;
• To protect a legitimate interest of the data subject;
• Where processing is necessary for the proper performance of a public-law duty by a public body; or
• Where processing is necessary for pursuing the legitimate interests of Risk ResQ or a third party to whom the information is supplied.

Where processing is based on consent, the data subject may withdraw that consent, subject to applicable legal and contractual limitations.

8Direct marketing

Risk ResQ may from time to time communicate information about its products or services.

Where electronic direct marketing is subject to consent under POPIA, Risk ResQ will obtain the required consent before sending such communications unless another circumstance permitted by law applies.

You may opt out of permitted marketing communications at any time using the unsubscribe or opt-out mechanism provided or by contacting Risk ResQ.

9Cookies and similar technologies

Our website may use cookies and similar technologies to enable website functionality, remember preferences, improve performance, understand how visitors use the website and maintain security.

Some cookies may be necessary for the website to function correctly, while others may relate to analytics or other optional functionality.

Where required, visitors will be provided with appropriate information or choices regarding non-essential cookies.

You may also manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality or performance of the website.

10Sharing of personal information

Risk ResQ does not sell personal information.

Where reasonably necessary and legally permitted, personal information may be shared with:

• Authorised employees and representatives of Risk ResQ;
• Financial product or service providers where necessary to provide a requested service;
• Professional advisers, including legal, accounting, compliance and auditing professionals;
• Information technology, website hosting, communications and other service providers;
• Regulatory authorities and statutory bodies;
• Law-enforcement agencies or courts where disclosure is required or permitted by law; and
• Other parties where you have authorised the disclosure or where another lawful basis exists.

Where third parties process personal information on our behalf as operators, Risk ResQ will take appropriate measures to require them to maintain the confidentiality and security of that information.

11Security of personal information

Risk ResQ takes reasonable and appropriate technical and organisational measures to safeguard personal information against loss, damage, unauthorised destruction, unlawful access, interference, modification or disclosure.

These measures may include access controls, password protection, secure systems, appropriate physical safeguards, staff confidentiality obligations and other security measures appropriate to the nature of the information concerned.

No electronic system or method of transmission can, however, be guaranteed to be completely secure.

Where Risk ResQ becomes aware of a security compromise involving personal information, we will take the steps required by POPIA, including applicable notification obligations.

12Retention of personal information

Risk ResQ will retain personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable legislation, regulatory requirements, contractual obligations or another lawful basis.

As a financial-services business, Risk ResQ may be required to retain certain client, transactional, compliance and communication records for prescribed periods under applicable financial-sector legislation.

When personal information is no longer required and there is no lawful basis for retaining it, it will be deleted, destroyed or de-identified in an appropriate manner.

13Cross-border processing

Some of Risk ResQ’s technology, hosting, cloud, communication or other service providers may process or store information outside South Africa.

Where personal information is transferred to a third party in another country, Risk ResQ will take appropriate steps to ensure that the transfer complies with the requirements of POPIA, including requirements applicable to transborder information flows.

14Third-party websites

Our website may contain links to websites, platforms or services operated by third parties.

Risk ResQ does not control the privacy practices of those third parties and is not responsible for their privacy policies, security practices or content.

We encourage users to review the privacy policies of third-party websites before providing personal information to them.

15Children’s personal information

The Risk ResQ website and services are not directed primarily at children.

We do not knowingly use the website to solicit personal information directly from children without appropriate authorisation where such authorisation is required by law.

Where children’s personal information is required for a legitimate financial-services purpose, it will be processed only in accordance with POPIA and other applicable legislation.

16Your rights under POPIA

Subject to POPIA and other applicable legislation, a data subject may have the right to:

• Request confirmation of whether Risk ResQ holds personal information about them;
• Request access to their personal information;
• Request correction of inaccurate, incomplete, misleading or outdated personal information;
• Request deletion or destruction of information where Risk ResQ is no longer authorised to retain it;
• Object to certain processing of personal information;
• Withdraw consent where processing is based on consent;
• Object to direct marketing;
• Lodge a complaint with the Information Regulator; and
• Exercise any other rights provided by POPIA.

Risk ResQ may require reasonable proof of identity before providing access to personal information or acting on a request.

17Complaints

If you believe that Risk ResQ has processed your personal information contrary to this Privacy Policy or POPIA, you may contact Risk ResQ or our Information Officer so that the matter can be investigated.

You also have the right to lodge a complaint with the Information Regulator (South Africa).

18Information Officer

Risk ResQ’s Information Officer is responsible for overseeing matters relating to the protection of personal information and compliance with POPIA.

19Contact details

Risk ResQ (Pty) Ltd

20Changes to this Privacy Policy

Risk ResQ may amend this Privacy Policy from time to time to reflect changes in our business practices, website functionality, regulatory requirements or applicable legislation.

Any revised version will be published on our website with an updated effective date.

Where a change materially affects the manner in which we process personal information or the rights of data subjects, Risk ResQ will take reasonable steps to communicate the change where appropriate.