PRIVACY POLICY
This Privacy Policy describes the Protax Group of Companies policies and procedures on the collection, use and disclosure of your information when you use the Service and tells you about your privacy rights and how the law protects you.
The main purposes of POPIA are: -
1. To promote the protection of personal information processed by public and private bodies.
2. To introduce certain conditions so as to establish minimum requirements for the processing of personal information.
3. Regulate the manner in which personal information may be processed.
4. Establishing conditions, that prescribe the requirements for the lawful processing of personal information
5. To provide for the issuing of codes of conduct.
6. To provide for the rights of persons regarding unsolicited electronic communications and automated decision making.
7. To regulate the flow of personal information across the borders of the Republic.
INTRODUCTION
Protax Group of Companies (Registration number: 1998/024152/07) (hereinafter referred to as “the company”) is an authorised financial services provider (FSP) and is a “Private Body” as determined by POPIA. In the normal course of our business, we will be collecting, retaining, disseminating, using, and processing personal information of our clients to enable us to carry out our contractual duties, whether expressly and/or tacitly agreed.
The company, wholly subscribes, respect and support the rights and privileges conferred on all inhabitants of the Republic in terms of our Bill of Rights and we endeavour to comply to the best of our ability to all the laws of South Africa.
We further wish to confirm that the company and its personnel are committed to protect our clients’ right to privacy and assures our clients that their Personal Information will be used appropriately, transparently, securely and in accordance with applicable law A copy of our POPIA Manual is available on request as prescribed in sections 14 and 51 of the Promotion of Access to Information Act, 2000 (Act No. 2 of 2000).
POLICY
Our clients can rest assured that we will respect and protect their rights to privacy and the confidentiality of their personal information collected, processed, and stored by us.
We will only require and process your personal information for the purposes of rendering our services to you in a competent and professional manner, meaning it will only be processed for the purposes collected and we will ensure that the information obtained is adequate, relevant and not excessive.
It is our policy that our clients’ personal information will only be obtained, processed, and stored in terms of the conditions for lawful processing of personal information as set out in Chapter 3 Part A of POPIA. These conditions are: -
• Condition 1 – Accountability
• Condition 2 – Processing limitation
• Condition 3 - Purpose specification
• Condition 4 – Further processing limitation • Condition 5 – Information quality
• Condition 6 - Openness
• Condition 7 – Security safeguards
• Condition 8 – Data Subject participation
Due to the nature of our business and in the process of the fulfilment of our contractual obligations to our clients we will have to share some or all of the personal information obtained from a client with product providers and/or operators in order for us to be able to provide you with suitable advice and/or products and to keep records as required of us in legislation applicable to our industry.
It is therefore our policy that we will not share any personal information with any product provider and/or operator unless we are satisfied that they have sufficient safeguards in place to convince us that they will respect and protect our clients’ right to privacy with the same commitment as us. In terms of the personal information in our possession and/or control our clients have the following rights in order to protect and safeguard their personal information: -
• The Right to Access of their personal information
• The Right to Object to the processing of their personal information
• The Right to have their personal information Corrected or Deleted
• The Right to Object to have their personal information processed for the purpose of direct Marketing
• The Right to Complain to the Information Regulator
• The Right to be Informed :
    1. that their personal information is being collected
    2. that their personal information has been accessed by or acquired by unauthorised person/s.
It is further our policy that we will assist our clients as far as possible to exercise any of their rights set out above.
It is our policy that we only keep personal information of our clients for as long as is required from us in terms of the applicable legislation in the financial services industry and/or as required in terms of other relevant South African legislation.
The financial services legislation requires us to keep records of clients’ records for a period of 5 years after termination of the financial product concerned or after termination of the business relationship between the client and the institution whichever is the longest.
Should a client have a complaint about any alleged unlawful access and/or processing of their personal information, they must immediately contact our Information Manager at our business address. You will then be provided with the necessary forms and procedures for lodging a complaint. Should you so desire the company will assist you and take whatever steps in their power to help you minimise your exposure and/or any damages or potential damages you may suffer as a result thereof.
Actual or Planned Trans border Flows of Personal Information
The Company has no planned Trans border Flows of Personal Information.
General Description of Information Security Measures
The Institution employs up to date technology to ensure the confidentiality, integrity, and availability of the Personal Information under its care. Measures include:
• Firewalls;
• Virus protection software and update protocols;
• Logical and physical access control;
• Secure setup of hardware and software making up the IT infrastructure;
• Outsourced Service Providers who process Personal Information on behalf of the company are contracted to implement security controls.
The company may supply the Personal Information to service providers who render the
FOLLOWING SERVICES:
- Capturing and organising of data;
- Storing of data;
- Sending of e-mails and other correspondence to clients
- Conducting due diligence checks;
- Administration pertaining to the financial products on which the institution provides financial services;
- Product and service providers that the institution is contracted to enable them to quote and provide products and services that clients require
Security of your Personal Data
The security of your Personal Data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, We cannot guarantee its absolute security.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the “Last updated” date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Tracking of Technologies and Cookies
We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyse Our Service. The technologies we use may include:
Cookies or Browser Cookies. A cookie is a small file placed on your Device. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some parts of our Service. Unless you have adjusted your browser setting so that it will refuse Cookies, our Service may use Cookies.
Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on your personal computer or mobile device when you go offline, while Session Cookies are deleted as soon as you close your web browser. Learn more about cookies: Cookies: What Do They Do? We use both Session and Persistent Cookies for the purposes set out below:
Necessary / Essential Cookies Type: Session Cookies Administered by: Us Purpose: These Cookies are essential to provide you with services available through the Website and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that you have asked for cannot be provided, and we only use these Cookies to provide you with those services.
Cookies Policy / Notice Acceptance Cookies Type: Persistent Cookies Administered by: Us Purpose: These Cookies identify if users have accepted the use of cookies on the Website.
Functionality Cookies Type: Persistent Cookies Administered by: Us Purpose: These Cookies allow us to remember choices you make when you use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you use the Website.