INFORMATION PROCESSING POLICY

 

7
INFORMATION PROCESSING POLICY

We are committed to protecting your privacy. We recognise our obligation to respect and protect the confidentiality of your personal information. For this reason we have developed this policy to govern the processing of your information. Please read and consider this document carefully since it sets out our intended use of such information. We may require your consent to the terms contained in this policy before we permit you to use our site or participate in our services. When registering for our services you will be required to agree that we may collect, hold, process, use and disclose your personal information on the basis described in this policy.

Who we are

When we refer to “we”, “us” or “our” herein we are referring to Infinity Rewards (Pty) Ltd , a company incorporated under the laws of the Republic of South Africa. Our principal place of business is at Wrigley field 57 Sloane Street, Bryanston, Sandton but we recommend you contact us via telephone at
+27 (0) 21 879 3999 or electronic mail at privacy@infinityrewards.co.za

How we collect information

We may collect information about you as follows:

  1. From you, including when you apply for our services, submit forms, requests or transactions, use our web sites or otherwise make use of our services;
  2. From public registers, credit bureaus, money laundering, fraud prevention and law enforcement agencies;
  3. From our business partners and the persons employed by us to provide services for us, which may include debt collection services, communications services and data hosting, processing and management services;
  4. From persons employed by you to provide services to you, including your bank, internet service provider and mobile cellular service provider; and
  5. From such other persons as you may consent to or which may be legally entitled to provide us with information about you.

We may also make enquiries with anyone for the purposes of verifying the accuracy of information already given to us.

Information we may hold

We may record and hold the following types of information about you:

  1. All information of the type as contained in your service application forms or contracts as well as any other details about you that you may provide to us subsequently, including your name, contact details, age and identity number;
  2. Information we used to process your application for services and to assess your status from time to time, including as received pursuant to our enquiries with public registers, credit bureaus, money laundering, fraud prevention and law enforcement agencies;
  3. Details of your preferences regarding our services, and other demographic and lifestyle information;
  4. Details of the accounts you and the members of your family hold and services you and the members of your family use and have previously held and used with or through us; and
  5. Details of your transactions pertaining to such accounts and services; and
  6. Details of when you contact us and when we contact you, including the IP addresses, electronic mail addresses and telephone numbers you contact us from and the content of the communications between us, which we may record.

We may hold your information collected hereunder for as long as you are registered to use our services and we may retain such information thereafter for as long as we are permitted by law to do so.

Why we need your information

We collect and will process your information for us to be able to contract with you to provide our services to you, as well as to pursue our legitimate interests as well as those of our partners and suppliers. This includes processing for the following purposes:

  1. To process your applications for our services, including to verify whether you qualify for our services, which may include verifying your identity, status, contact details, financial track record, and to ensure that the information we receive and hold about you is accurate, complete and up to date;
  2. To take such actions as we are obligated to do under the contracts we have concluded with you, and to enforce the terms of such contracts, which may include processing and recording your requests, managing your accounts, communicating with you regarding your use of our services and collecting payments you may owe us;
  3. To learn more about how you use our services and to understand your preferences regarding our services;
  4. To improve our service offering to you;
  5. To prevent, investigate and prosecute fraud, money laundering, terrorism, abuse of our services and other unlawful activities;
  6. To conduct market research and business analysis; and
  7. To comply with legal and regulatory requirements, for audit purposes and legal proceedings.

Certain information about you which we hold and which we do not need for the above purposes, such as the information for which you have provided to us consent to use, will only be used for the purpose specifically consented to. This includes:

  1. to inform and provide you with the opportunity to make use of services and benefits that we offer and that we believe may be of interest to you; and
  2. For such other purposes as you may consent to from time to time.

Please note that we will not contact you telephonically for unsolicited marketing purposes or send unsolicited marketing communications to you by mail, facsimile, SMS or electronic mail if you have objected to receiving such communications by way of a public register recognised for such purposes by law or by notifying us of your objection in the prescribed manner. We will provide you with reasonable opportunities to object to receiving marketing communications in the manner prescribed by law, including upon your application to subscribe to our services and on each occasion when we send you such communications.

Sharing your information

Keeping your personal information secure is one of our most important responsibilities. We cannot disclose your information unless legally permitted thereto. Save as set out below, we will not transfer your personal information to a third party without your consent unless legally obliged thereto. You agree that we may transfer your information to the following people and organisations in pursuit of the processing purposes set out in this policy:

  1. To the entities in our company group, including to the directors, employees, contractors, agents, auditors, legal and other professional advisors of such entities;
  2. To any other person that supplies, supports or underwrites a service we provide to you insofar as it pertains to your subscription to and use of such service;
  3. To any person that supports or authorises your participation in a service or programme we provide insofar as it pertains to your registration for and participation in such service or programme, including your bank or legal guardian where appropriate;
  4. To credit bureaus, fraud prevention agencies and governmental, judicial, regulatory and law enforcement bodies and agencies, including the South African Police Service;
  5. To persons employed by us to provide services on our behalf that adhere to principles similar to ours regarding the treatment of your information, including data hosting, processing and management services;
  6. To any person to whom we cede, delegate, transfer or assign any of our rights or obligations pertaining to the services provided by us or contracts concluded by us;
  7. To any person that acts as your executor of your estate, curator or in a similar capacity;
  8. To such other persons as may be permitted by applicable law or that you may consent to.

Please note that our sharing of your information may also involve the transfer thereof to third parties outside South Africa. In the event of such transfer, we will require that such third party also subscribes to protecting your information on principles similar to the principles of this policy.

Security

We will strive at all times to ensure that your records will always be protected against unauthorised or accidental access, processing or loss. We maintain this commitment to data security by implementing appropriate reasonable technical and organisational measures to safeguard and secure your information, including by using appropriate cryptographic techniques and access control mechanisms. If we use a third party to host, manage or process your data on our behalf we will require that such third party also commit to implementing appropriate reasonable technical and organisational measures to safeguard and secure your information. If we are not prevented by a law enforcement or regulatory agency, we will notify you as soon as practicably possible in writing and at your registered postal or email address if we believe that unauthorised access to your information may have occurred, providing you with such information as you may reasonably require to implement protective measures.

Web Sites

When you visit our site we may collect certain information about your usage preferences and history. Such information will be stored in a cookie on your computer's hard drive by your web browser. Cookies are intended to assist and improve your use of our web sites. Most browsers accept cookies automatically, but usually you can alter the settings of your browser to prevent automatic acceptance. If you choose not to receive cookies, you may not be able to use all of the features of our site. Every time you connect to our web sites we store web server logs which show your IP address (the unique number which your machine uses when it is connected to the Internet); what you looked at; whether the page request was successful or not, and which browser you used to view the pages. The use of this data is strictly for statistical and personalisation purposes only. This helps us understand which areas of the site are of particular interest and also which pages are not being requested. It also tells us how many hits and page requests we get.

Your rights regarding your information

Provided that you give us suitable and adequate proof of your identity, you have the right:

  1. To know which records we hold about you;
  2. If our right to process your personal information requires your consent, to withdraw such consent at any time, provided that this shall not affect the lawfulness of processing which occurred prior to such withdrawal;
  3. To object to the further collection, use, sharing or processing of your personal information by us at any time where such processing activities are not required by us to comply with our obligations under any agreement we have with you, to exercise our rights, or for such other purposes as may be required or permitted by applicable law; and
  4. to require us to correct, erase or cease processing information or records we hold about you and for which we require your consent to process, or that we are no longer permitted to retain, or which are inaccurate, irrelevant, excessive, out of date, incomplete, misleading or has been unlawfully obtained;

Any of the above can be done by contacting us directly by any means provided by us, including by submitting a written request to us via email at privacy@infinityrewards.co.za We will notify you of the steps taken as a result of your request. We will not be obliged to provide you with information or agree to your request to the extent that we are prohibited thereto by applicable law, if compliance would unreasonably prejudice our legitimate interests or that of a third party, or if we have a legal basis upon which to deny your request. Please note that we may require a reasonable period to comply with your request.

Objections

Please email us at privacy@infinityrewards.co.za if you want to object to our collection, processing, recording, protection, use or sharing of your information. Please note that we may require a reasonable period to comply with your objection and can only do so if permitted thereto by law and such compliance does not unreasonably prejudice our legitimate interests or that of a third party.