Privacy Policy

This Privacy Policy applies to Buphe Group of Companies:

• Buphe Management (Pty) Ltd T/A Buphe
• Buphe Administrator Company (Pty)Ltd T/A Buadco
• Buphe Investment Corporation (Pty)Ltd T/A Binc
• Bumastec (Pty) Ltd
• B Mobi “Buphe Mobile”

Buphe acknowledges the rights of privacy and dignity of all persons, this includes the right to protection of personal information.

In compiling this policy, the statutory framework contained in the laws of South Africa, particularly the Bill of Rights, the Protection of Personal Information Act (POPIA) 4of 2013 and various other pieces of legislation applicable to Healthcare and Financial services, were given due consideration.

POPIA aims to give effect to the constitutional right to privacy and promote the fair and transparent use of personal information, further strengthens our resolve, and requires us, to protect our clients’ information appropriately.

POPIA defines ‘personal information’ as any information that can be used to identify you as an individual or a legal entity. Examples of personal information are your identity number, account number, telephone number, email address or physical address.

As part of our commitment to protecting your personal information, and in complying with the law, our processing activities involving personal information are aligned with POPIA.

Our Privacy Policy governs the way we, at Buphe, treat and deal or process your personal information.

We respect your privacy and undertake to treat your personal information as confidential.

Our Privacy Policy explains how we use, collect and share your personal information.

We undertake to ensure that all personal information will be protected from unauthorised access, loss or damage and respected as confidential by all staff members, contractors, volunteers or learners, and in the unfortunate event that your information is compromised; we will follow the process outlined in the Protection of Personal Information Act.

It is important that you read our Privacy Notice carefully before giving us any personal information. If you give us your personal information, you consent to our processing your personal information as set out in this notice.

If you do not agree to the terms of this Privacy Policy, you may choose not to use any Buphe website, Mobile Application (B Mobi) and/or products and services and not submit any personal information.

Personal information is data that can be used to identify you.

It is information that you share with us, information that we collect when we take you on as a client and during our ongoing relationship with you, as well as information about your marketing preferences.

Your personal information includes the following:

• Your gender (as required for statistical purposes or by law).
• Your marital status, nationality, or social origin.
• Your age, physical and mental health and well-being, medical conditions, and disability.
• Your religion, conscience, belief, culture, and language.
• Your education.
• Your financial information (like your income and expenses, loan repayments, investments, assets and financial needs).
• An identifying number or symbol (like account, identity, or passport numbers).
• Your email address, physical address, or telephone number (for communicating with you).
• Your location and online identifiers [this can be internet protocol (IP) addresses or geolocations].
• Your employment history (especially if you apply for credit).
• Your biometric information (like your fingerprints and facial and voice recognition).
• Your personal opinions.

There may be circumstances in which we will collect your special personal information.

It may include the following:

• Your race or ethnicity (required for statistical purposes or by law).
• Your health (eg if you apply for life insurance).
• Your criminal behaviour (relating to an offence allegedly committed or proceedings regarding an offence allegedly committed, or the fact that that these proceedings took place).

We will collect and process your special personal information only:

• if we have your consent to do so;
• if it is necessary to establish, exercise or defend a right or obligation in law;
• to comply with a law or for historical, statistical or research purposes; or
• if we are otherwise allowed to do so by law.

Personal information will be collected from you directly or from an employee that capturing the information on the system (B Mobi or website).

We collect information from you when you visit our website/app, register on our site, place an order, subscribe to our newsletter, respond to a survey or fill out a form.

• Name / Username
• Phone Numbers
• Email Addresses
• Job Titles
• Billing Addresses
• Debit/credit card numbers
• Age

Where the law requires that information regarding certain conditions or events be notified to the authorities, Buphe will do so without delay.

We may also collect, use and share aggregated data such as statistical or demographic data for any purpose.

Aggregated data may be derived from your personal information but is not considered personal information in law as this information does not, directly or indirectly, reveal your identity.

To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, are strictly defined as:

• Cookie: small amount of data generated by a website and saved by your web browser. It is used to identify your browser, provide analytics, remember information about you such as your language preference or login information.
• Company: when this policy mentions “Company,” “we,” “us,” or “our,” it refers to Buphe, (24, Horwood Street. Edenvale ), that is responsible for your information under this Privacy Policy.
• Country: where Binc or the owners/founders of Binc are based, in this case is South Africa
• Customer: refers to the company, organization or person that signs up to use the Binc Service to manage the relationships with your consumers or service users.
• Device: any internet connected device such as a phone, tablet, computer or any other device that can be used to visit Binc and use the services.
• IP address: Every device connected to the Internet is assigned a number known as an Internet protocol (IP) address. These numbers are usually assigned in geographic blocks. An IP address can often be used to identify the location from which a device is connecting to the Internet.
• Employee: refers to those individuals who are employed by Binc or are under contract to perform a service on behalf of one of the parties.
• Personal Data: any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
• Service: refers to the service provided by Binc as described in the relative terms (if available) and on this platform.
• Partner: refers to advertisers, contest sponsors, promotional and marketing partners, and others who provide our content or whose products or services we think may interest you.
• You: a person or entity that is registered with Binc to use the Services.

Binc will collect End User Data necessary to provide the Binc services to our customers. End users may voluntarily provide us with information they have made available on social media websites. If you provide us with any such information, we may collect publicly available information from the social media websites you have indicated. You can control how much of your information social media websites make public by visiting these websites and changing your privacy settings.

The aim of our Privacy Policy is to guide you and our stakeholders on how we collect, use and protect personal information.

Our Privacy Policy sets out the following:

• Why we collect your personal information and how we may process it.
• How we share your information with third parties.
• How we protect your information.
• How long we keep your information.
• Your privacy rights.

We receive some information from the third parties when you contact us. For example, when you submit your email address to us to show interest in becoming a Binc customer, we receive information from a third party that provides automated fraud detection services to Binc . We also occasionally collect information that is made publicly available on social media websites. You can control how much of your information social media websites make public by visiting these websites and changing your privacy settings.

To offer financial products and services to you, we need to collect, use, share and store your personal and financial information to do the following:

• Verify your identity.
• Assess the risk of fraud and money laundering.
• Contractually engage with you in terms of loans and credit.
• Understand your financial needs to offer you the best services and products.
• Develop suitable products and services to meet your needs.
• Market relevant products and services to you.
• Do market research and conduct client satisfaction surveys.
• Search for, update or place your records at credit reference bureaus and government agencies
• Assess your ability to receive credit or to give collateral of any kind, including guarantees or suretyships.
• Offer other related products and services to you.
• Record and monitor communication between you and us, and
• Use these recordings to verify your instructions in order to analyse, assess and improve our services to you, as well as for training and quality purposes.
• Communicate with you about products that may be of interest to you via post, phone, SMS, email and other electronic media, including social-media platforms, mobile applications.

You have the right to refuse to give us your personal information, but your refusal may limit our ability to provide the required services to you.

We will collect from you only information that is necessary and relevant to the services or products that we offer. And we will collect and use your personal information only if we are lawfully allowed to do so.

We may send you direct marketing, but you can unsubscribe at any time by opting out on the relevant internet-based platform or by informing us directly.

If we use third-party data providers, we will ensure that they are lawfully allowed to share your information with us.

If we process your information, it will be because:

• we have your consent to do so;
• we have an obligation to take actions in terms of a contract with you;
• we are required by law to do so;
• doing so will protect your legitimate interest; and/or
• we or a partner have a legitimate interest to pursue.

We will collect and process the personal information of children only with the consent of a competent person (whether a parent, legal guardian or other person) or if we are lawfully allowed to do so.

Protecting our interests may sometimes require sharing specific client information with third parties, for example if a payment failed because there was not enough money in an account. Also, if it is required to protect the public interest, we may share information about a client’s debt with credit bureaus or debt collection agencies.

We may share the information that we collect, both personal and non-personal, with third parties such as advertisers, contest sponsors, promotional and marketing partners, and others who provide our content or whose products or services we think may interest you.

Entities and third parties we may share your information with may include the following:

• Banks and other financial institutions.
• Regulatory authorities, including the Information Regulator.
• Industry bodies and ombudsmen.
• Law firms and auditors.
• Insurers.
• The South African Police Service.
• The South African Fraud Prevention Services.
• The Payments Association of South Africa.
• Other third parties (contractually, by law, or for protecting a legitimate interest).

When sharing your information with recipients in other jurisdictions, we will ensure compliance with applicable laws.

We may engage trusted third party service providers to perform functions and provide services to us, such as hosting and maintaining our servers and the website/app, database storage and management, e-mail management, storage marketing, credit card processing, customer service and fulfilling orders for products and services you may purchase through the website/app. We will likely share your personal information, and possibly some non-personal information, with these third parties to enable them to perform these services for us and for you.

We may share portions of our log file data, including IP addresses, for analytics purposes with third parties such as web analytics partners, application developers, and ad networks. If your IP address is shared, it may be used to estimate general location and other technographics such as connection speed, whether you have visited the website/app in a shared location, and type of the device used to visit the website/app. They may aggregate information about our advertising and what you see on the website/app and then provide auditing, research and reporting for us and our advertisers.

We may also disclose personal and non-personal information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate in order to respond to claims, legal process (including subpoenas), to protect our rights and interests or those of a third party, the safety of the public or any person, to prevent or stop any illegal, unethical, or legally actionable activity, or to otherwise comply with applicable court orders, laws, rules and regulations. We will not sell your information to third parties and will market to you only in line with applicable laws and your marketing preferences, using your preferred communication method if it is practicable.

Binc will collect personal information that you submit to us. We may also receive personal information about you from third parties as described above.

Any of the information we collect from you may be used in one of the following ways:

• To personalize your experience (your information helps us to better respond to your individual needs)
• To improve our website/app (we continually strive to improve our website/app offerings based on the information and feedback we receive from you)
• To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs)
• To process transactions
• To administer a contest, promotion, survey or other site feature
• To send periodic emails

By submitting your email address on this website/app, you agree to receive emails from us. You can cancel your participation in any of these email lists at any time by clicking on the opt-out link or other unsubscribe option that is included in the respective email. We only send emails to people who have authorized us to contact them, either directly, or through a third party.

We do not send unsolicited commercial emails, because we hate spam as much as you do. By submitting your email address, you also agree to allow us to use your email address for customer audience targeting on sites like Facebook, where we display custom advertising to specific people who have opted-in to receive communications from us. Email addresses submitted only through the order processing page will be used for the sole purpose of sending you information and updates pertaining to your order. If, however, you have provided the same email to us through another method, we may use it for any of the purposes stated in this Policy.

Note: If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.

We will keep your information only for as long as we need it for a lawful business purpose or as required by law (including tax legislation) and any other statutory obligations (including requirements relating to anti-money-laundering and combating the financing of terrorism). We may keep your personal information for longer than required if you have agreed or if we are lawfully allowed to do so.

If we need to keep your personal information for longer than required, and more specifically for historical, statistical or research purposes, we will do so with the appropriate safeguards in place to prevent the records from being used for any other purpose.

Depending on regulatory requirements, we may keep your information for varying periods once our relationship with you has ended. When it is not necessary for us to have your information, we will take all reasonable steps to destroy or de-identify it.

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of a secure server.

All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential.

After a transaction, your private information (credit cards, social security numbers, financials, etc.) is never kept on file. We cannot, however, ensure or warrant the absolute security of any information you transmit to Binc or guarantee that your information on the Service may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or managerial safeguards.

You have the right to ask us to confirm whether we have any information about you. If we do, you may also request a record of that personal information, as well as information about all third parties with whom we have shared your personal information.

Once we have given the information to you, you may ask us to:

• correct or delete your personal information that we have or control if it is inaccurate, irrelevant, excessive, outdated, incomplete or misleading or has been obtained unlawfully;
• destroy or delete our record of your personal information that we are no longer authorised to keep in terms of regulatory requirements; or
• stop or start sending you marketing messages by informing us in writing or through our call centres or website.