Contents

Introduction………………………………………………………………………………… 3

What personal information is……………………………………………………………. 4

The aim of our Privacy Notice…………………………………………………………… 5

Why we collect and process your information………………………………………. 5

Processing children’s information……………………………………………………… 6

How we collect your information……………………………………………………….. 6

Whom we share your information with……………………………………………….. 7

How we protect your information……………………………………………………… 8

How long we keep your information……………………………………………………. 8

Your data protection rights……………………………………………………………… 8

Complaints………………………………………………………………………………….. 9

Our contact details………………………………………………………………………… 9

Cookies……………………………………………………………………………………… 10

About us……………………………………………………………………………………. 10

Our presence………………………………………………………………………………. 11

 

 

Introduction

Mbeche treats the personal information of its clients with utmost discretion. This is in line with the Constitution, which protects the right to privacy. The Protection of Personal Information Act (POPIA), 4 of 2013, which aims to give effect to the constitutional right to privacy and promote the fair and transparent use of personal information, further strengthens our resolve, and requires us, to protect our clients’ information appropriately.

POPIA defines ‘personal information’ as any information that can be used to identify you as an individual or a legal entity. Examples of personal information are your identity number, account number, telephone number, email address or physical address.

As part of our commitment to protecting your personal information, and in complying with the law, our processing activities involving personal information are aligned with POPIA.

We also process all personal information in line with the Code of Conduct for the banking industry. Following an application from the Banking Association South Africa (BASA), which represents banks (including us), the Information Regulator issued this code in terms of chapter 7 of POPIA. The code outlines and expands on the specific obligations that members of BASA (banks as responsible parties, operators, or joint responsible parties) have when processing their clients’ personal information, and does not replace the provisions of POPIA.

Our Privacy Notice sets out how we will use your personal information, and it applies to any information, including personal and special personal information, that you give us or that we may collect from third parties.

It is important that you read our Privacy Notice carefully before giving us any personal information. If you give us your personal information, you consent to our processing your personal information as set out in this notice.

If you do not agree to all the provisions of our Privacy Notice, please do not submit any personal information to us and note that, as a result, we may not be able to provide our products and services to you.

 

What personal information is

Personal information is data that can be used to identify you. It is information that you share with us, information that we collect when we take you on as a client and during our ongoing relationship with you, as well as information about your marketing preferences.

Your personal information includes the following:

• Your gender (as required for statistical purposes or by law).
• Your marital status, nationality, or social
• Your age, physical and mental health and well-being, medical conditions, and
• Your religion, conscience, belief, culture, and
• Your
• Your financial information (like your income and expenses, loan repayments, investments, assets and financial needs).
• An identifying number or symbol (like account, identity, or passport numbers).
• Your email address, physical address, or telephone number (for communicating with you).
• Your location and online identifiers [this can be internet protocol (IP) addresses or geolocations].
• Your employment history (especially if you apply for credit).
• Your biometric information (like your fingerprints and facial and voice recognition).
• Your personal

There may be circumstances in which we will collect your special personal information. It may include the following:

• Your race or ethnicity (required for statistical purposes or by law).
• Your health (eg if you apply for life insurance).
• Your criminal behaviour (relating to an offence allegedly committed or proceedings regarding an offence allegedly committed, or the fact that that these proceedings took place).

We will collect and process your special personal information only:

• if we have your consent to do so;
• if it is necessary to establish, exercise or defend a right or obligation in law;
• to comply with a law or for historical, statistical or research purposes; or
• if we are otherwise allowed to do so by

 

The aim of our Privacy Notice

The aim of our Privacy Notice is to guide you and our stakeholders on how we collect, use and protect personal information. Our Privacy Notice sets out the following:

• Why we collect your personal information and how we may process
• How we share your information with third
• How we protect your
• How long we keep your
• Your privacy

Why we collect and process your personal information

To offer financial products and services to you, we need to collect, use, share and store your personal and financial information to do the following:

• Verify your
• Assess the risk of fraud and money
• Enter a banker–client or a banker–third-party relationship with
• Contractually engage with you in terms of loans and
• Understand your financial needs to offer you the best services and
• Develop suitable products and services to meet your
• Market relevant products and services to
• Do market research and conduct client satisfaction
• Search for, update or place your records at credit reference bureaus and government
• Assess your ability to receive credit or to give collateral of any kind, including guarantees or
• Offer other related banking and insurance services to
• Record and monitor communication between you and us, and use these recordings to verify your instructions in order to analyse, assess and improve our services to you, as well as for training and quality
• Communicate with you about products that may be of interest to you via post, phone, SMS, email and other electronic media, including social-media platforms, our ATMs, mobile applications and online banking
• Assess how you use our digital channels so we can offer enhanced services and client

 

You have the right to refuse to give us your personal information, but your refusal may limit our ability to provide the required financial services to you.

We will collect from you only information that is necessary and relevant to the services or products that we offer. And we will collect and use your personal information only if we are lawfully allowed to do so.

We may send you direct marketing, but you can unsubscribe at any time by opting out on the relevant internet-based platform or by informing us directly.

If we use third-party data providers, we will ensure that they are lawfully allowed to share your information with us.

If we process your information, it will be because:

• we have your consent to do so;
• we have an obligation to take actions in terms of a contract with you;
• we are required by law to do so;
• doing so will protect your legitimate interest; and/or
• we or a third party has a legitimate interest to

Processing children’s information

We will collect and process the personal information of children only with the consent of a competent person (whether a parent, legal guardian or other person) or if we are lawfully allowed to do so.

In line with the Banks Act, 94 of 1990, we may process the information of children who are 16 years or older if they want to be a depositor with us.

How we collect your personal information

We collect your personal information in the following ways:

• Directly from you when you complete a product application form on
• Indirectly from you when you interact with us electronically. When you are browsing our website or using our mobile applications, we may collect information from you, like your IP address and server logs.
• From other sources, for example public databases, data aggregators and third parties (or indirectly through your interactions with third parties), as well as other financial institutions, credit bureaus and fraud prevention agencies.
• Through agents or third parties who collect information on our

 

• Through other entities in Mbeche Group or divisions or clusters within Mbeche

Third parties we may collect your personal information from may include the following:

• Law
• Other financial institutions and service
• Data
• Business
• Insurance
• Credit
• Payment associations, including the Payments Association of South
• Social-media
• The South African Police
• Local or foreign
• Public or government
• The South African Fraud Prevention
• Media
• Tracing

Whom we share your information with

Protecting our interests may sometimes require sharing specific client information with third parties, for example if a payment failed because there was not enough money in an account. Also, if it is required to protect the public interest, we may share information about a client’s debt with credit bureaus or debt collection agencies.

Entities and third parties we may share your information with may include the following:

• Banks and other financial
• Regulatory authorities, including the Information
• Industry bodies and
• Law firms and
• The South African Police
• The South African Fraud Prevention
• The Payments Association of South
• Other third parties (contractually, by law, or for protecting a legitimate interest).

 

When sharing your information with recipients in other jurisdictions, we will ensure compliance with applicable laws.

We will not sell your information to third parties and will market to you only in line with applicable laws and your marketing preferences, using your preferred communication method if it is practicable.

How we protect your information

We are committed to ensuring that your information is secure. To prevent your information from being accessed or shared without authorisation, we have reasonable physical, electronic and managerial procedures in place to protect the information we collect.

All online transacting sessions are encrypted, and your personal information is stored in line with internationally accepted banking information security practices.

How long we keep your information

We will keep your information only for as long as we need it for a lawful business purpose or as required by law (including tax legislation) and any other statutory obligations (including requirements relating to anti-money-laundering and combating the financing of terrorism). We may keep your personal information for longer than required if you have agreed or if we are lawfully allowed to do so.

If we need to keep your personal information for longer than required, and more specifically for historical, statistical or research purposes, we will do so with the appropriate safeguards in place to prevent the records from being used for any other purpose.

Depending on regulatory requirements, we may keep your information for varying periods once our relationship with you has ended. When it is not necessary for us to have your information, we will take all reasonable steps to destroy or de-identify it.

Your data protection rights

You have the right to ask us to confirm whether we have any information about you. If we do, you may also request a record of that personal information, as well as information about all third parties with whom we have shared your personal information. Once we have given the information to you, you may ask us to:

 

• correct or delete your personal information that we have or control if it is inaccurate, irrelevant, excessive, outdated, incomplete or misleading or has been obtained unlawfully;
• destroy or delete our record of your personal information that we are no longer authorised to keep in terms of regulatory requirements; or
• stop or start sending you marketing messages by informing us in writing or through our branch network, call centres or

If you want to verify the information we have about you or want us to update, change, or delete it, you can:

• refer to our Promotion of Access to Information Manual, which is available at co.za;
• call the Mbeche Contact Centre on 0800 555 111; or
• go to a Nedbank

Complaints

You can submit complaints about the processing of your personal information by phoning the Mbeche Contact Centre on 0800 555 111 or sending an email to privacy@mbeche.co.za.

Or, if you are not satisfied with the way we have dealt with your complaint, you can contact the Information Regulator by completing the prescribed POPIA form 5 and emailing it to POPIAComplaints@inforegulator.org.za. For more information visit the Information Regulator website at https://inforegulator.org.za.

Our contact details

The contact details of our Information Officer and Deputy Information Officer are below.

Information Officer                         Jabu Mahlangu

 Deputy Information Officer         Thabo Moshoane

Physical address           

15 Bendis Avenue

Bedworthpark

Vereeniging

1939

 

Tel                                                       +27 73 784 1973 | 082 888 8833

Email                                                  privacy@mbeche.co.za

Website                                             https://www.mbeche.co.za

Cookies

We use cookies to personalize your repeat visits to our website by determining how you use the site. Cookies are small text files that may be stored on your computer or mobile device when you visit a website, enable images, or click on a link in an email.

We use cookies to identify which pages on our website are being used. This helps us analyse data about web page traffic and improve our website to meet your needs. We use this information for statistical analysis purposes only, after which the data is removed from our system.

Overall, cookies help us give you a better website by enabling us to monitor which pages you find useful. A cookie does not give us access to your computer or any information about you other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers accept them automatically, but you can modify your browser settings if you prefer to decline cookies. However, this may prevent you from taking full advantage of our website.

About us

(Korri Fintech (Pty) Ltd Mbeche Group is incorporated in South Africa and our registration number is 2021/139620/07.

 

Our business partners include the following:

• Nedbank Limited

Our presence

• Our primary market is South Africa, but we are continuing to expand into the rest of Africa