Privacy Policy - Mzansi Moola

INTRODUCTION & PURPOSE

Mzansi Moola (Pty) Ltd. (“Mzansi”), is a company duly registered and incorporated in accordance with the company laws of South Africa under registration number (2023/186736/07). It operates as a credit provider subject to the National Credit Act, 34 of 2005 (“the NCA”) and registered with the National Credit Regulator (“the NCR”) under registration number NCRCP22153.

Mzansi provides you with access and use of its website (mzansimoola.co.za) (“the website”) in order to apply for, be assessed, and, if your affordability assessment renders favourable results, be granted a credit agreement. Due to the nature of the services and products available on the website, as well as regulatory obligations imposed Mzansi and on you, Personal Information, as defined in the Protection of Personal Information Act, 4 of 2013 (“POPIA”) must be collected, processed and retained from the website. In certain instances, the personal information collected must also be disseminated to third-parties in order to comply with legal obligations.

This privacy policy (“this Policy”) aims to illustrate and regulate the manner in which your personal information is collected, used, stored and protected.

SCOPE

This Policy applies to all personal information collected, used, stored and protected in the course of Mzansi’s business and will outline the options available to you regarding the use of the personal information collected through the use of the website.

This privacy policy has been developed in accordance with POPIA and the Promotion of Access to Information Act (“PAIA”). Nothing in this policy is aimed at circumventing or contravening any right afforded to your or to Mzansi under POPIA or PAIA and where any provision is found to be in contrast with either of the aforementioned statutes, those provisions will be severed from the remainder of this Policy and that provision will be dealt with in accordance with the prescripts of either POPIA or PAIA, whichever may find application to that particular provision.

By accessing and/or using the website, you agree to this Policy and to be bound by its provisions, where applicable. Should you not consent and agree to the provisions hereof, please do not use the website and do not submit your personal information on the website.

PERSONAL INFORMATION

Personal information, as it relates to the activities for which the website is intended, shall bear the same meaning ascribed to it in POPIA, and includes, but is not limited to, the following information:

Names and Surname
Age
Gender
Ethnicity
Identification Number
Assets and Liabilites
Income & Expenses
Payment records and history
Residential Address
Political Status
Criminal Status
Sanction Status

Where POPIA is amended, as it may be from time to time, any additional definitions ascribed to the term ‘personal information’ shall also be applicable to this Policy.

SECURITY

For the purpose of security, Mzansi has engaged with suppliers and providers to ensure that its website, and the personal information collected therefrom, is secure and meets, or exceeds, industry standards.

Mzansi has ensured that the privacy policies and measures of those third-parties align with its own aims, as well as lawful requirements for the collection, processing, retention and dissemination of data.

Mzansi has taken further internal measures to secure personal information and data by ensuring that: –

Only authorised personnel have access to the data collected, processed and retained through the use of the website and such personnel are trained and informed of their obligations and responsibilities in respect of safeguarding and protecting the data to which they have access.

No unauthorised personnel have access to the data collected, processed and retained through the use of the website and any such unauthorised person is aware of the consequences and actions which may be taken against them for accessing, or attempting to access, such data.

Internal policies and protocols provide for continuous engagement with service providers of Mzansi, to ensure that the website and data centres are continuously afforded the latest security and privacy updates, whether internally or procured from a service provider, and that all agreements with such service providers are maintained and renewed.

DATA CONTROLLER & SUBJECTS

In accordance with POPIA, Mzansi is the data controller and you are the data subject. Therefore, it is the responsibility of Mzansi to collect, process and retain the personal information and data collected from you.

In order to ensure that data protection and privacy standards are met, maintained and adhered to, Mzansi has procured Information Technology services from a provider specializing in the provision of those services. Mzansi reserves the right to, at any time and without prior notice to you, change or substitute those providers in order to ensure the security of its systems and procedures.

Where a data subject (you) seeks to access, correct, amend or delete data relating to your personal information, you may address a query to the information officer of Mzansi, as detailed in this policy. The request will then be assessed and, to the extent permitted by law, the request will be complied with.

THE USE OF PERSONAL INFORMATION

Mzansi will, in fulfilment of the services and products made available on its website collect, process, disseminate and retain personal information in the following manners, including, but not limited to: –

Obtaining and verifying your identity.

Obtaining and assessing your financial information in order to conduct an assessment of your income and expenses.

Obtaining your credit profile in order to assess your financial obligations, financial history and creditworthiness.

Taking credit decisions.

Effecting payment to you, and obtain repayment from you.

Establishing your political status and whether you are engaged in criminal activities or been sanctioned by any competent authority of any country’s jurisdiction.

The conduction of marketing research and analysis in order to improve the services and products offered by Mzansi.

Establishing contact with you.

Complying with Laws, Public Duties, Court Orders and Authorised Investigations.

Additional personal information may be requested and collected from you and, where your provide such information, you will explicitly consent to the collection, processing, dissemination (if required) and retention of that personal information.

Mzansi will only utilize your personal information in accordance with the provisions of POPIA and in accordance with the following main principles: –

Mzansi will only collect the personal information that is strictly required to be collected;

Mzansi will process that personal information only in accordance with the purpose for which that personal information was collected;

Mzansi will only disseminate that personal information where it is required to do so, or has obtained your explicit consent to do so, to persons authorised to receive that information and who will also be required only to utilize that information in accordance with the purpose for which it was provided to them. These third parties have been carefully vetted and selected before a trusted relationship is established. All third party service providers are contractually and statutorily bound to maintain the confidentiality and security of the data and Personal Information provided to them ;

Mzansi will retain that personal information as secure, safe, confidential and not accessible by unauthorized persons.

DATA RETENTION PERIODS

Mzansi will retain the Personal Information and data collected by it for as long as your account is active, or as needed in order to provide services to you and in accordance with any legislative prerequisite.

Personal Information and data will be retained, regardless of the existence of a relationship between you and Mzansi, for as long as necessary to comply with its legal obligations, to resolve disputes, for the enforcement of its rights or as it may be directed by competent authority.

DATA BREACH

In the event that a data breach occurs, or there are reasonable grounds to believe that a data breach has occurred and that the Personal Information of you or of a Data Subject has been accessed, acquired, compromised or leaked, Mzansi will: –

As soon as practicable, take the appropriate steps to limit the breach and restore the integrity and security of the system;

As soon as reasonable, report to the affected Data Subject(s) the relevant facts and extent of the breach or compromission;

If applicable, report on the identity of the person(s), group(s) or organization(s) suspected of, or known to have, caused the breach or compromission and/or accessed the Personal Information, unless Mzansi has received an order or direction from a competent authority not to do so;

Notify you immediately, if it is necessary for you to stop the utilization of the website and the extend for which you are required to stop using the website to allow Mzansi to restore the integrity of the website and avoid furthering the scope of the breach or compromission.

RIGHT TO ACCESS & AMEND

You have the right to access the Personal Information that is retained, relating to you utilizing the website. To obtain a copy of your personal information held by Mzansi, please direct an email to Information Officer at the contact details in this Policy. Should there be any amendments required to the data or Personal Information, a request may be made in the same manner.

ELECTRONIC COMMUNICATIONS AND TRANSACTIONS ACT

Mzansi subscribes to the principles outlined in Section 51 of the Electronic Communications and Transactions Act, 2002 (“ECTA”), which governs your right to having your personal information kept private.

In accordance with Section 51 of ECTA, we will only collect, collate, process and store (“use”) your personal information, with your permission, as set out in this policy, unless we are legally obligated to do otherwise. The information and data which we use in terms of this policy shall only be used for the lawful purpose in terms of which it is required.

This Policy discloses the specific purpose for which Personal Information of you, as collected through the use of the website, is requested, used and stored.

No Personal Information will be uutilised for any reason other than the reasons set out in this Policy, without your express consent to do so, unless Mzansi is ordered or directed to do so by a competent authority.

Personal Information retained by Mzansi will be disclosed, without your consent, if: –

Mzansi is required to do so by law;

Disclosure is in public interest; and

Such disclosure will be deemed to have carried your express or implied consent.

You are herewith notified that you are entitled to, and you understand that you may, option out of any mailing list maintained by Mzansi for marketing purposes.

EXCLUSIONS

As detailed in this Policy, Mzansi has taken great care in ensuring the Personal Information and data about you are protected and confidential. However, Mzansi will not accept any liability if Personal Information is breached or compromised if: –

the breach or compromission occurred in relation to data stored directly on your hard drive or other device which you use to access and or use the website;

the breach or compromission occurred as a result of your failure to keep your website credentials confidential or distributed the aforementioned information willingly and/or allowed such information to be distributed;

the breach or compromission occurred as a result of your failure to update and/or change your website credentials after learning that such information has been distributed;

You committed, or allowed to commit without intervention, the use of your credentials for the purposes of breaching or compromising data;

You engaged in any form of illegal activity, the consequences of which gave rise, directly or indirectly, to a breach or compromission of data;

The data was never in possession of Mzansi.

AMENDMENTS & UPDATES TO THIS POLICY

Mzansi reserves the right, at its sole discretion, to update, modify, amend or replace this Privacy Policy from time to time and as may be required by law, without notice.

You agree to review the Privacy Policy whenever accessing the website.

Unless the contrary is clearly indicated in the updated Privacy Policy, such updated Privacy Policy will replace and supersede all previous policies.

The most recent version of Mzansi’s Privacy Policy may be accessed, at any time, from the website.

JURISDICTION

This Privacy Policy will be governed, regulated and interpreted in accordance with the laws of the Republic of South Africa and both you and Mzansi submit to the jurisdiction of the South African court with the appropriate jurisdiction.

INFORMATION OFFICER

The registered Information officer of Mzansi can be contacted using the following details:

THE INFORMATION OFFICE

MZANSI MOOLA (PTY) LTD

Illovo Edge Office Block

Building 4

9 Harries Road

Illovo

Johannesburg

2196

info@mzansimoola.co.za

END OF POLICY

LAST REVISION DATE: [April 2026]