Data Privacy Agreement

Introduction

Khumbulekhaya ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with South Africa's Protection of Personal Information Act (POPI Act).

Information We Collect

We collect personal information that you provide to us when you:

• Register for an account
• Use our services
• Contact us for support
• Participate in our programs

Personal Information You Provide

The personal information we collect may include:

• Name and surname
• South African ID number
• WhatsApp number and other contact details
• Email address
• Financial information including savings and investment data
• Travel expense information
• Biometric data (if provided for verification)
• Documents for KYC (Know Your Customer) verification

How We Use Your Information

We use your personal information for the following purposes:

• To create and maintain your account
• To provide our financial services and stokvel management
• To verify your identity through KYC processes
• To calculate travel expenses and potential savings
• To communicate with you about our services
• To comply with legal and regulatory requirements
• To improve our services and user experience
• To prevent fraud and ensure security

Your Rights Under POPI Act

Under the POPI Act, you have the following rights:

• Right to Access: You can request access to your personal information we hold
• Right to Rectification: You can request correction of inaccurate information
• Right to Erasure: You can request deletion of your personal information
• Right to Object: You can object to the processing of your personal information
• Right to Data Portability: You can request transfer of your data to another organization
• Right to Restriction: You can request restriction of processing in certain circumstances

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Secure authentication mechanisms
• Regular security audits
• Access controls and monitoring
• Employee training on data protection

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. This typically includes:

• Account information: For the duration of your membership plus 5 years
• Financial records: As required by financial regulations (7 years)
• Transaction records: As required by financial regulations (7 years)
• KYC documentation: As required by regulatory requirements (10 years)

Data Sharing and Disclosure

We may share your personal information with:

• Service Providers: Third-party vendors who assist us in providing services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell, trade, or rent your personal information to third parties.

Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to enhance your experience on our platform. You can control cookies through your browser settings.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have any questions about this Privacy Policy or your personal information, please contact us:

Information Officer

For POPI Act-related inquiries, you can contact our Information Officer: