POPIA and client trust

Privacy, consent and responsible data use.

Ndzinga Capital collects and processes personal information to assess applications, meet regulatory duties, protect clients and provide lending, insurance and related financial-service support.

Data workflow

How information is used in the journey

1

Capture consent and application details

Each stage should be visible to the client and supported by consent, disclosure or lawful basis.

2

Verify identity and documentation

Each stage should be visible to the client and supported by consent, disclosure or lawful basis.

3

Run affordability and credit checks

Each stage should be visible to the client and supported by consent, disclosure or lawful basis.

4

Prepare disclosures and decision outcome

Each stage should be visible to the client and supported by consent, disclosure or lawful basis.

5

Manage servicing, collections and regulatory records

Each stage should be visible to the client and supported by consent, disclosure or lawful basis.

Identity and contact

Name, South African ID number, date of birth, phone number, email address and address details.

Income and affordability

Employment status, employer details, income, expenses, existing obligations and bank account information.

Credit and application data

Application details, product selection, credit bureau results, repayment behaviour and supporting documents.

Digital interaction data

Device, browser, IP address, form progress and website activity needed to secure and improve the service.

Processing purposes

Why Ndzinga uses this information

  • Assess loan, insurance and related financial-service requests
  • Verify identity, reduce fraud risk and meet FICA, NCA and POPIA duties
  • Calculate affordability, prepare disclosures and communicate application outcomes
  • Administer accounts, repayments, claims, renewals and client support
  • Report where required to regulators, credit bureaux and approved service partners
  • Send relevant product information where the client has consented or where law allows it

Sharing and safeguards

Who may receive information

Ndzinga does not sell personal information. Information may be shared with credit bureaux, payment and banking partners, verification providers, insurers or underwriting partners, professional advisors, regulators and law-enforcement bodies where there is a lawful basis.

Role-based access controls for staff and advisors
Secure application and document workflows
Audit trails for sensitive operational actions
Retention aligned to credit, FICA and regulatory record obligations

Your POPIA rights

Control, correction and complaints

Information Regulator

Access

Ask what personal information Ndzinga holds about you.

Correction

Request correction of inaccurate or incomplete information.

Objection

Object to certain processing, including direct marketing.

Withdrawal

Withdraw consent where processing depends on consent.

Deletion

Request deletion where there is no lawful reason to retain the record.

Complaint

Complain to Ndzinga or the Information Regulator of South Africa.

Retention

How long records are kept

Ndzinga retains information for as long as needed to provide services, resolve disputes, meet credit and insurance obligations and comply with applicable laws. Credit and FICA-related records are typically kept for at least five years after the relationship ends, unless a longer period is required.

Privacy contact

To request access, correction, withdrawal of consent or to raise a privacy concern, contact Ndzinga Capital.

Email: info@ndzingacapital.co.za

Phone: +27 72 845 0308

Complaint escalation: Information Regulator of South Africa

POPIA complaints: POPIAComplaints@inforegulator.org.za