Legal & Compliance

Privacy Policy

  • Home
  • Privacy Policy
Last Updated: January 2024
🔐
POPIA Compliance Statement

Debella Finance ("we," "us," "our," or "Company") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African laws.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services. If you have questions or concerns about this Privacy Policy, please contact us using the information provided at the end of this document.

1

Information We Collect

Personal Information

We collect personal information that you voluntarily provide when registering for an account, including:

  • Name and contact information (email address, phone number, physical address)
  • Business information (company name, registration number, tax number)
  • User credentials (username, password)
  • Billing and payment information

Banking Information

As part of our debit order collection services, we collect and process:

  • Customer banking details (account holders' names, bank account numbers, bank branch codes)
  • Debit order instructions and authorization documents
  • Transaction history and payment records

Transaction Data

We collect information related to debit order processing:

  • Debit order amounts and dates
  • Transaction status and outcomes (successful, failed, reversed)
  • Payment references and reconciliation data

Technical Information

We automatically collect certain technical information:

  • IP address and browser type
  • Pages accessed and time spent on the website
  • Referral sources and exit pages
  • Device information and operating system
2

How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: Processing debit orders, maintaining customer records, and managing your account
  • Communication: Sending service updates, billing notifications, and responding to inquiries
  • Legal Compliance: Complying with applicable laws, regulations, and banking system requirements
  • Fraud Prevention: Detecting and preventing fraudulent transactions and unauthorized access
  • Security: Protecting our Services and your data from security threats
  • Analytics: Analyzing usage patterns to improve our Services
  • Reporting: Generating transaction reports and reconciliation statements
  • Customer Support: Providing support and resolving service issues
3

Data Storage and Security Measures

We implement comprehensive security measures to protect your personal information:

  • Encryption: All data in transit is encrypted using TLS/SSL protocols
  • Access Control: Only authorized personnel have access to personal information
  • Secure Authentication: User accounts require secure password authentication
  • Regular Audits: We conduct regular security audits and vulnerability assessments
  • Data Backup: We maintain secure backups to ensure data availability
  • Physical Security: Data centers are physically secured with restricted access

Personal information is retained for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Upon account termination, we will securely delete your data unless legal obligations require retention.

4

Data Sharing with Third Parties

We do not sell, trade, or rent your personal information to third parties. However, we may share your information with:

  • Banking Partners: South African banks for processing debit orders
  • Service Providers: Third-party vendors providing hosting, analytics, or customer support services
  • Legal Authorities: Government agencies or law enforcement when required by law
  • Credit Bureaus: Credit information bureaus if necessary for creditworthiness assessment

All third-party service providers are contractually obligated to maintain the confidentiality and security of your information.

5

Your Rights Under POPIA

Under POPIA, you have the following rights:

  • Right of Access: You may request access to your personal information that we hold
  • Right to Correction: You may request correction of inaccurate or incomplete information
  • Right to Deletion: You may request deletion of your personal information, subject to legal obligations
  • Right to Restrict Processing: You may request that we restrict processing of your information in certain circumstances
  • Right to Opt-Out: You may opt-out of receiving marketing communications
  • Right to Data Portability: You may request your information in a structured, commonly-used format
6

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

  • Session Cookies: Maintain your login session and security
  • Analytics Cookies: Track usage patterns to improve our Services
  • Preference Cookies: Remember your preferences and settings

You may disable cookies through your browser settings, but this may limit functionality of certain features.

7

Data Processing Standards

We process personal information in accordance with POPIA principles:

  • Lawfulness: Processing is lawful and based on your consent or contractual obligation
  • Fairness: Processing is fair and transparent
  • Accountability: We maintain records of our processing activities
  • Purpose Limitation: We use data only for stated purposes
  • Minimization: We collect only necessary information
  • Accuracy: We maintain accurate and up-to-date information
8

Contact Information for Privacy Inquiries

For questions about this Privacy Policy or to exercise your POPIA rights, please contact our Information Officer:

Phone 010 590 3032
Location South Africa

We will respond to your request within 30 days as required by POPIA.

9

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by email or through our website. Your continued use of the Services following such notice constitutes your acceptance of the updated Privacy Policy.