Privacy Policy

This Privacy Policy applies to:

• visitors to our website (pcfinloans.co.za);
• prospective customers who request a quote or apply for credit;
• current and former customers;
• individuals who contact us via WhatsApp, email or other channels.

This Policy should be read together with our Credit Agreement, Debit Order Mandate (if applicable) and any related terms provided during the application process.

Responsible Party (POPIA): People Connect Group (Pty) Ltd trading as PC FINLOANS

By using our website, submitting an enquiry, or applying for credit, you acknowledge that we may process your personal information for the purposes set out in this Policy.

Under POPIA, we may process your information on one or more lawful grounds, including:

• to take steps prior to entering into a contract and to perform our contract with you (e.g., assessing and administering your loan);
• to comply with legal obligations (e.g., NCA-related affordability checks and required record keeping);
• for legitimate interests (e.g., preventing fraud, securing our systems, recovering amounts due);
• with your consent where required (e.g., certain marketing communications).

We may collect the following categories of personal information (depending on what you do on our website and the product you request):

We collect information:

• Directly from you (online forms, uploads, calls, WhatsApp, email); and
• From third parties, where lawful and necessary, such as:
  • credit bureaus;
  • identity and bank verification partners;
  • payment processors and banks;
  • fraud prevention providers;
  • collection service providers (if applicable);
  • regulatory or law enforcement bodies where legally required.

We may share your personal information with trusted parties for lawful purposes, including:

• Credit bureaus (for credit checks and reporting in line with the NCA and bureau rules);
• Banks and payment partners (for disbursement and repayment processing);
• Verification providers (identity, bank account and fraud checks);
• Technology and hosting providers (secure data storage, website hosting, analytics);
• Customer support service providers (where we use external support tools);
• Debt collection partners and legal advisors (where accounts are in default, subject to lawful process);
• Regulators and authorities (e.g., NCR or law enforcement) where legally required or permitted;
• Auditors and professional advisers (under confidentiality obligations).

All service providers must:

• process information only on our instructions (where applicable);
• implement appropriate security safeguards; and
• keep your information confidential.

We prefer to process and store data in South Africa. However, some service providers (e.g., hosting, cloud services, analytics) may process information outside South Africa.

If we transfer personal information across borders, we will ensure that:

• the receiving country has adequate protection, or
• the transfer is subject to appropriate safeguards (contractual protections), or
• it is otherwise permitted under POPIA.

We use cookies and similar technologies to:

• keep the website working properly;
• improve performance and user experience;
• understand how visitors use our website;
• support security and fraud prevention.

You can manage cookies through your browser settings. If you disable cookies, parts of the site may not function as intended.

We may use third-party analytics tools that collect usage information (which may include IP address and device data) to generate aggregated reports and improve services.

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction, including:

• access controls (need-to-know access);
• secure hosting and encryption in transit (where applicable);
• monitoring and logging for suspicious activity;
• security updates and maintenance;
• staff confidentiality obligations and training.

No system is 100% secure, but we continuously improve our safeguards.

We keep personal information only as long as necessary to:

• fulfil the purposes described in this Policy;
• comply with legal and regulatory retention requirements (including NCA-related recordkeeping);
• resolve disputes and enforce agreements.

When we no longer need the information, we securely delete, destroy, or de-identify it (unless the law requires us to keep it longer).

Subject to lawful exceptions, you may:

• request confirmation that we hold your personal information;
• request access to your personal information;
• request correction or deletion of inaccurate, irrelevant, excessive, outdated, misleading or unlawfully obtained information;
• object to processing in certain circumstances;
• withdraw consent (where processing is based on consent);
• lodge a complaint with the Information Regulator.

Where we send marketing communications, you can opt out at any time by:

• using the unsubscribe option in the message (where available), or
• messaging/emailing us with "Unsubscribe".

Service-related communications (e.g., repayment reminders, legal notices, account updates) may still be sent where necessary.