iVeri recognises the importance of protecting personal information. This policy outlines how iVeri collects, stores, utilises and protects your personal information.
You accept this policy and consent to such collection, storage and use when you sign up for or use our products, services or any other features, technologies or functionalities offered by us on our website www.iveri.co.za or through any other means.
The purpose of this Policy is to inform Data Subjects about how iVeri Processes your Personal Information by, inter alia, collecting or collating, receiving, recording, storing, updating, distributing, erasing or destroying, disclosing and/or generally using the Data Subject's Personal Information.
How we obtain your information
This Policy applies to Personal Information collected by iVeri in connection with the services offered. This includes information collected offline through our consumer call centres, direct marketing campaigns, and online through our websites. This Policy is hereby incorporated into and forms part of iVeri’s terms and conditions of use and does not apply to the information practices of Third-Party companies (including, without limitation, their websites, platforms and/or applications) which we do not own or control; or individuals that iVeri does not manage or employ. These Third-Party sites may have their own privacy policies and terms and conditions, and we encourage you to read them before using those Third-Party sites.
iVeri will always collect Personal Information in a fair, lawful and reasonable manner to ensure that it protects the Data Subject's privacy and will Process the Personal Information based on legitimate grounds in a manner that does not adversely affect the Data Subject in question.
iVeri often collects Personal Information directly from the Data Subject and/or from Third-Parties, and where iVeri obtains Personal Information from Third-Parties, iVeri will ensure that it obtains the consent of the Data Subject to do so or will only Process the Personal Information without the Data Subject's consent where iVeri is permitted to do so in terms of the applicable laws.
If you sign up as a merchant, we collect the following types of information:
Contact information – your name, address, phone, email, date of birth, national ID number, and other identifying information.
Financial information – the bank account numbers and credit card numbers that you link to your iVeri account or give us when you use iVeri. Such information will be treated with the utmost privacy and will be stored encrypted on our systems and communicated across a secure link.
We may also obtain information about you from third parties such as credit bureaus, identity verification services and risk-based authentication services.
When you are using our services, we collect information about your transactions and your other activities on our website. Generally, we may also collect information about your computer or other access device for fraud prevention purposes.
When you send emails or other communication to iVeri we may retain those communications to process your enquiries, respond to your requests and improve our service.
Notifying Data Subjects
iVeri will make Data Subjects aware of the fact that it is Processing their Personal Information and inform them of the specific purpose for which iVeri will be Processing such Personal Information, including making the Data Subject aware of any Third-Party recipients of the Personal Information (which may also include cross-border transfers of Personal Information).
iVeri will not use the Personal Information of a Data Subject for any purpose other than the disclosed purpose without the consent of the Data Subject, unless iVeri is permitted or required to do so by law.
How cookies are used
Like any other website, iVeri uses 'cookies'. These cookies are used to collect information automatically and store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information
We encode our cookies so that only we can interpret the information stored in them. You are free to decline our cookies if your browser permits but doing so may interfere with your use of our website.
You may encounter cookies from third parties when using the Site on certain websites that we do not control.
Storage of Personal Information
iVeri’s Third-Party service providers, including data storage and processing providers, may from time to time also have access to a Data Subject's Personal Information in connection with purposes for which the Personal Information was initially collected to be Processed.
iVeri will ensure that such Third-Party service providers will process the Personal Information in accordance with the provisions of this Policy, all other relevant internal policies and procedures and applicable laws.
iVeri may store your Personal Information using iVeri’s own secure on-site servers or other internally hosted technology. Your Personal Information may also be stored by Third Parties, via cloud services or other technology, to whom iVeri has contracted with, to support iVeri’s business operations.
These Third Parties do not use or have access to your Personal Information other than for cloud storage and retrieval, and iVeri requires such parties to employ at least the same level of security that iVeri uses to protect your personal data.
Your Personal Information may be stored and processed in South Africa or another country where iVeri, its affiliates and their service providers maintain servers and facilities and iVeri will take steps, including by way of contracts, to ensure that it continues to be protected regardless of its location in a manner consistent with the standards of protection required under applicable law.
Use of Personal Information
iVeri will only Process a Data Subject's Personal Information for a specific, lawful and clear purpose (or for specific, lawful and clear purposes) and will ensure that it makes that Data Subject aware of such purpose(s) as far as possible.
It will ensure that there is a legal basis for the Processing of any Personal Information. Further, iVeri will ensure that Processing will relate only to the purpose for and of which the Data Subject has been made aware (and where relevant, consented to) and will not Process any Personal Information for any other purpose(s).
iVeri may use Personal Information for the following purposes –
For the purposes of receiving services or products provided by the Data Subject to iVeri from time to time;
To respond to any correspondence that the Data Subject may send to iVeri, including via email or by telephone;
To contact the Data Subject from time to time, where specific consent has been given to follow-up contacts by iVeri or to be put on iVeri's mailing list;
For such other purposes to which the Data Subject may consent from time to time; and
For such other purposes authorised in terms of applicable law.
Where required (i.e. where we are not relying on a legal ground), iVeri will obtain the Data Subject's consent prior to collecting, and in any case prior to using or disclosing, the Personal Information for any purpose.
Where iVeri is relying on a Data Subject's consent as the legal basis for Processing Personal Information, the Data Subject may withdraw his/her/its consent or may object to iVeri's Processing of the Personal Information at any time. This will not affect the lawfulness of any Processing done prior to the withdrawal of consent or any Processing justified by a legal ground.
If the consent is withdrawn or if there is otherwise a justified objection against the use or the Processing of such Personal Information, iVeri will ensure that the Personal Information is no longer Processed.
Personal Information for Direct Marketing Purposes
iVeri acknowledges that it may only use Personal Information to contact the Data Subject for purposes of direct marketing from time to time where it is permissible to do so.
iVeri will ensure that a reasonable opportunity is given to the Data Subject to object to the use of their Personal Information for iVeri’s marketing purposes when collecting the Personal Information and on the occasion of each communication to the Data Subject for purposes of direct marketing.
iVeri will not use your Personal Information to send you marketing materials if you have requested not to receive them. If you request that we stop Processing your Personal Information for marketing purposes, iVeri shall do so. We encourage that such requests to opt-out of marketing be made via forms and links provided for that purpose in the marketing materials sent to you.
Retention of Personal Information
iVeri may keep records of the Personal Information it has collected, corresponded using, or commented on in an electronic or hardcopy file format and will retain Personal Information for as long as necessary to fulfil the purposes for which that Personal Information was collected and/or as permitted or required by applicable law.
iVeri may retain Personal Information for longer periods for statistical, historical or research purposes, and should this occur, iVeri will ensure that appropriate safeguards have been put in place to ensure that all recorded Personal Information will continue to be Processed in accordance with this Policy and the applicable laws.
Once the purpose for which the Personal Information was initially collected and Processed no longer applies or becomes obsolete, iVeri will ensure that the Personal Information is deleted, destroyed or de-identified sufficiently so that a person cannot re-identify such Personal Information.
Failure to provide Personal Information
Should iVeri need to collect Personal Information by law, such as in-relation to anti-money laundering or under the terms of a contract that iVeri may have with you and you fail to provide the personal data when requested, we may be unable to perform the contract we have or are attempting to enter into with you.
In such a case, iVeri may have to decline to provide or receive the relevant services, you will be notified where this is the case.
Safe keeping of Personal Information
iVeri has implemented physical, organisational, contractual and technological security measures to keep all Personal Information secure, including measures protecting any Personal Information from loss or theft, and unauthorised access, disclosure, copying, use or modification.
iVeri will notify the Regulator and the affected Data Subject (unless the law requires that we delay notification to the Data Subject) in writing in the event of a security breach (or a reasonable belief of a security breach) in respect of that Data Subject's Personal Information.
Provision of Personal Information to third parties
iVeri may disclose Personal Information to Third-Party service providers and will enter into written agreements with such Third-Party service providers to ensure that they Process any Personal Information in accordance with the provisions of this Policy, and applicable laws.
iVeri will disclose Personal Information with the consent of the Data Subject or if iVeri is permitted to do so without such consent in accordance with the applicable laws.
Further, iVeri may also send Personal Information to a foreign jurisdiction outside of the Republic of South Africa in order to achieve the purpose(s) for which the Personal Information was collected and Processed, including for Processing and storage by Third-Party service providers.
The Data Subject should also take note that the Processing of Personal Information in a foreign jurisdiction may be subject to the laws of the country in which the Personal Information is held, and may be subject to disclosure to the governments, courts of law, enforcement or regulatory agencies of such other country, pursuant to the laws of such country.
Access to Personal Information
iVeri may request the Data Subject to provide sufficient identification to permit access to, or provide information regarding the existence, use or disclosure of the Data Subject's Personal Information.
Any such identifying information shall only be used for the purpose of facilitating access to or information regarding the Personal Information.
The Data Subject can, request in writing, to review any Personal Information about the Data Subject that iVeri holds including Personal Information that iVeri has collected, utilised or disclosed.
iVeri will provide the Data Subject with any such Personal Information to the extent required by law and any of iVeri’s policies and procedures which apply in terms of the Promotion of Access to Information Act No. 2 of 2000 ("PAIA").
If a Data Subject successfully demonstrates that their Personal Information in our records is inaccurate or incomplete, iVeri will ensure that such Personal Information is amended or deleted as required (including by any Third Parties).
Keeping Personal Information accurate
iVeri will take reasonable steps to ensure that all Personal Information is kept as accurate, complete and up to date as reasonably possible.
iVeri may not always expressly request the Data Subject to verify and update his/her/its Personal Information, unless this process is specifically necessary, however, expects that the Data Subject will notify iVeri from time to time in writing of any updates required in respect of his/her/its Personal Information.
Changes to this Policy
iVeri may regularly amend or add new terms to this Policy - please review it regularly to make sure you are familiar with the content. Any changes shall come into effect immediately and automatically.
How you can contact us about privacy questions
If you have questions or concerns regarding this policy, you should contact us by emailing us at firstname.lastname@example.org
Last Updated: March 2021