Privacy Policy

Last updated: 5 June 2026

VulaCheck ("we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

We collect the following categories of personal information:

  • Identity information: Full name, ID number, date of birth, gender.
  • Contact information: Phone number, email address, residential and postal address.
  • Financial information: Bank account details, payslips, bank statements, income and expense details.
  • Employment information: Employer name, contact details, employment status and duration.
  • Credit information: Credit bureau reports, credit history, and existing debt obligations.
  • Device and usage data: IP address, browser type, pages visited on our platform.
  • Communication records: Records of correspondence between you and us.

2. How We Use Your Information

We use your personal information to:

  • Process your loan application and conduct affordability assessments;
  • Verify your identity and prevent fraud;
  • Administer your loan account, including collecting repayments;
  • Comply with legal and regulatory obligations under the NCA, FICA, POPIA, and other applicable laws;
  • Report to credit bureaus as required by law;
  • Send you account notifications, payment reminders, and statements;
  • Improve our services and platform; and
  • Respond to your queries and complaints.

3. Legal Basis for Processing

We process your personal information on the following grounds:

  • Contractual necessity: To perform our obligations under the loan agreement;
  • Legal obligation: To comply with the NCA, FICA, and other applicable laws;
  • Legitimate interest: To prevent fraud, manage credit risk, and improve our services; and
  • Consent: Where you have given specific consent for marketing communications.

4. Sharing Your Information

We may share your personal information with:

  • Credit bureaus (e.g., TransUnion, Experian, Compuscan) as required by the NCA;
  • Payment processors and banks for debit order processing;
  • Our technology service providers who process data on our behalf under strict data processing agreements;
  • Regulatory bodies (NCR, SARS, FSCA) as required by law; and
  • Debt collectors or attorneys in the event of default, where permitted by law.

We do not sell your personal information to third parties for marketing purposes.

5. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Loan records are typically retained for a minimum of five (5) years after the loan is settled, as required by FICA. Credit bureau data may remain for up to five (5) years after the loan is settled, subject to credit bureau policies.

6. Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, loss, destruction, or alteration. All data is encrypted in transit and at rest. Access to personal information is restricted to authorised personnel only.

Despite these measures, no internet transmission is entirely secure. You transmit information at your own risk and should take steps to protect your account credentials.

7. Your Rights Under POPIA

You have the following rights regarding your personal information:

  • Right of access: To request a copy of the personal information we hold about you;
  • Right to correction: To request correction of inaccurate or incomplete information;
  • Right to deletion: To request deletion of your information where we have no lawful basis for retaining it;
  • Right to object: To object to processing for direct marketing purposes; and
  • Right to complain: To lodge a complaint with the Information Regulator.

To exercise these rights, contact us at our contact details below.

8. Cookies and Tracking

Our platform uses cookies and similar technologies to improve your browsing experience, maintain your session, and understand how our platform is used. You may disable cookies in your browser settings, but this may affect the functionality of our platform.

9. Information Regulator

If you are unsatisfied with how we handle your personal information, you may lodge a complaint with the Information Regulator of South Africa:

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our platform. Your continued use of our services after such notification constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related queries or to exercise your rights, please contact our Information Officer at:

VulaCheck