Privacy Policy

This Privacy Policy explains how ImaliFin ("we", "us") processes personal information in line with the Protection of Personal Information Act 4 of 2013 ("POPIA"). It applies to this website, our online Business Loan application, our contact form and Personal Loan applications made through our partner VulaCheck.

1. What information we collect

When you apply for a Business Loan, we collect:

• Business details: registered and trading name, registration number, business type, date established, address, phone number, email address, industry and a description of the business.
• Financial information: monthly turnover and expenses, requested loan amount and purpose, existing debt and business bank account details.
• Details of the owner or representative: full name, South African ID number, date of birth, mobile number, email address, residential address, position in the business and ownership percentage.
• Supporting documents: business registration documents, a copy of your ID, proof of business address, bank statements and any other documents you choose to upload.

When you use our contact form, we collect your name, email address, phone number and message.

When you use the website, our systems temporarily process technical information such as your IP address, to keep the site secure and to prevent abuse.

Fields marked as required in our forms are mandatory. If you do not provide them, we cannot assess your application. Other fields are voluntary.

2. Why we use your information

• To assess your loan application, including verifying your identity and your business, and carrying out an affordability and credit assessment as required by the National Credit Act 34 of 2005.
• To prevent and detect fraud and to meet our legal and regulatory obligations.
• To contact you about your application, request more information, and tell you the outcome.
• To enter into and manage a loan agreement if your application is approved.
• To respond to questions you send us through the contact form.

We process your information on the basis of your consent, because it is needed to take the steps you asked for (assessing your application), because the law requires it, or because we have a legitimate interest in running a secure and responsible lending business. We will not use your information for direct marketing without your separate consent.

3. Who we share it with

We do not sell your personal information. We share it only where needed, with:

• Credit bureaus and verification services, to check your identity, credit record and business details.
• VulaCheck, our application partner for Personal Loans. Personal Loan applications are completed on VulaCheck's platform, which collects your information and makes it available to us to assess your application. VulaCheck's own terms and privacy policy also apply when you use its platform.
• Service providers who host our website, database and email on our behalf, under obligations to keep your information confidential and secure.
• Our professional advisers (such as auditors and attorneys), where needed.
• Regulators, courts and law enforcement, where the law requires it.

Your information is stored in South Africa. If it is ever transferred outside South Africa, we will only do so where POPIA allows it and the recipient is bound to protect it to a comparable standard.

4. How we protect it

Information you send us through this website is encrypted in transit. Applications and documents are stored in systems that only authorised ImaliFin staff can access, and staff sign in using two-factor authentication. We take reasonable technical and organisational measures to prevent loss, misuse or unauthorised access. If we become aware of a security compromise affecting your information, we will notify you and the Information Regulator as POPIA requires.

5. How long we keep it

We keep application information and documents for 5 years after the application is finalised (whether it was approved or declined), or for longer where the law requires it. After that, we securely delete or de-identify it. Documents from applications that were started but never submitted are deleted automatically within a few days.

6. Cookies

This website uses only essential cookies: one to remember your progress through the multi-step application form, and one to keep staff signed in to the admin area. We do not use advertising or tracking cookies.

7. Your rights

Under POPIA you have the right to:

• ask whether we hold personal information about you, and request a copy of it;
• ask us to correct information that is inaccurate, out of date or incomplete;
• ask us to delete information we are no longer allowed to keep;
• object to the processing of your information, and withdraw your consent at any time (this does not affect processing that has already taken place, or processing the law requires); and
• lodge a complaint with the Information Regulator.

Information Regulator (South Africa): inforegulator.org.za

8. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page.