The short version
- We only collect the details you give us, and the client information we need to do our work.
- We use it to reply to you and to deliver our services. We don’t sell it.
- You can ask to see, correct or delete your information at any time.
- Job seekers: please read our separate candidate privacy notice.
1. Who we are
CrediRisk (Pty) Ltd (registration number [0000/000000/07]) provides credit risk management services and finance recruitment in South Africa. Under the Protection of Personal Information Act, 2013 (POPIA), we are the responsible party for the personal information described in this notice.
2. What we collect
- Enquiries: your name, company, email, phone number and message when you contact us or book a consultation.
- Client contacts: names and contact details of the people we work with at our clients.
- Client data: when a client hires us, we may receive information about their customers or debtors, such as names, account balances and payment history. We use it only to do the work the client asked for.
- Website information: basic technical information such as your browser type and the pages you visit.
3. Why we use it
- To reply to your enquiry and arrange a consultation.
- To deliver the services in our agreement with a client.
- To send invoices and keep business records, as the law requires.
- To send you news or insights, only if you have opted in. You can unsubscribe at any time.
4. Information our clients give us
When a client shares information about their own customers or debtors with us, we process it on the client’s behalf and under a written agreement with them. In POPIA terms, the client is the responsible party and we act as their operator. We keep it confidential, secure, and use it only for the agreed work. If you are a client’s customer and have questions about this, please contact that business first.
5. Who we share it with
We don’t sell personal information. We share it only with service providers who help us run our business (such as website hosting, email and accounting systems), with credit bureaus or verification services where a client has asked us to and the law allows it, and with authorities when the law requires.
6. Information stored outside South Africa
Some of our service providers may store information outside South Africa. We only use providers in countries with similar data protection laws, or who are bound by contract to protect it to POPIA’s standard (section 72).
7. How long we keep it
We keep enquiry details for [12 months] if you don’t become a client. We keep client records for as long as our agreement runs, and then for as long as tax and company laws require (usually five years), after which we delete them.
8. How we keep it safe
We use secure, password-protected systems, encrypted connections and limited staff access. If we believe personal information has been accessed without permission, we will tell the people affected and the Information Regulator, as POPIA section 22 requires.
9. Your rights
You can ask to see the information we hold about you, ask us to correct or delete it, object to us using it, or withdraw your consent at any time. Email our Information Officer at admin@credirisk.co.za. We may ask you to prove who you are first. Our PAIA manual is available on request.
10. How to complain
Please talk to us first. If you’re still unhappy, you can complain to the Information Regulator:
11. Changes to this notice
We may update this notice. The latest version will always be on this page, with the date it took effect.