Privacy Policy

How we collect, use, and protect your personal information in accordance with the Protection of Personal Information Act 4 of 2013.

1. Who we are

Mzansi Debt is a registered debt counselling service operating in South Africa under the National Credit Act 34 of 2005 ("the NCA") and registered with the National Credit Regulator ("NCR"). For the purposes of the Protection of Personal Information Act 4 of 2013 ("POPIA"), Mzansi Debt is the Responsible Party that collects and processes your personal information.

2. What information we collect

When you interact with our website, calculator, or assessment form, we may collect the following categories of personal information:

• Identification information, such as your first name, surname, South African ID number (when voluntarily provided), and date of birth.
• Contact information, including your phone number, WhatsApp number, email address, and home or postal address.
• Financial information, including your monthly income, monthly debt obligations, total debt owed, number of credit accounts, employer name, and details of your creditors.
• Usage information, including your IP address, browser type, device, pages visited, and approximate location, collected automatically through our website and analytics tools.
• Communications, including the content of messages you send us via WhatsApp, email, the contact form, or telephone.

3. How we collect your information

We collect your personal information in the following ways:

• Directly from you when you complete our assessment form, savings calculator, or contact us by phone, email, or WhatsApp.
• From your credit providers, with your written consent, when we conduct a debt review on your behalf.
• From credit bureaux (TransUnion, Experian, Compuscan, XDS), with your consent, when assessing your financial situation.
• Automatically through cookies and analytics tools when you browse our website.

4. Why we process your information

We process your personal information for the following purposes:

• To provide debt counselling and debt review services as regulated under the National Credit Act.
• To respond to your enquiries and provide a free debt assessment.
• To verify your identity and assess your financial position.
• To communicate with you regarding the status of your application and ongoing debt review.
• To meet our legal and regulatory obligations under the NCA and NCR Code of Conduct.
• To improve our website, services, and customer experience.
• To comply with court orders, legal proceedings, or other regulatory requirements.

5. Lawful basis for processing

We process your personal information based on the following lawful grounds under POPIA:

• Your consent. You provide consent when you submit our forms or tick the POPIA consent box.
• Compliance with legal obligations imposed on us as a registered debt counsellor.
• The performance of a contract between you and Mzansi Debt for the provision of debt counselling services.
• Our legitimate interests in operating, improving, and securing our business, where these are not overridden by your rights.

6. Who we share your information with

We do not sell your personal information. We may share it with the following third parties, strictly as necessary to provide our services or comply with the law:

• Your credit providers, to notify them of your debt review and negotiate restructured payment plans.
• Payment Distribution Agencies (PDAs), regulated entities that distribute your monthly payment to your creditors.
• Credit bureaux, to update your credit profile with the status of your debt review.
• The National Credit Regulator and the National Consumer Tribunal, as required by the NCA.
• Magistrate's Courts and attorneys, when court applications are made on your behalf.
• Service providers, including our hosting provider, email service, and analytics provider, who process information on our behalf under contracted confidentiality obligations.

7. How long we keep your information

We retain your personal information for as long as is necessary for the purposes set out in this policy, and as required by South African law. The NCA and NCR require debt counsellors to retain client records for a minimum of five (5) years from the date of file closure. Where you have only enquired but not become a client, we retain your enquiry for up to two (2) years for legitimate business purposes, after which it is securely deleted.

8. How we protect your information

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include encrypted website connections (HTTPS), restricted access to client records, password-protected systems, regular software updates, and staff confidentiality obligations.

While we strive to use commercially acceptable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your rights under POPIA

As a data subject under POPIA, you have the right to:

• Access the personal information we hold about you.
• Request correction of any inaccurate or incomplete information.
• Request deletion of your information, subject to our legal retention obligations.
• Object to the processing of your information in certain circumstances.
• Withdraw consent at any time, where processing is based on consent.
• Complain to the Information Regulator if you believe your rights have been infringed.

To exercise any of these rights, contact our Information Officer using the details provided at the end of this policy. We will respond within 30 days as required by POPIA.

10. Direct marketing

We may, from time to time, contact you with information about our services or related financial education content. You may opt out of marketing communications at any time by replying "STOP" to any SMS or WhatsApp message, clicking the unsubscribe link in any email, or contacting us directly. Opting out of marketing does not affect operational communications regarding your debt review.

11. Cookies and tracking

Our website uses cookies and similar tracking technologies to provide functionality, analyse traffic, and improve your experience. Categories of cookies we use include:

• Essential cookies, which are required for the website to function.
• Analytics cookies (such as Google Analytics), which help us understand how visitors use the site.
• Functional cookies, which remember your preferences.

You can disable cookies in your browser settings, though some site features may not function correctly as a result.

12. Cross-border transfers

Some of our service providers (such as cloud hosting, email, and analytics services) may process your personal information on servers located outside South Africa. Where this occurs, we ensure that adequate safeguards are in place to protect your information in accordance with POPIA requirements.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The latest version will always be available on our website with the "last updated" date. Continued use of our services after changes are posted indicates your acceptance of the revised policy.

14. Information Officer

In accordance with POPIA, we have appointed an Information Officer responsible for ensuring compliance with this policy. Contact details for our Information Officer are provided in the contact block below.

15. Complaints to the Information Regulator

If you believe we have not adequately addressed a privacy concern, you have the right to lodge a complaint with the Information Regulator of South Africa:

Information Regulator of South Africa
JD House, 27 Stiemens Street, Braamfontein, Johannesburg
Email: inforeg@justice.gov.za
Website: inforegulator.org.za