Privacy Policy
Last Updated: May 2026
1. Introduction
ASSETFIN Holdings (Pty) Ltd ("ASSETFIN", "the Company", "we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of all personal information entrusted to us by our clients, employees, partners, and stakeholders. This Privacy Policy outlines how ASSETFIN collects, processes, stores, protects, and uses personal information in compliance with applicable laws, including the Protection of Personal Information Act, 4 of 2013 ("POPIA"), the Financial Intelligence Centre Act ("FICA"), and other relevant financial sector regulations.
We recognise the increasing risks associated with cybercrime, identity theft, unauthorised access, fraud, and misuse of personal information. ASSETFIN is committed to implementing appropriate safeguards to prevent unlawful access, disclosure, alteration, destruction, or abuse of personal information.
2. Purpose of Collecting Personal Information
ASSETFIN may collect and process personal information for the following purposes:
- Providing insurance and financial services
- Processing funeral cover applications
- Conducting customer identification and verification (KYC/FICA)
- Managing policies, claims, and customer accounts
- Communicating with clients regarding products and services
- Processing payments and debit orders
- Preventing fraud, cybercrime, and financial misconduct
- Complying with legal and regulatory obligations
- Improving customer service and operational efficiency
3. Information We Collect
The personal information collected may include, but is not limited to:
- Full names and surnames
- Identity or passport numbers
- Contact details (email, phone, address)
- Residential and postal addresses
- Banking details
- Employment information
- Beneficiary details
- Medical information where applicable
- Digital communication records
- Device and online activity information where legally permissible
4. Consent and Lawful Processing
ASSETFIN will only collect and process personal information:
- With the client's knowledge and consent
- Where processing is necessary to provide services
- Where required by law or regulatory obligations
- Where processing protects legitimate interests of the client or the Company
Personal information will never be sold, unlawfully shared, or disclosed to unauthorised third parties without consent, unless required by law.
5. Protection Against Cybercrime and Unauthorised Access
ASSETFIN implements strict security measures designed to safeguard personal information against cyber threats and abuse. These measures include:
- Secure digital systems and encrypted databases
- Restricted employee access controls
- Password-protected systems
- Firewall and antivirus protection
- Continuous monitoring of suspicious activity
- Secure cloud storage technologies
- Staff confidentiality agreements
- Cybersecurity awareness and training
- Data backup and recovery systems
ASSETFIN continuously reviews and strengthens its cybersecurity controls to minimise risks associated with hacking, identity theft, data breaches, phishing attacks, fraudulent access, and unauthorised disclosure of information.
6. Sharing of Information
Personal information may only be shared with:
- Underwriters and insurance partners
- Regulatory authorities
- Financial institutions where required
- Service providers acting on behalf of ASSETFIN
- Law enforcement agencies where legally required
All third-party service providers are required to maintain strict confidentiality and data protection standards.
7. Client Rights
Clients have the right to:
- Access their personal information
- Request correction of inaccurate information
- Object to unlawful processing
- Withdraw consent where applicable
- Request deletion of information where legally permissible
- Lodge complaints regarding misuse of personal information
Requests may be submitted to ASSETFIN through the contact details provided below.
8. Retention of Information
ASSETFIN retains personal information only for as long as necessary:
- To fulfil contractual obligations
- To comply with legal and regulatory requirements
- To resolve disputes
- To prevent fraud and financial crime
Information that is no longer required will be securely destroyed or permanently anonymised.
9. Confidentiality Obligations
All employees, contractors, agents, and service providers associated with ASSETFIN are required to:
- Maintain confidentiality of client information
- Use information strictly for authorised purposes
- Comply with all applicable privacy and data protection laws
Any unlawful disclosure or misuse of client information may result in disciplinary action, termination, civil liability, or criminal prosecution.
10. Reporting Cybercrime or Data Breaches
Clients who suspect fraudulent activity, identity theft, unauthorised use of information, cybercrime incidents, or suspicious communications are encouraged to immediately report the matter to ASSETFIN for urgent investigation and intervention.
11. Amendments to this Privacy Policy
ASSETFIN reserves the right to amend this Privacy Policy from time to time to comply with legal, operational, or technological developments. Updated versions of the policy will be made available to clients through official communication platforms.
12. Contact Information
ASSETFIN Holdings (Pty) Ltd
Information Officer: Lebohang H. Shasha
Email: lebo@astfin.co.za
Telephone: 010 203 9794 / 071 686 1028
Physical Address: 61 Bergrivier Drive, Terenure, 1620
Declaration
By engaging with ASSETFIN Holdings (Pty) Ltd and using our services, clients acknowledge that they have read, understood, and accepted this Privacy Policy and consent to the lawful processing of their personal information in accordance with applicable laws and regulations.