POPIA Information

1. Purpose

This page explains how PeerDeposit collects, uses, stores, shares and protects personal information in terms of the Protection of Personal Information Act, 2013.

2. Personal information collected

PeerDeposit may collect and process information including:

• names and surnames;
• South African identity numbers or passport details;
• dates of birth;
• email addresses and cellphone numbers;
• residential and property addresses;
• tenant and landlord details;
• lease agreements and supporting documents;
• payment and debit-order information;
• property photographs and inspection records;
• application, claim and correspondence records;
• login, account and security information; and
• other information reasonably required to provide the service.

3. Reasons for processing information

Personal information may be processed for:

• registering and administering user accounts;
• verifying identity and supporting documents;
• assessing applications;
• preparing quotations and agreements;
• communicating with tenants, landlords and agents;
• administering payments and debit orders;
• processing and assessing claims;
• preventing fraud and managing risk;
• recovering amounts lawfully owing;
• complying with legal and regulatory obligations; and
• maintaining and improving the PeerDeposit platform.

4. Sources of information

Personal information may be collected directly from:

• the Applicant;
• the tenant or landlord;
• a letting agent or property manager;
• supporting documents submitted through the platform;
• email, SMS, WhatsApp or telephone communications;
• payment and service providers; and
• lawful verification or public sources.

5. Sharing of information

PeerDeposit may share personal information with parties where reasonably necessary and legally permitted, including:

• the tenant, landlord or authorised agent;
• hosting and cloud-storage providers;
• payment and debit-order processors;
• email, SMS and communication providers;
• identity-verification and fraud-prevention providers;
• professional advisers, attorneys and debt-recovery agents;
• regulators, courts and law-enforcement authorities; and
• other service providers acting on PeerDeposit's instructions.

PeerDeposit does not sell personal information.

6. Security safeguards

PeerDeposit uses reasonable technical and organisational measures to protect personal information against loss, unauthorised access, unlawful processing, alteration or disclosure.

These measures may include:

• password-protected user accounts;
• restricted administrative access;
• secure cloud storage;
• encrypted website connections;
• access controls and audit records;
• data backups; and
• operational security procedures.

7. Retention of information

Personal information will be retained only for as long as reasonably required for the purpose for which it was collected, or for as long as required by law, contract, accounting, dispute, claim or debt-recovery requirements.

Information may be securely deleted, destroyed or de-identified when it is no longer required.

8. Accuracy of information

Applicants are responsible for providing accurate, complete and current information.

Users should notify PeerDeposit promptly where information changes or is found to be incorrect.

9. Rights of data subjects

Subject to applicable law, a person may have the right to:

• request confirmation that PeerDeposit holds personal information;
• request access to personal information;
• request correction or updating of inaccurate information;
• request deletion or destruction where legally permitted;
• object to certain processing;
• withdraw consent where processing is based on consent;
• complain about unlawful processing; and
• approach the Information Regulator.

10. Requests to access or correct information

A request should be submitted in writing and should include:

• the person's full name;
• identity number or other proof of identity;
• contact details;
• the information concerned;
• the correction or action requested; and
• supporting documents where relevant.

11. Direct marketing

PeerDeposit may send service-related communications necessary for the administration of an account, application, agreement, payment or claim.

Marketing communications will be sent only where permitted by law. A person may opt out of marketing communications using the method provided in the communication or by contacting PeerDeposit.

12. Cookies and website information

The PeerDeposit website may use cookies or similar technologies to support login sessions, website functionality, security and usage analysis.

Browser settings may allow users to restrict or block cookies, but doing so may affect the operation of certain website functions.

13. Information breaches

Where there are reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, PeerDeposit will investigate and take appropriate steps in accordance with applicable law.

14. Cross-border processing

Some service providers may process or store information outside South Africa.

Where this occurs, PeerDeposit will take reasonable steps to ensure that the transfer and processing comply with applicable data-protection requirements.

15. Information Officer

Requests, objections, complaints and questions regarding personal information may be submitted to the PeerDeposit Information Officer.

16. Complaints to the Information Regulator

A person who believes that personal information has been processed unlawfully may lodge a complaint with the Information Regulator of South Africa.

17. Changes to this information

PeerDeposit may update this page from time to time to reflect operational, legal or regulatory changes.

The updated version will apply from the date published on the website.