Privacy policy

1. Who is responsible for your information?

NDCsa Africa is the responsible party for personal information processed through this website and our services.

Office: 16 Purley Road, Bellair, Durban, KwaZulu-Natal, 4001, South Africa · Email: manager@ndcsaafrica.co.za · Telephone: 031 396 5464

2. Personal information we collect

• Identity and contact information: name, identity number, email address, telephone number, physical or postal address and preferred contact method.
• Financial and case information: monthly income, employment information, debt-review status, credit information, credit reports, account or payment information, paid-up letters, court or Tribunal documents and other information you provide for an assessment or service.
• Communications: messages, form submissions, emails, telephone or WhatsApp correspondence, instructions, consents and records of our interaction with you.
• Technical and usage information: IP address, browser and device type, operating system, pages viewed, referring page, date and time of access, cookie or similar identifiers and website interaction events.
• Other information you choose to provide: information in uploaded documents, free-text messages, enquiries, feedback or testimonials.

Please do not provide personal information that is not reasonably required for your enquiry or service.

3. How we collect information

Directly from you (forms, contact, WhatsApp, assessment requests, supporting documents); automatically through cookies, analytics, server logs and similar website technologies; from credit bureaus or other authorised sources with required consent or another lawful basis; and from service providers or public records where lawful and relevant.

4. Why we process personal information

Only for a specific, lawful purpose, including to: respond to enquiries and provide a free initial assessment; confirm your identity, debt-review position, credit-record status and relevant evidence; obtain and assess a credit profile where authorised; provide, administer and communicate about requested services; manage client records, appointments, follow-ups and customer support; process payments, maintain business and tax records, resolve disputes and enforce agreements; secure, troubleshoot, measure and improve the website and services; prevent fraud, misuse, unlawful activity and security incidents; comply with legal, regulatory, professional or court requirements; and send service communications and, where permitted, relevant marketing.

5. Lawful grounds for processing

Consent, steps requested before entering into an agreement, performance of an agreement, compliance with a legal obligation, protection of a legitimate interest, or another ground permitted by POPIA. Consent may be withdrawn at any time; withdrawal does not affect processing that was already lawful.

6. Credit-profile assessments and sensitive financial information

An assessment may require identity, financial, debt-review and credit-record information, used only where relevant. A credit profile is obtained only with required authorisation or another lawful basis. Providing information does not guarantee a particular outcome; recommendations depend on the facts and supporting evidence in each matter.

7. When we share information

Only where reasonably necessary and lawful, including with: credit bureaus, creditors, debt counsellors, legal or other case-related service providers; website hosting, form, CRM, email, communications, document-storage, security, analytics and IT providers; professional advisers, insurers, auditors or payment providers; regulators, courts, law-enforcement agencies or other authorities; and a successor or purchaser in a genuine business reorganisation or transfer.

Services used may include WordPress and website plugins, Privyr CRM, email-delivery services, WhatsApp, Google Tag Manager, Google Analytics and Google-hosted review or mapping features.

We do not sell personal information.

8. Cookies, analytics and third-party features

Necessary cookies (security and essential operation), preference cookies, analytics cookies (traffic, pages viewed, referring sources, performance), and third-party features such as WhatsApp links, Google services, social-media links and embedded reviews. Cookies can be restricted or deleted via your browser settings; blocking necessary cookies may affect functionality.

9. Direct marketing

Marketing by email, SMS, telephone or similar electronic communication only where permitted by law; you can opt out at any time via unsubscribe or by contacting us. Service, security and transactional messages may still be sent.

10. International processing

Some technology providers may process or store information outside South Africa; reasonable steps are taken to ensure adequate protection or another POPIA transfer ground applies.

11. Retention

Retained only as long as reasonably necessary for the purpose, the continuing service or relationship, and legal, tax, regulatory, evidential or dispute-resolution requirements. Periods vary by record and purpose; thereafter information is securely deleted, destroyed or de-identified, subject to backup and legal-retention cycles.

12. Security

Reasonable technical and organisational safeguards: access controls, reputable service providers, website security measures, backups, and staff or contractor confidentiality obligations. No system is completely secure. Breaches carrying a legal notification obligation are reported to the Information Regulator and affected data subjects as required by POPIA.

13. Your rights

Subject to POPIA, you may ask whether we hold personal information about you and request access; request correction, updating or deletion of inaccurate, irrelevant, excessive, outdated or unlawfully obtained information; object to processing; withdraw consent; request evidence of an authorisation or consent; and lodge a complaint with the Information Regulator. Identity verification may be required.

14. Children

This website is intended for adults. We do not knowingly collect information from a child without the consent of a competent person or another lawful basis.

15. External websites

Third-party privacy practices are governed by their own notices.

16. Complaints

Contact us first. POPIA complaints may be lodged with the South African Information Regulator:

• Website: inforegulator.org.za/complaints
• POPIA complaints: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za, or 010 023 5200

17. Changes to this policy

This policy is updated when services, technology or legal obligations change. The current version is published with a revised "last updated" date.

18. Contact us

NDCsa Africa, 16 Purley Road, Bellair, Durban, KwaZulu-Natal, 4001, South Africa · manager@ndcsaafrica.co.za · 031 396 5464