1. Introduction

TD LOANS is committed to protecting your personal information in accordance with:

• The Protection of Personal Information Act 4 of 2013 (POPIA)
• The National Credit Act 34 of 2005 (NCA)
• The Financial Intelligence Centre Act 38 of 2001 (FICA)

This policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect both personal and non-personal information necessary for providing financial services:

• Personal Identification: Full name, ID number, date of birth, photographs
• Contact Information: Physical address, email, telephone numbers
• Financial Information: Bank account details, credit history, income details
• Employment Information: Employer details, job title, length of employment
• Technical Data: IP address, browser type, device information when using our website

3. How We Use Your Information

We process your personal information lawfully and transparently for the following purposes:

• To assess and process loan applications and other financial products
• To verify your identity and prevent fraud
• To conduct credit checks and risk assessments
• To provide ongoing customer service and account management
• To comply with legal and regulatory requirements
• For statistical analysis and business improvement
• To communicate important notices and service updates

4. Information Sharing & Disclosure

We may share your information with third parties only when necessary and with appropriate safeguards:

• Credit Bureaus: To report and obtain credit information as required by law
• Regulatory Authorities: When required by the NCR, FSCA, or other authorities
• Service Providers: Carefully vetted partners who assist with payment processing, IT services, and other operational needs
• Legal Requirements: When compelled by court order or legal process

We never sell your personal information to third parties.

5. Data Security Measures

We implement robust technical and organizational measures to protect your information:

• Encryption of sensitive data in transit and at rest
• Access controls and authentication protocols
• Regular security audits and vulnerability testing
• Employee training on data protection
• Secure document disposal procedures

6. Your Rights Under POPIA

As a data subject, you have the right to:

• Request access to your personal information we hold
• Request correction or deletion of inaccurate information
• Object to the processing of your personal information
• Request restriction of processing
• Lodge a complaint with the Information Regulator
• Withdraw consent (where processing is based on consent)

7. Data Retention

We retain personal information only as long as necessary:

• Active customer data: 5 years after last interaction
• Financial records: 5 years as required by the Financial Sector Conduct Authority
• Credit application data: 3 years as per NCA requirements
• Closed accounts: 5 years for legal and audit purposes

9. Policy Updates

We may update this policy periodically. Significant changes will be communicated through our website or direct notification when required by law.