Legal

Privacy Policy

How Float collects, uses, and protects your personal information.

Last updated: November 2024

1. Who we are

Float (referred to as "Float", "we", "us", or "our") operates floatpay.org and provides installment plan services for South African credit cardholders. Our registered address is Portside Tower 5th Floor, 4 Bree Street, Cape Town, Western Cape 8001, South Africa. Contact: [email protected].

2. Information we collect

We collect personal information that you provide directly or that arises from your use of our service:

  • Identity information: name, identity number, contact details
  • Financial information: credit card account identifiers (not card numbers), bank account details for DebiCheck mandates
  • Transaction data: transaction amounts, merchant categories, installment plan details
  • Communication data: WhatsApp Business interactions, contact form submissions
  • Usage data: site interaction logs, device type, IP address

3. How we use your information

We use your personal information to:

  • Operate, administer, and improve our installment plan services
  • Process and manage DebiCheck debit mandates
  • Send payment reminders and plan summaries via WhatsApp
  • Comply with South African financial services regulations and POPIA obligations
  • Prevent fraud and unauthorized transactions
  • Respond to your enquiries and support requests

4. Legal basis for processing

We process your personal information on the following lawful bases under POPIA: performance of a contract; compliance with a legal obligation; legitimate interests (fraud prevention, service improvement); and your consent where explicitly given.

5. Data sharing

We do not sell your personal information. We share data only with service providers necessary to deliver our service: Stitch or FinFlux (open banking), PayFast (payment processing), WhatsApp Business API operators, and DebiCheck processing partners. All third parties are bound by data processing agreements.

6. Data retention

We retain personal information for as long as necessary to deliver the contracted service and comply with legal obligations. Installment plan records are retained for a minimum of 5 years for regulatory compliance.

7. Your rights under POPIA

You have the right to access, correct, and in certain circumstances delete your personal information. You may withdraw consent for processing where consent is the legal basis. To exercise these rights, contact [email protected].

8. Security

Float uses industry-standard encryption and access controls to protect your personal information. We conduct periodic security reviews and limit access to personal data to authorized personnel only.

9. Contact

Questions or complaints about our privacy practices: [email protected] or Portside Tower 5th Floor, 4 Bree Street, Cape Town, Western Cape 8001. You may also lodge a complaint with the Information Regulator of South Africa.