Privacy Policy

1. Introduction

FloatPay (Pty) Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website floatpay.org or use our services.

FloatPay operates in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African data protection legislation. Our Information Officer is Alex Forsyth-Thompson.

2. Information We Collect

2.1 Information You Provide

We may collect information you provide directly to us, such as when you:

• Apply to use FloatPay as a consumer or merchant
• Fill out a contact form
• Subscribe to our newsletter
• Complete a FloatPay checkout session
• Communicate with us via email or telephone

This information may include your name, South African ID number, email address, mobile phone number, bank account details, company name, and any other information you choose to provide.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring website or source
• Device type and operating system

2.3 Financial Information

As a credit provider under the National Credit Act 34 of 2005, we collect and process financial information including bank account details (for direct debit), income declarations for affordability assessments, and transaction history. This information is processed strictly for the purpose of providing BNPL services and in accordance with the NCA and POPIA.

3. How We Use Your Information

We use the information we collect to:

• Process your FloatPay payment transactions and manage your account
• Conduct affordability assessments as required by the National Credit Act
• Respond to your enquiries and provide customer support
• Send you transactional notifications (payment confirmations, upcoming debit reminders)
• Send you newsletters and marketing communications (with your consent)
• Improve our website and services
• Prevent fraud and ensure the security of our platform
• Comply with legal obligations under the NCA, POPIA, and other applicable legislation

4. Legal Basis for Processing (POPIA)

Under POPIA, we process your personal information on the following grounds:

• Contract performance — Processing necessary for the performance of a contract to which you are party (e.g., your FloatPay agreement)
• Legal obligation — Processing required to comply with the NCA, FICA, or other applicable legislation
• Legitimate interest — Processing for fraud prevention and security purposes
• Consent — For marketing communications, where you have given explicit consent

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy.

6. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Payment processors and banking partners for settlement and debit order processing
• Credit bureaux as required by the NCA for affordability assessments
• Service providers who assist us in operating our website and conducting our business (subject to data processing agreements)
• Legal authorities when required by law, court order, or to protect our rights
• Merchant partners limited to information required to fulfil your purchase

All third parties who process personal information on our behalf are required to maintain appropriate security measures and may only use the information for the specified purpose.

7. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

8. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights regarding your personal information:

• Right to be notified when personal information is collected
• Right to access your personal information
• Right to request correction of inaccurate information
• Right to request deletion of your information (subject to legal retention requirements)
• Right to object to processing for direct marketing purposes
• Right to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us at [email protected] or write to our Information Officer at our registered address.

The Information Regulator of South Africa can be contacted at: www.justice.gov.za/inforeg/

9. Retention of Personal Information

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Credit-related records are retained for the period required under the NCA. Transaction records are retained for a minimum of 5 years for compliance purposes.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites and encourage you to review their privacy policies.

11. Children's Privacy

FloatPay services are available to persons 18 years and older only, as required by South African consumer credit law. We do not knowingly collect personal information from persons under the age of 18.

12. Cross-Border Transfers

We may transfer personal information to service providers outside South Africa, subject to ensuring that appropriate safeguards are in place as required by POPIA section 72.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes affecting your rights, we will notify you by email where we hold your contact details.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or wish to lodge a complaint, please contact our Information Officer:

FloatPay (Pty) Ltd
Information Officer: Alex Forsyth-Thompson
Portside Tower, 5th Floor, 4 Bree Street, Cape Town, Western Cape 8001
Email: [email protected]
Phone: +27 21 073 5519