Privacy Policy

Fraudcheck (Pty) Ltd (“Fraudcheck”, “we”, “our” or “us”) respects your privacy and is committed to protecting personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) and other applicable legislation.

Fraudcheck provides identity verification, background screening, compliance and fraud prevention services to businesses and organisations.

This Privacy Policy explains how Fraudcheck collects, uses, processes, stores and protects personal information through:

• our website;
• our verification platforms;
• API integrations;
• background screening services; and
• interactions with our clients and users.

By accessing our services, website or systems, you acknowledge that your personal information may be processed in accordance with this Privacy Policy.

If at any time you believe that your personal information is being processed incorrectly or for purposes other than those originally intended, you may contact our Information Officer.

Fraudcheck commits to:

• Obtaining and processing personal information fairly and lawfully.
• Processing information only for specific, lawful purposes.
• Ensuring personal information is accurate, relevant and not excessive.
• Keeping personal information secure.
• Retaining personal information only as long as necessary.
• Providing access to personal information upon lawful request.

Fraudcheck is a provider of:

• identity verification services
• background screening
• fraud detection and prevention
• credit verification services
• compliance and risk mitigation services
• API-based verification solutions

Fraudcheck processes personal information both:

• on behalf of its clients, and
• for its own legitimate business and compliance purposes.

Fraudcheck collects personal information in order to provide identity verification, background screening, fraud detection and compliance services.

Personal information may be collected:

• directly from individuals
• from our clients
• from our clients’ customers or employees
• through consent and indemnity forms
• through API integrations
• from authorised third-party data providers
• from regulatory databases
• through website cookies and analytics tools

Personal information may be collected either electronically or in physical form.

Fraudcheck may process the following types of personal information.

• Identification Information

This may include:

• full name
• identity number
• passport number
• date of birth
• nationality
• gender
• residential status
• Contact Information

Including:

• email addresses
• telephone numbers
• physical addresses
• postal addresses
• Employment and Education Information

Including:

• employment history
• professional qualifications
• education records
• professional memberships
• Financial and Credit Information

Where legally permitted:

• credit bureau records
• financial behaviour data
• adverse credit listings
• payment behaviour information
• Verification and Background Screening Data

Where authorised:

• criminal record verification
• identity verification results
• reference checks
• employment verification results
• qualification verification results
• Technical and System Information

When using Fraudcheck systems or website:

• IP addresses
• browser type
• device identifiers
• system logs
• API usage logs
• access records

Fraudcheck processes personal information where processing is necessary in terms of applicable legislation, including but not limited to:

• Promotion of Access to Information Act 2 of 2000
• Financial Intelligence Centre Act 38 of 2001
• Financial Advisory and Intermediary Services Act 37 of 2002
• Prevention of Organised Crime Act 121 of 1998
• Companies Act 71 of 2008
• Protection of Personal Information Act 4 of 2013
• Income Tax Act 58 of 1962
• Consumer Protection Act 68 of 2008
• Basic Conditions of Employment Act 75 of 1997
• Labour Relations Act 66 of 1995
• Employment Equity Act 55 of 1998
• Unemployment Insurance Act 63 of 2001
• Occupational Health and Safety Act 85 of 1993
• Electronic Communications and Transactions Act 25 of 2002

Fraudcheck may also process information based on:

• consent of the data subject
• contractual obligations
• legitimate business interests
• fraud prevention requirements

Fraudcheck processes personal information for purposes including:

• identity verification
• background screening
• fraud detection and prevention
• credit reference checks
• risk mitigation services
• regulatory compliance
• administration of services
• responding to client requests
• investigation of complaints
• improving system security and performance

Fraudcheck will only process personal information where the purpose is lawful and reasonably expected.

Fraudcheck services may be accessed through automated platforms or API integrations used by authorised clients.

Where such integrations occur:

• personal information may be processed through automated verification systems;
• clients remain responsible for ensuring that information submitted through APIs has been collected lawfully; and
• Fraudcheck may monitor usage to detect misuse, excessive queries or unlawful processing.

Fraudcheck reserves the right to suspend access where suspicious or unauthorised activity is detected.

Fraudcheck may share personal information with third parties where necessary for service delivery or where required by law.

Such parties may include:

• clients who request verification checks
• employers
• credit bureaus
• identity verification providers
• auditors
• consultants and compliance advisors
• regulatory authorities
• law enforcement agencies
• IT infrastructure providers
• analytics providers

Fraudcheck takes reasonable steps to ensure that third parties apply appropriate privacy and security safeguards.

Fraudcheck does not sell personal information for marketing or unrelated commercial purposes.

Personal information may be stored on servers located outside the Republic of South Africa.

Where cross-border transfers occur, Fraudcheck ensures that appropriate safeguards are in place and that personal information receives protection consistent with POPIA.

Fraudcheck’s website may use cookies and similar technologies to improve user experience and monitor website performance.

Cookies may be used for:

• essential website functionality
• analytics and performance monitoring
• security monitoring
• user preferences

Users may configure browser settings to disable cookies, although some website functionality may be limited.

Fraudcheck implements reasonable technical and organisational safeguards to protect personal information.

Security measures may include:

• secure data storage
• system monitoring
• access control and authentication
• encryption where appropriate
• system audits
• incident response procedures

Despite these safeguards, no system can guarantee absolute protection against cyber threats.

In the event of a data breach, Fraudcheck will comply with applicable breach notification requirements.

Fraudcheck retains personal information only for as long as necessary to:

• fulfil service obligations
• comply with regulatory requirements
• maintain fraud prevention records
• resolve disputes

Personal information may thereafter be securely deleted, anonymised or archived.

In terms of POPIA, individuals have the right to:

• request confirmation of whether personal information is held about them
• request access to personal information
• request correction of inaccurate or outdated information
• object to the processing of personal information
• request deletion where legally permissible
• lodge a complaint with the Information Regulator

Fraudcheck may require verification of identity before processing such requests.

Requests may take up to 21 business days to process.

If you believe your personal information has been processed in a manner that does not comply with POPIA, you may lodge a complaint with Fraudcheck’s Information Officer.

You may also lodge a complaint with the Information Regulator.

Information Regulator of South Africa JD House 27 Stiemens Street Braamfontein Johannesburg 2001

Email: complaints.IR@justice.gov.za

Website: https://www.justice.gov.za/inforeg/

Fraudcheck reserves the right to amend this Privacy Policy from time to time.

Any updates will be published on the Fraudcheck website.

Fraudcheck’s website may contain links to third-party websites.

Fraudcheck is not responsible for the privacy practices of such websites.

All intellectual property rights contained in Fraudcheck’s systems, website and services remain the property of Fraudcheck.

Fraudcheck makes no representations regarding third-party websites linked from this website and accepts no responsibility for their privacy practices.