We process personal information for the following purposes:

• Insurance policy administration
• Claims processing
• Marketing and sales
• Compliance with legal requirements

Data Collection:

We collect personal information through:

• Online applications
• Paper applications
• Telephone calls
• Email correspondence

Data Storage:

We store personal information on:

• Secure servers
• Encrypted databases
• Paper files (locked and access-controlled)

Data Security:

We implement the following security measures:

• Access controls (passwords, biometrics)
• Encryption (data at rest and in transit)
• Firewalls
• Secure storage
• Incident response plan

Data Subject Rights:

Data subjects have the following rights:

• Access to personal information
• Correction of personal information
• Deletion of personal information
• Restriction of processing
• Objection to processing
• Right to lodge a complaint

Complaints:

Complaints regarding personal information processing can be directed to the Information Officer, Wikus Terblanche, at wikus@khululeka.co.za.

Training and Awareness:

All employees who handle personal information receive training and awareness on POPI and our company’s policies and procedures.

Monitoring and Review:

We regularly monitor and review our POPI compliance to ensure that our policies and procedures are effective and up-to-date.

Regulator Registration:

We are registered with the Information Regulator (South Africa) as a responsible party.