Introduction
PaidNow Group (Pty) Ltd ("PaidNow", "we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and all applicable South African data protection legislation.
This policy explains what personal information we collect, why we collect it, how we use it, and your rights as a data subject.
Information We Collect
We collect the following categories of personal information:
- Contact information: name, phone number, email address
- Identity information: South African ID number (for KYC verification)
- Financial information: bank account details, branch code
- Employment information: employer name, payroll data, shift records
- Device information: device type, push notification tokens
- Waitlist data: email address and submission timestamp
How We Use Your Information
We process your personal information for the following purposes:
- Providing earned wage access services
- Verifying your identity (KYC/FICA compliance)
- Processing withdrawals and transfers
- Communicating service updates and notifications
- Improving our platform and user experience
- Complying with legal and regulatory obligations
We will not use your personal information for any purpose other than those listed above without your explicit consent.
Legal Basis for Processing
We process your personal information on the following lawful grounds under POPIA:
- Consent: You provide explicit consent when registering and accepting our terms
- Contract: Processing is necessary to provide our services to you
- Legal obligation: We are required to verify identity under FICA
- Legitimate interest: Improving our services and preventing fraud
Data Storage and Security
All personal information is stored in South Africa on secure, enterprise-grade cloud infrastructure.
We implement the following security measures:
- Encryption at rest and in transit for all sensitive data
- Column-level encryption for identity and financial information
- Secure token-based authentication
- Role-based access controls
- Regular security assessments
Data Sharing
We do not sell your personal information. We may share your information with:
- Your employer: Payroll reconciliation data only
- Payment processors: To facilitate bank transfers
- Regulatory authorities: When required by law
All third parties are contractually bound to protect your information in accordance with POPIA.
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When your information is no longer needed, it is securely deleted or anonymised.
Your Rights Under POPIA
As a data subject, you have the right to:
- Access your personal information held by us
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to the processing of your information
- Withdraw your consent at any time
- Lodge a complaint with the Information Regulator
Cookies
Our website does not use cookies for analytics or tracking. A third-party font provider (Fontshare) may set a functional session cookie when loading fonts. This cookie is not used for tracking or advertising purposes.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact Us
If you have any questions about this privacy policy or wish to exercise your rights, contact our Information Officer at:
Email: info@paidnow.live