OUR PRIVACY NOTICE
Infinite Risk Services (Pty) Ltd respects the right to privacy and confidentiality of our potential and existing client’s personal information. We are committed to protecting your privacy and to ensure that your personal information is collected and used properly, lawfully and transparently.
The purpose of this notice
This privacy notice is meant to help you understand the type of personal information Infinite Risk Services collects and how we collect, use, share and protect your personal information. Infinite Risk subscribes to the conditions of the Protection of Personal Information Act (POPIA) as well as the principles set out in Section 51 of the Electronic Communications and Transactions Act 25 of 2002 to make sure that you are always protected when supplying us with personal information.
What is personal information?
The Protection of Personal Information Act 9 (POPIA) describes personal information as information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person.
Examples of personal information include, but are not limited to, contact information, financial information, information relating to race, gender, sexual orientation, age, contact details, identity number, religion, name, culture, language and nationality.
The person to whom personal information relates is referred to as the “data subject”.
What type of personal information does Infinite Risk collect?
The type of information we collect will depend on the purpose for which it is collected and used. We will only collect information that we need for that purpose.
When personal information is collected, the company will indicate the purpose for the collection and whether the information required is compulsory or voluntary.
Personal information collected by Infinite Risk can include a data subject’s name, contact details, birth date, identity number, gender, employment details, marital status, family, policy details, claims history location information, online identifier, bank account, medical, financial information.
How does Infinite Risk collect personal information?
Infinite Risk collects information either directly from the data subject or through the employer. In certain instances, the insurer whom Infinite Risk will share the information, may request third parties to collect on its behalf. The source from which personal information was obtained, if not directly from the data subject, will be disclosed.
Use of personal information.
After obtaining consent, the personal information collected or held by Infinite Risk may be used, stored, transferred, or disclosed or shared only for the purposes for which it was collected or agreed with you. This may include:
- For underwriting purposes.
- To assess and process claims;
- Providing on-going administration services for the duration of the contract;
- Fulfilling a transaction on request of a data subject;
- To respond to your inquiries and/or complaints;
- For Insurers to confirm and verify your identity or to verify that you are an authorised person for security purposes;
- For Insurers to perform detection and prevention of fraud, crime, money laundering or other malpractice.
- For any other purpose associated with your policy/contract or applicable legislation
Records of personal information will be retained for the period necessary for achieving the purpose for which the information was collected and as prescribed by applicable legislation. Please note that you have a right to object to the processing of your personal information for example for purposes of direct marketing, unless consent was obtained from you.
Methods of processing
Data processing is carried out using computers and/or IT-enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In some cases, the data may be accessible to certain types of persons in charge, involved with the operations inside Infinite Risk (underwriting, compliance, marketing, system administration, etc.) or external parties (such as third- party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as data processors by Infinite Risk Services.
Sharing of personal information
Infinite Risk Services will only share your personal information with third parties if you have consented to such disclosure. If consent has been obtained, the company may share your personal information with third parties who are involved in the delivery of services to you. We have agreements in place to ensure that they comply with the Protection of Personal Information Act, No 4 of 2013.
Where Infinite Risk Services discloses personal information to any third parties, the third party will be obliged to use that personal information only for the reasons and purposes it was disclosed for. We may be obliged to share your personal information to the extent that it is required to do so by law, for the purposes of achieving the objectives of your policy/contract, in connection with any legal proceedings or prospective legal proceedings, or for the purposes of protecting the interest of clients, for example fraud prevention or to give effect to an agreement.
Securing personal information
Infinite Risk processes the data of data subjects in a proper manner and shall take all reasonable technical and organizational security measures to prevent loss of, damage of personal information, unauthorized access, disclosure, modification, or unauthorized destruction of the data. The company will store all the personal information in secured environments, for example on secured Cloud space and External Data Solutions Service Provider’s servers in a protected data center.
Right to access and rectify personal information collected.
You have the right to request to review your personal information contained by Infinite Risk at any time to correct or update the information. If the purpose for which your personal information was requested initially does not exist anymore, for example you no longer have an active contract, you may request information held by the company to be removed. However, Infinite Risk can decline your request to delete the information from its records if other legislation requires the continued retention thereof or if it has been de-identified.
If you would like to obtain a copy of your personal information held by Infinite Risk, please review our information manual located at www.infiniterisk.co.za
Disclaimer
The disclaimer set out below applies to this website
Apart from the provisions of sections 43(5) and 43(6) of the Electronic Communications and Transactions Act, as amended, neither Infinite Risk nor any of Insurers they have a mandate with or representatives shall be liable for any damage, loss or liability of whatsoever nature arising from the use or inability to use this web site or the services or content provided from and through this web site. Furthermore, Infinite Risk makes no representations or warranties, implied or otherwise, that, amongst others, the content and technology available from this website are free from errors or omissions or that the service will be 100% uninterrupted and error free. Users are encouraged to report any possible malfunctions and errors to the webmaster.
Information, ideas and opinions expressed on this site should not be regarded as professional advice of Infinite Risk, but users are encouraged to consult professional advice before taking any course of action related to information, ideas or opinions expressed on this site.
Neither Infinite Risk Services nor its representatives shall be liable for any damage, loss or liability of whatsoever nature arising from the use or inability to use this web site or the information on this web site.
We take reasonable and necessary precautions to secure your transactions on our website – however, we cannot guarantee the confidentiality of your transactions. Using this website is entirely at your own risk. Infinite Risk Services will not be held legally responsible for any personal information that you reveal to a third party, which has a link on the www.infiniterisk.co.za website. It is important that you refer to that third party’s privacy notice before you reveal any of your personal information.
Employee Training on Cyber Security and Data Privacy
Employee Training on Cyber Security and Data Privacy forms part of ongoing compliance training. Cyber Security training is currently further required as a basic compliance training that all employees must complete. As part of the POPIA management programme, there is a specific focus on training, awareness as well as communication that will cover data privacy, data security and more detailed cyber security training as mandatory compliance training to all staff.
Employee Training on Cyber Security and Data Privacy
Employee Training on Cyber Security and Data Privacy forms part of ongoing compliance training. Cyber Security training is currently further required as a basic compliance training that all employees must complete. As part of the POPIA management programme, there is a specific focus on training, awareness as well as communication that will cover data privacy, data security and more detailed cyber security training as mandatory compliance training to all staff.
Updating this Notice
Please note that we may amend this Notice from time to time. Please check this website periodically to inform yourself of any changes.
Infinite Risks’ Privacy Policy
Our Privacy Policy governs the way Infinite Risk Services treats your personal information, collected either by completion of manual Proposal forms or electronically when you use our website, contacting us electronically or register for one of the services we offer on the website.
How to Contact us
This Privacy Notice applies to Infinite Risk Services (Pty) Ltd.
Please direct any questions, complaints or concerns regarding this privacy notice, data privacy and our treatment of your Personal Information to the following:
Upon receiving your request, we will contact you directly, investigate your request, and work to address your concerns. We will respond to your request without undue delay. We reserve the right to take reasonable steps to verify your identity prior to granting access or processing changes or corrections.
INFORMATION REGULATOR
If you are not satisfied with the manner in which Infinite Risk has handled and/or resolves your query, complaint or concern, you have the right to complain to the Information Regulator, whose contact details are:
Tel: 012 406 4818
Fax: 086 500 3351
Email: inforeg@justice.gov.za