PRIVACY POLICY
INTRODUCTION
At Mdalisu, we care about your privacy and are committed to protecting the personal
information you share with us. This Privacy Policy explains how we collect, use, store,
and share your information when you use our services, interact with our website, or en
gage with our team. We comply with the Protection of Personal Information Act (POPIA),
2013.
PURPOSE
The purpose of this Privacy Policy is to:
Help you understand what personal information we collect about you
• Explain why we collect it, and how we use it
• Describe who we may share it with
• Let you know how we keep it safe
• Inform you of your rights under POPIA
• Guide you on how to contact us if you have questions or want to update or remove
your data
This policy applies to all personal information processed by Mdalisu across all our ser
vices and platforms.
WHAT TYPE OF PERSONAL DATA DO WE COLLECT AND HOW DO WE USE IT?
We collect personal information that helps us deliver our financial and funeral services
to you. This includes:
- Your name and surname
- Identity number or other identification
- Contact information (email, phone, address)
- Employment and income information
- Bank details (for premium collections or claim payments)
- Policy or beneficiary information
- Voice recordings (from calls to our agents)
- Any information you provide when filling out forms or contacting us
We use this information to
- Provide you with our products and services
- Process applications, loans and claims
- Verify your identity
- Meet legal and regulatory requirements
- Communicate with you (including SMS and email updates)
- Improve our customer service and systems
We only collect the data we need, and we will always explain why we need it.
HOW DO WE SHARE PERSONAL DATA?
We may share your personal information with trusted third parties, including:
- Underwriters and insurers, to manage your policy
- Payment service providers, for collecting or paying money
- Our IT service providers, for managing secure systems
- Regulators, such as the FSCA, SARS, NCR or the Information Regulator, if legally
required - Our staff and representatives, only on a need-to-know basis
We do not sell your information to anyone. All parties we share information with are
required to protect your data in line with POPIA.
WHERE IS MY PERSONAL DATA TRANSFERRED?
In most cases, your personal information is processed within South Africa. If we ever
need to send data outside of the country (for example, for cloud services or international
compliance), we will:
- Ensure the receiving country has adequate data protection laws, or
- Sign data protection agreements to keep your information safe, as required by
Section 72 of POPIA.
HOW SECURE IS MY PERSONAL DATA?
We take the protection of your data seriously. We use a combination of:
- Physical safeguards (secure offices and document storage)
- Technical measures (encrypted systems, firewalls, passwords)
- Access controls (only authorised staff can access personal info)
- Ongoing training for staff on privacy and POPIA compliance
If we experience a data breach, we will notify you and the Information Regulator as re
quired by law.
WHAT KIND OF TECHNICAL DATA DO WE COLLECT?
When you use our website or online services, we may collect technical data such as:
- Your IP address
- Browser type and device information
- Pages visited and time spent
- Clicks and navigation behaviour
This data is collected using analytics tools to help us improve the performance, security,
and content of our website. It does not identify you directly unless combined with per
sonal data.
WHAT ABOUT COOKIES?
Cookies are small files stored on your device when you visit our website. We use cookies
too:
- Make the website function properly
- Remember your preferences
- Improve your browsing experience
- Track site usage (through tools like Google Analytics)
You can manage or delete cookies through your browser settings. Note that turning off
cookies may affect how the website works.
WHAT IS YOUR COMMITMENT TO CHILDREN’S ONLINE PRIVACY?
Mdalisu does not knowingly collect personal information from children under the age of
18 without the consent of a parent or legal guardian. If we discover that we have col
lected personal information from a child without proper consent, we will delete it imme
diately.
If you are a parent or guardian and believe your child has shared information with us,
please contact us right away.
WHAT ABOUT EXTERNAL LINKS?
Our website may contain links to third-party websites (e.g., payment platforms, social
media pages). This policy only applies to Mdalisu’s website. We are not responsible for
how external websites collect or use your information. We encourage you to read their
private policies before sharing personal data.
WHAT ARE MY DATA SUBJECT RIGHTS AND HOW DO I EXERCISE THEM?
Under POPIA, you have the right to:
- Access your personal information we hold
- Correct or update your personal information
- Object to the processing of your data in certain cases
- Request deletion, where legally allowed
- Withdraw consent, where processing was based on consent
- Complain to the Information Regulator if you believe your rights are violated
To exercise your rights, please contact us using the details below.
CONTACT DETAILS
Telephone: 0878136301 Email: helpdesk@mdalisu.co.za
WHAT ABOUT CHANGES TO THIS PRIVACY STATEMENT?
Mdalisu Corp may update this Privacy Policy from time to time to reflect legal updates,
improvements in our services, or changes in how we handle personal data. The updated
version will be posted on our website with the “Effective Date” shown at the top.
We encourage you to review this page regularly.
HOW DO I CONTACT YOU?
If you have any questions, complaints, or requests regarding your personal information,
please contact us:
Email: helpdesk@mdalisu.co.za
Phone: 0878136301
Address: 1303 Metlife Building, 391 Anton Lembede Street, Fenton Lane, Durban 4000