Privacy Policy

Last Updated: May 17, 2025

Introduction

RAF Loans (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring your personal information is handled responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.rafloan.co.za, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the “Site”).

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site. By accessing the Site, submitting an application, or subscribing to our newsletter, you consent to the collection and use of information in accordance with this policy.

Personal Information We Collect

We collect personal information that you voluntarily provide to us when you:

Complete the loan application form
Register for our newsletter
Contact us through our contact form
Participate in surveys or promotions
Engage with us on our social media accounts

Types of Personal Information

Depending on your interactions with us, we may collect the following types of personal information:

Identification Information
- Full name
- Contact details (email address, phone number)
- Identity number
- Home address
Financial Information
- RAF claim details
- Settlement amount information
- Banking details (when processing loans)
- Financial status information
Technical Information
- IP address
- Browser type and version
- Device type
- Operating system
- Referral source
- Length of visit, page views, and website navigation paths
Communication Information
- Email correspondence
- Records of calls with our representatives
- Feedback and survey responses

How We Use Your Information

We use your personal information for the following purposes:

Primary Purposes

To Process Loan Applications
- To assess your eligibility for a RAF claim advance
- To connect you with suitable lenders
- To communicate with you about your application status
To Provide Customer Service
- To respond to your inquiries
- To address complaints or feedback
- To provide support throughout the loan process

Secondary Purposes

To Improve Our Services
- To analyze and improve our website functionality
- To develop new products and services
- To enhance user experience
For Marketing and Communications
- To send newsletters and updates (with your consent)
- To provide information about our services
- To inform you about relevant changes to our policies or services
For Legal and Operational Reasons
- To comply with legal obligations
- To prevent fraud and protect our legitimate business interests
- To maintain accurate records

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Consent: When you explicitly agree to us processing your data for a specific purpose.
Contractual Necessity: When processing is necessary to fulfill our contractual obligations to you.
Legitimate Interests: When processing is necessary for our legitimate business interests.
Legal Obligation: When processing is necessary to comply with applicable laws and regulations.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention periods for different types of data are as follows:

Application Information: Retained for 5 years after the conclusion of your loan or application process, in accordance with financial recordkeeping requirements.
Communication Records: Retained for 3 years from the date of last communication.
Marketing Information: Retained until you withdraw your consent or unsubscribe.
Technical Information: Retained for 12 months for analytical purposes.

Cookie Policy

What Are Cookies

Cookies are small text files placed on your device that assist us in providing a better website experience. Our website uses cookies to:

Keep you signed in
Understand how you use our website
Remember your preferences
Improve your experience

Types of Cookies We Use

Essential Cookies: Required for the basic functionality of our website.
Analytics Cookies: Help us understand how visitors interact with our website.
Preference Cookies: Remember your settings and preferences.
Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

Block cookies by activating the setting on your browser that allows you to refuse all or some cookies
Delete cookies after you have finished browsing
Set your browser to notify you when you receive a cookie

Please note that if you choose to block or delete cookies, some features of our website may not function properly.

Third-Party Services

We may use third-party service providers to assist us in providing and improving our services. These third parties may have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Third-Party Service Providers Include:

Hosting and Infrastructure
- Amazon Web Services (AWS)
- Google Cloud Platform
Analytics
- Google Analytics
- Hotjar
Communication
- Mailchimp (email marketing)
- SendGrid (email service)
- Twilio (SMS notifications)
Payment Processing
- PayFast
- PayGate
Customer Relationship Management
- Zoho CRM
- HubSpot

Each of these third parties has their own privacy policies governing how they use and protect personal information.

Your Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

Right to Access: You can request a copy of the personal information we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete information.
Right to Erasure: You can request that we delete your personal information under certain circumstances.
Right to Restrict Processing: You can ask us to restrict the processing of your information under certain circumstances.
Right to Data Portability: You can request to receive your personal information in a structured, commonly used, and machine-readable format.
Right to Object: You can object to our processing of your personal information under certain circumstances.
Right to Withdraw Consent: You can withdraw any consent you have previously given us for processing your information.

To exercise any of these rights, please contact us using the information provided in the “Contact Us” section below.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

Encryption of sensitive information
Secure network infrastructures
Regular security assessments
Limited access to personal information
Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions regarding this Privacy Policy. If you have any questions or concerns about how we handle your personal information, please contact our DPO.

Children’s Privacy

Our Site is not intended for children under 18 years of age. We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: info@rafloan.co.za

Complaints

If you are concerned about a possible breach of privacy law or any other regulation, you can contact our DPO or the Information Regulator of South Africa at:

Information Regulator (South Africa)
JD House, 27 Stiemens Street
Braamfontein, Johannesburg, 2001
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg

This Privacy Policy was last updated on May 17, 2025.