Privacy Policy

1. Who Is Responsible for Your Information

Bluefin (the "Responsible Party") is responsible for the processing of your personal information. Our Information Officer can be contacted at info@gobluefin.co.za.

2. What Personal Information We Collect

• Identity information: full name, ID number, date of birth
• Contact details: email address, phone number, physical address
• Employment information: employer name, employment status, monthly income
• Banking details: bank name, account number, account type, branch code
• Financial information: bank statements, payslips, credit history
• Technical data: IP address, browser type, device information (collected automatically)

3. Why We Process Your Information

• To assess your application for a salary advance (affordability assessment)
• To verify your identity and prevent fraud
• To set up and administer your credit agreement
• To collect repayments via DebiCheck
• To communicate with you about your account
• To comply with legal obligations (NCA, FICA, POPIA)
• To report to credit bureaus as required by law

4. Legal Basis for Processing

We process your personal information on the basis of: (a) your consent; (b) performance of a contract; (c) compliance with a legal obligation; and (d) our legitimate interest as a registered credit provider.

5. Who We Share Your Information With

• Credit bureaus — as required by the NCA for credit assessment and reporting
• Netcash (Pty) Ltd — our payment processing partner for DebiCheck collection
• Regulators — the NCR, FSCA, SARS and other bodies as required by law
• We do not sell your information to third parties or marketing companies

6. How We Protect Your Information

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These include encryption, secure server infrastructure, access controls, and regular security reviews.

7. How Long We Keep Your Information

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, and for a minimum of 5 years after your last transaction as required by FICA and NCA record-keeping obligations.

8. Your Rights Under POPIA

• Access: Request a copy of your personal information held by us
• Correction: Request correction of inaccurate information
• Deletion: Request deletion (subject to legal retention requirements)
• Objection: Object to processing on legitimate interest grounds
• Complaint: Lodge a complaint with the Information Regulator at inforeg@justice.gov.za

To exercise any of these rights, contact us at info@gobluefin.co.za.

9. Cookies

Our website uses session cookies for authentication purposes only. We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. Any material changes will be communicated to you by email or via a notice on our website.