Privacy Policy

• The Protection of Personal Information Act, 4 of 2013 ("POPIA"), which sets out the conditions for lawful processing of personal information in South Africa.
• The Financial Advisory and Intermediary Services Act, 37 of 2002 ("FAIS"), together with the General Code of Conduct for Authorised Financial Services Providers and Representatives, 2003.
• The Electronic Communications and Transactions Act, 25 of 2002 ("ECTA"), which regulates electronic communications, electronic signatures, and direct marketing through electronic means.
• The Consumer Protection Act, 68 of 2008 ("CPA"), where applicable.
• The Financial Intelligence Centre Act, 38 of 2001 ("FICA"), where its identity-verification and record-keeping obligations apply.
• The Insurance Act, 18 of 2017, and the Policyholder Protection Rules made under the Short-Term Insurance Act and the Insurance Act.

4.1Identification and contact information

• Your full name, surname, identity or passport number where required by an insurer for quoting or policy issue.
• Your date of birth, marital status, and occupation where relevant to the cover being quoted.
• Your contact details: telephone number, email address, residential and postal address.

4.2Information about your vehicle and intended cover

• Vehicle make, model, year, registration number, engine and VIN where required, modifications, garaging address, and typical usage pattern.
• Details of regular drivers, including age and licence information.
• Existing cover details from your current policy schedule (where you provide these for the policy review service).
• Information about previous claims, losses, or convictions where required by the insurer underwriting the cover.

4.3Communication and service records

• The content of emails, messages, callback requests, and other communications you send to us.
• Recordings of telephone calls where you contact us by phone (we will tell you at the start of the call if it is being recorded).
• Records of quotes obtained, policy reviews issued, and instructions you have given us in the course of our service.

4.4Website and technical information

• Standard server log information including your IP address, browser type, operating system, the pages you visit, and the date and time of your visit.
• Cookie information as described in section 12 below.
• Information about the device you use to access our website, where this is relevant to site performance and security.

• Insurance partners that we have introduced you to, where the introduction has resulted in a policy and ongoing administration.
• Public sources such as the deeds office, vehicle registers, and credit information bureaus, but only where this is necessary and lawful for the service you have requested.
• Third parties acting on your behalf, such as a broker or family member, where you have authorised them to act for you.

• To obtain quotes from our panel of insurance partners on your behalf, so that you can compare cover and pricing.
• To produce the free policy review that you have requested, including a comparison of your existing cover against alternatives in the market.
• To facilitate your appointment with the insurer you select, including transmitting your information to that insurer to enable them to issue the policy.
• To respond to your enquiries, complaints, callback requests, and other communications.
• To comply with our regulatory obligations under FAIS, POPIA, FICA, the Insurance Act, and other applicable law (including record-keeping for a minimum of five years).
• To detect and prevent fraud, including the use of risk information bureaus where appropriate.
• To improve our services, including analysing aggregate website usage so that we can make our content more useful to drivers.
• For direct marketing of our own services to existing clients, where you have not opted out (see section 7 below).

7.1Existing clients

7.2New marketing through electronic channels

7.3Marketing by our partners

8.1Insurance partners and underwriters

8.2Operators acting on our behalf

8.3Regulators and law enforcement

8.4Professional advisers

8.5No sale of personal information

• The third party to which the information is being transferred is subject to a law, binding corporate rules, or binding agreement that provides an adequate level of protection effectively similar to POPIA.
• You have consented to the transfer.
• The transfer is necessary for the performance of a contract between you and us, or for the conclusion or performance of a contract concluded in your interest with a third party.
• The transfer is for your benefit and it is not reasonably practicable to obtain your consent, and if it were reasonably practicable, you would be likely to give it.

• Encryption of data in transit using TLS for our website and our communications with insurance partners.
• Access controls so that only authorised employees and operators can access personal information, and only for the purposes for which they are authorised.
• Logging and monitoring of system access, with reviews of unusual activity.
• Confidentiality undertakings from all employees and contractors who handle personal information.
• Periodic review of our security measures and our operators’ security measures.

• The right to be notified that your personal information is being collected and that there has been any unauthorised access to your information.
• The right to access your personal information that we hold, and to be given the identities of third parties to whom we have disclosed it.
• The right to request the correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained.
• The right to object to the processing of your personal information on reasonable grounds.
• The right to object to the processing of your personal information for direct marketing purposes.
• The right not to be subject to a decision based solely on the automated processing of your personal information, where that decision results in legal consequences for you or affects you in a substantially similar way.
• The right to submit a complaint to the Information Regulator (South Africa) in respect of an alleged contravention of POPIA.

12.1Essential cookies

12.2Analytics and performance

12.3Managing cookies

• Quote and policy review records are retained for a minimum of five years from the date of last engagement, in line with FAIS record-keeping requirements.
• Communication records (email correspondence, call recordings) are retained for the same period.
• Website analytics data is retained in aggregated form for longer, but personal identifiers are removed in accordance with our analytics provider’s retention settings.
• Where we no longer need to retain personal information, we will delete or de-identify it in a secure manner.

15.1Contact details

• Email for privacy queries, access requests, and complaints: legal@onecompare.co.za
• Postal address: POSTNET SUITE 116, PRIVATE BAG X121, NOORDWYK, HALFWAY HOUSE, GAUTENG, 1687

• Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001.
• Complaints email: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za
• Website: https://inforegulator.org.za