INFORMATION & TRANSPARENCY
Privacy notice
Draft template — must be reviewed and completed before the website collects real enquiries.
1. Who is responsible for your information?
InsureFi is intended to operate as a service brand of Donum Mod. Before launch, replace this paragraph with the full legal name and registration details of the responsible party, its business address, and a monitored privacy contact address. Identify the Information Officer or Deputy Information Officer and provide their contact details as required by applicable law.
2. What information may we collect?
When you submit an enquiry, the website may collect your name, email address, whether you are enquiring as an individual or business, the service area selected, the optional message you provide, and the date and source of the enquiry. Please do not submit identity numbers, account details, policy documents, health information or other sensitive financial information through the initial contact form.
3. Why do we use it?
Enquiry information is intended to be used to review and respond to your request, assess which service area may be relevant, keep a record of the enquiry, and take steps you request before entering a possible service relationship. Any additional purposes and lawful grounds must be assessed and documented by the responsible party.
4. Partners and service providers
If your enquiry requires a regulated financial service, information should only be shared with an identified partner when there is an appropriate lawful basis and, where required, your informed consent. Before any transfer, explain who the partner is, what information will be shared, why it is needed and how the partner will handle it. Complete this notice with details of website hosting, form processing, email, analytics, CRM and other operators actually used.
5. Marketing choices
The marketing checkbox on the enquiry form is optional and separate from the enquiry itself. Do not add a person to marketing lists merely because they asked for a consultation. Electronic direct marketing must follow applicable POPIA requirements, including consent rules where they apply, sender identification and an effective way to opt out.
6. Security and retention
The responsible party must implement appropriate technical and organisational safeguards, restrict access to enquiry information, and set a documented retention schedule. Complete this section with the actual storage location, access controls, deletion process, backup practices, retention periods and incident-response contact. Do not claim safeguards that have not been implemented.
7. Your rights and questions
Subject to applicable law, you may have rights to request access to, correction of, or deletion of personal information, object to certain processing, or raise a complaint with the Information Regulator. Add the actual process and contact details for making a request. Information Regulator resources are available at inforegulator.org.za/popia.
8. Cookies and analytics
Complete this section after deciding whether the live website will use analytics, advertising pixels, embedded third-party content or other tracking technologies. Describe what is used, its purpose and how visitors can manage applicable choices. The starter page does not intentionally include an analytics or advertising script.
9. Changes to this notice
Update this notice when the processing activities, partners or systems change. Add the date of the latest approved version and provide a way to contact the responsible party with privacy questions.