Privacy Policy

Our Privacy Policy

At CuraCash (Pty) Ltd (“CuraCash”, “we”, “us”, or “our”), we are committed to protecting your privacy and handling your personal information with transparency, responsibility, and compliance with the law. We are a South African-registered fintech company and an authorised credit provider under the National Credit Regulator (NCR). Our services include fast, fully digital micro-loans accessed through our website (www.curacash.co.za) and mobile app.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices and rights you have under South African law, including the Protection of Personal Information Act (POPIA), 4 of 2013 (with amendments as of April 2025), and the National Credit Act, 34 of 2005, along with other applicable local and international data protection laws such as the GDPR, where relevant.

We collect several categories of data. These include identity and contact details (such as your name, ID number, email, and phone number), financial information (bank statements, salary details, credit data), behavioural and device information (like browsing logs, cookies, and device IDs), affordability signals (spending patterns and income trends), and your marketing preferences. This information is collected either directly from you during your application or interactions with us, automatically through cookies and analytics tools, or via third parties such as credit bureaus, bank data aggregators (with your permission), and verification providers like Home Affairs or telecom partners.

We use your information to assess credit applications through real-time algorithms, manage accounts, communicate with you, comply with regulatory requirements, conduct secure transactions, and improve our services. The legal grounds for this processing are based on contractual necessity, legal obligation, your consent (for marketing), and legitimate interest. Automated decision-making is a key feature of our service, but you always have the right to request a manual review, express your viewpoint, or challenge a decision.

Cookies and similar technologies are used to enhance your experience, remember preferences, and track analytics. You can adjust your cookie settings through your browser, but disabling them may limit site functionality. We share your information only with trusted third parties, including credit bureaus, payment partners, and service providers (such as hosting and communication platforms), under strict confidentiality agreements. We also comply with legal obligations to share data with regulators or law enforcement when required. Importantly, we never sell your personal information.

In cases where data is stored or processed outside South Africa, such as in the EEA, UK, or USA, we implement lawful safeguards like standard contractual clauses or rely on adequacy decisions to protect your information. We take security seriously, implementing ISO 27001-aligned controls, encrypted transmissions (TLS), regular security audits, and restricted access protocols. Our staff receive annual POPIA compliance training, and all vendors are vetted for data protection standards.

We retain your credit-related data for at least five years after account closure, as required by the National Credit Act and SARS, and we securely delete or anonymise marketing data once the purpose is fulfilled or consent is withdrawn. You have the right to access your data, request corrections or deletion, object to or restrict processing, request data portability, and file complaints. Forms for data requests are available on our website and support digital submission in line with the 2025 POPIA updates.

CuraCash does not knowingly collect data from anyone under 18. If we become aware of such data, it will be promptly deleted. We may occasionally update this policy to reflect legal changes or improvements to our practices. Material updates will be communicated via email, in-app notifications, or our website, along with a revised “Last updated” date.

For any privacy-related queries, please contact our Information Officer: Johnathan Bernard at privacy@curacash.co.za or call +27 69 399 1352. You may also reach the Information Regulator of South Africa at complaints.IR@justice.gov.za if your concern remains unresolved.