Privacy Policy

Policy

Asuer is committed to protecting your privacy and to ensuring that personal information is used appropriately and transparently and transferred securely.

We subscribe to the Protection of Personal Information Act Principles and will:

1. Obtain and process your information fairly.
2. Keep your information only for one or more specified, explicit, and lawful purposes.
3. Use and disclose your information only in ways compatible with these purposes.
4. Keep your information safe and secure.
5. Keep your information accurate, complete, and up to date.
6. Ensure that your information is adequate, relevant, and not excessive.
7. Retain your information for no longer than is necessary for the purpose or purposes.
8. Provide a copy of your personal data kept to you on request.

Types of personal information we collect

Asuer will generally collect some of the following personal information:

• Information relating to the race, gender, sex, pregnancy, marital status, national, ethnic, or social origin, colour, age, physical or mental health, well-being, disability, language, and birth.
• Information relating to the education, medical, financial, criminal or employment history.
• Identifying number, name, symbol, e-mail address, physical address, telephone number, location information.
• Biometric information (employees).
• Correspondence sent/received that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence.

We also collect and store any relevant communication e.g. emails, meeting notes etc.

Information sources

We may also supplement the information you have provided with information we receive from other providers like Astute, Google searches, sanction list information requests, independent FICA verification agencies and Insurers to offer a more efficient, consistent and personalised experience.

Using personal information

Personal information will be used for the purpose for which it was collected and agreed. This may include:

• Administering our relationship with you (including communications and reporting);
• Marketing and explaining our products and services;
• Providing a product / service to you;
• As part of employee on-boarding or any other internal human resources functions;
• Conducting credit reference searches or verification;
• Confirming, verifying, and updating contact details;
• For the detection and prevention of fraud, crime, money laundering or other malpractice;
• For audit and record keeping purposes;
• In connection with legal proceedings;
• To carry out the services you have requested and to maintain and constantly improve our relationship with you;
• Providing communications in respect of Asuer and regulatory matters that may affect you;
• In connection with and to comply with legal and regulatory requirements (for example to comply with the Financial Intelligence Centre Act requirement to report cash and suspicious transactions or transactions involving terrorist property);
• To carry out the transaction(s) requested;
• For underwriting purposes;
• Assessing and processing claims;
• For purposes of claims history; and/or
• Conducting market or customer satisfaction research.

Information provided by employees, directors, shareholders and mandated representatives may be verified against or supplemented with information obtained from recruitment agents, the FSCA, and EMPS.

Sharing personal information

We will disclose your personal information to service providers, affiliates or third parties including Investment Managers, Custodians, Linked Investment Services Platforms, Insurers, and Botle Buhle Brands (Pty) Ltd for everyday business purposes (e.g. to facilitate transactions and maintain your accounts) or in response to court orders or legal investigations.

We have a mutual understanding with all our product suppliers and third-party service providers with regards to the protection of Personal Information.

Sending personal information to foreign countries

Some of the service providers that we use are located in other countries, for example our cloud storage service providers are located in the European Union. If we send information to anyone who is located in a country that does not have the same level of protection of personal information as South Africa or the European Union, we require that they undertake to protect the personal information of our customers to the same level that we do.

We provide for appropriate safeguards by means of contracts between us and our foreign service providers.

Monitoring of communications

We record and monitor telephone conversations and electronic communications with you for the purposes of:

1. Ascertaining the details of instructions given, the terms on which any transaction was executed or any other relevant circumstances,
2. Ensuring compliance with our regulatory obligations; and/or
3. Detecting and preventing the commission of financial crime.

We have implemented appropriate technical measures to prevent data breaches and have taken reasonable steps to minimise the impact of a breach.

We regularly monitor our systems for possible vulnerabilities and security breaches, but no system is perfect and we cannot guarantee that we will never experience a breach of any of our physical, technical or managerial safeguards. If something should happen, we have taken steps to minimise the threat to your privacy. We will let you know of any breaches which affect your personal information and inform you how you can help minimise the impact.

Your rights under data protection law

You have the right to be informed about the personal information we have, and what we do with it.

You have the right to:

• Ask us what we know about you;
• Ask what information was sent to our suppliers, service providers or any other third party;
• Ask us to update, correct or delete any out-of-date or incorrect personal information we hold about you if it is no longer necessary to provide services to you (we can unfortunately not take responsibility for incorrect or outdated information if we were provided with incorrect information or you failed to inform us of changes);
• Receive all of the information we have about you and to transfer it to another service provider in machine readable form;
• Unsubscribe from any direct marketing communications we may send you;
• Object to the processing of your personal information.

You can request access to the information we hold about you or correct your personal information by contacting our information officer.

It can take us up to 21 business days to respond to your request, because there are procedures that we need to follow. In certain cases, we may require proof of your identity, and sometimes changes to your information may be subject to additional requirements such as valid proof of residence.

Information Officer

The Protection of Personal Information Act appoints the highest level of authority in an organisation as the Information Officer. The Information Officer has been tasked with ensuring compliance with data protection and privacy legislation and regulations.

Name: Paul Ontong
Physical address: 208 Boundary Park, Corner Epsom Ave and Malibongwe Dr, Northriding, 2162
Email: informationofficer@asuer.co.za
Website: www.asuer.co.za

Updates to this Privacy Policy

We reserve the right to make changes to this Privacy Policy and any changes to this policy will be published accordingly.