POPIA COMPLIANCE NOTICE

Effective Date: 15/08/2025

1. Our Commitment to Your Privacy
At Lee And Luu Loans (referred to as “we,” “us,” or “our”), we understand the importance of
protecting your personal information and are committed to handling it responsibly and in
accordance with the Protection of Personal Information Act (POPIA). This notice outlines how we
collect, use, process, store, and safeguard your personal information when you interact with our
website www.leeandluu.co.za (the “Website”) and use our micro-lending services (the “Services”).

2. Why We Collect Your Personal Information
We collect and process your personal information for specific, lawful purposes related to our microlending
business. These purposes include:
Assessing Your Loan Application: To evaluate your creditworthiness and determine if you qualify for
a loan.
Verifying Your Identity: To comply with legal and regulatory requirements and prevent fraud.
Managing Your Loan Account: To administer your loan, process payments, and communicate with
you about your account.
Providing and Improving Our Services: To understand your needs and enhance our Website and
Services.
Legal and Regulatory Compliance: To meet our obligations under the National Credit Act 34 of 2005,
the Financial Intelligence Centre Act and other regulations.
Communication: To respond to your inquiries, provide support, and send you important updates
related to your application or loan.
Marketing (with Consent): To inform you about our products and services where you have provided
your explicit consent to receive such communications.

3. The Types of Personal Information We Collect
We may collect the following categories of personal information:
Identity Information: Your full name, identity number, date of birth, gender, marital status,
nationality.
Contact Information: Your residential address, postal address, email address, phone numbers.
Financial Information: Your bank account details, employment history, income details, credit history,
financial statements (if required).
Employment Information: Employer name, job title, salary details, employment period.
Device and Online Usage Information: Your IP address, browser type, operating system, browsing
history on our Website, cookies, and similar tracking technologies.
Biometric Information (Limited): Selfie of yourself holding your ID with the application date, and a
photo of your original ID, for identity verification purposes.
Communication Records: Records of our interactions with you (emails, calls, chat logs).
Location Data (Potentially): If you use location-based features on our Website (we will inform you if
we collect this).
Special Personal Information (if applicable and with consent/legal basis): We will only collect special
personal information (e.g., health information, political affiliation) if it is directly relevant to the
service you are requesting and with your explicit consent or as permitted by law.

4. How We Collect Your Personal Information
We collect your personal information in the following ways:
Directly from You: When you complete application forms, register on our Website, communicate
with us, or provide information through other means.
Automatically: Through your use of our Website (e.g., device information, browsing activity using
cookies).
From Third Parties: We may receive information from credit bureaus, identity verification services,
and other legally authorized third parties to assess your application and verify your information.

5. How We Use Your Personal Information
We will only use your personal information for the specific purposes for which it was collected, as
outlined in this notice and our full Privacy Policy, or for other lawful purposes. This includes:
Processing your loan application and managing your loan.
Verifying your identity and preventing fraud.
Communicating with you about our Services.
Improving our Website and Services.
Complying with legal and regulatory obligations.
Conducting statistical analysis (anonymized where possible).
Marketing our services to you (with your consent).

6. Sharing Your Personal Information
We may share your personal information with the following categories of recipients, who are also
bound by obligations to protect your information:
Our employees and authorized personnel.
Credit bureaus.
Payment processors.
Service providers who assist us with our operations (e.g., IT support, data analysis, marketing).
Legal and regulatory authorities when required by law.
Collection agencies (in case of default).
Potential business partners or acquirers (in the event of a business transfer).
With your explicit consent.

7. Security Measures
We implement reasonable technical and organizational measures to protect your personal
information against loss, unauthorized access, use, alteration, or destruction. These measures
include:
Secure servers and encryption technologies.
Access controls and authentication protocols.
Regular security assessments and updates.
Employee training on data protection.
Physical security measures at our premises.

8. Retention of Your Personal Information
We will retain your personal information only for as long as necessary to fulfill the purposes for
which it was collected, or as required by law. The retention period may vary depending on the
specific purpose and applicable legal requirements.

9. Your Rights Under POPIA
You have the following rights regarding your personal information:
Right to Access: You can request access to the personal information we hold about you.
Right to Rectification: You can request that we correct or update your personal information if it is
inaccurate or incomplete.
Right to Erasure (Deletion): You can request that we delete your personal information in certain
circumstances.
Right to Object: You can object to the processing of your personal information in certain
circumstances.
Right to Restrict Processing: You can request that we temporarily restrict the processing of your
personal information.
Right to Data Portability: You can request to receive your personal information in a structured,
commonly used, and machine-readable format and to transmit it to another controller.
Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to a
decision based solely on automated processing, including profiling, which produces legal effects
concerning you or similarly significantly affects you.
Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Regulator
(South Africa) if you believe we have contravened POPIA.
To exercise any of these rights, please contact us using the details provided below. We will require
you to provide adequate proof of your identity.

10. Cross-Border Transfer of Personal Information
We may, in certain circumstances, transfer your personal information to recipients located outside
of South Africa. We will only do so if the recipient is subject to laws, binding corporate rules, or a
binding agreement that provides an adequate level of protection in line with POPIA, or if one of the
derogations in POPIA applies (e.g., your consent, performance of a contract).

11. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to enhance your browsing experience and collect
information about how you use our site. You can manage your cookie preferences through your
browser settings. Please refer to our full Privacy Policy for more details on our use of cookies.

12. How to Contact Us
If you have any questions, concerns, or requests regarding this POPIA Compliance Notice or the
processing of your personal information, please contact our Information Desk at:
Lee And Luu Loans
No 10 Church Street
Mount Ayliff
Eastern Cape
South Africa, 4735
ntuthuzelof@leeandluu.co.za 
Tel: +27 39 254 0091

13. Changes to This Notice
We may update this POPIA Compliance Notice from time to time. Any changes will be posted on our
Website with an updated effective date. We encourage you to review this notice periodically.
By continuing to use our Website and Services, you acknowledge that you have read and understood
this POPIA Compliance Notice.