Privacy Policy

Effective Date: 2025/08/10

GraceBridge ("we", "our", or "us") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this policy carefully to understand how we handle your data.

1. Information We Collect

We collect the following types of information:

a) Personal Information

  • Full name
  • ID number or passport number
  • Contact details (phone number, email address, physical address)
  • Employment and income information
  • Bank account details
  • Credit history or financial standing
  • Login credentials for our platform

b) Usage Information

  • IP address
  • Device information
  • Browser type
  • Access times
  • Pages viewed

c) Cookies and Tracking Technologies

We use cookies and similar technologies to improve your user experience. You can manage cookie preferences in your browser settings.

2. How We Use Your Information

We use your information to:

  • Process your credit applications
  • Verify your identity
  • Conduct credit and affordability assessments
  • Facilitate transactions with partner vendors (e.g. pharmacies, grocery stores)
  • Send payment reminders and updates
  • Improve and personalize our platform and services
  • Comply with legal and regulatory obligations
  • Communicate with you regarding your account, promotions, or changes to our services

3. How We Share Your Information

We only share your information with:

  • Authorised service providers assisting in our operations (e.g. payment processors, hosting services)
  • Partner vendors where you redeem your credit (pharmacies, grocery stores)
  • Credit bureaus and financial institutions for credit scoring and reporting
  • Regulatory bodies as required by law (e.g. NCR, SARS)
  • Debt recovery partners if you default on repayment terms

We do not sell your personal information to third parties.

4. Your Rights Under POPIA

You have the right to:

  • Access your personal information
  • Request correction or deletion of your data
  • Object to processing for certain purposes
  • Lodge a complaint with the Information Regulator of South Africa

To exercise these rights, contact us at: support@gracebridge.com

5. Data Retention

We retain your information for as long as necessary to:

  • Fulfil the purpose for which it was collected
  • Comply with legal obligations (e.g. NCR regulations, tax requirements)
  • Enforce our agreements and policies

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal information from unauthorized access, disclosure, or misuse.

These include:

  • SSL encryption
  • Secure login and password protocols
  • Limited access to personal data on a need-to-know basis

7. Children's Privacy

Our services are not intended for persons under 18. We do not knowingly collect personal data from minors without guardian consent.

8. International Data Transfers

If we transfer your data outside South Africa, we ensure that the third country has adequate data protection laws or we enter into appropriate agreements to safeguard your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated effective date.

10. Contact Us

Email: support@gracebridge.com

Phone: +27 78 507 3208