Last updated: 8 November 2026

1. Introduction & responsible party

Qwik5 (Pty) Ltd (“Qwik5”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information in compliance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws.

This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you use our mobile application (“App”) available on the Apple App Store and Google Play Store, or access our lending services.

For the purposes of POPIA, Qwik5 (Pty) Ltd acts as the Responsible Party.

2. Information we collect

We collect personal information necessary to deliver micro-lending services, perform credit assessments under the National Credit Act, maintain account security, and fulfil legal requirements.

A. Information you directly provide to us

Identity data: Full names, South African ID number, passport number, date of birth, and nationality.
Contact data: Email address, mobile phone number, physical address, and postal address.
Financial & credit assessment data: Employment details, proof of income (payslips, bank statements), monthly expenditure, bank account details, and credit history details.
Security & authentication data: Login PIN, password, security questions, and biometric data (if enabled on your device for fast app unlock).

B. Information collected automatically via the App

Device data: Device model, operating system version, unique device identifier (UUID), IP address, and network information.
App usage & diagnostic data: App feature usage, performance metrics, crash logs, and error reporting.
Location data: Coarse or precise location data (only where explicitly permitted by you via device permissions for fraud prevention and location verification).

C. Information from third parties

Credit bureaus: Registered credit bureaus under the National Credit Act, to retrieve credit scores, financial profiles, and debt history.
Verification services: Identity verification platforms and fraud prevention databases.

3. Purpose & lawful basis of processing

Under POPIA, we process your personal information under the following lawful bases:

Performance of a contract: To register your account, assess credit eligibility, approve loan applications, and manage loan repayments.
Legal obligation: To comply with South African statutory requirements under POPIA, the National Credit Act (NCA), the Financial Intelligence Centre Act (FICA), and tax legislation.
Legitimate interest: To detect and prevent fraud, secure our App infrastructure, perform risk assessment, and improve overall App features.
Consent: For sending direct marketing communications (newsletters, promotional offers) or processing location/biometric data where required by law or store guidelines. You may withdraw consent at any time.

We do not sell your personal data. We share personal information only with trustworthy third parties necessary to provide our lending services:

Registered credit bureaus: For credit scoring, debt reporting, and regulatory compliance.
Payment service providers & banks: To process loan disbursements and debit orders.
Service providers & operators: Cloud hosting providers, customer support solutions, SMS gateway providers, and analytics providers acting under strict confidentiality and operator agreements.
Regulatory authorities & law enforcement: The National Credit Regulator (NCR), the Information Regulator, SARS, or legal authorities when required by law or court order.

5. Data security safeguards

We implement robust, industry-standard technical and organisational security measures to protect your information against unauthorised access, loss, destruction, or alteration, including:

Data encryption in transit (SSL/TLS) and at rest.
Strict access controls and multi-factor authentication for administrative staff.
Regular security audits and vulnerability assessments.

In the event of a suspected or confirmed data security breach, we will notify both the South African Information Regulator and affected users in accordance with Section 22 of POPIA.

6. Data retention and account/data deletion

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as mandated by South African legislation (e.g. FICA and credit laws require financial records to be retained for minimum statutory periods).

Account deletion & right to deletion

You have the right to request the deletion of your account and personal data at any time.

You can request deletion directly in the App under Settings > Profile > Delete Account.
Alternatively, you can email your request to our Information Officer at support@qwik5.co.za.

Note: Data retention mandated by financial laws (such as transaction records under FICA/NCA) will be securely retained for the legally required period even after account closure.

7. Your rights under POPIA

As a data subject in South Africa, you hold the following rights under POPIA:

Right to access: Request confirmation of whether we hold personal information about you and obtain a copy of that information.
Right to rectification: Request the correction, completion, or updating of inaccurate or misleading information.
Right to erasure / destruction: Request the deletion of your personal information where we no longer have a lawful basis to retain it.
Right to object: Object to the processing of your personal data on reasonable grounds or for direct marketing purposes.
Right to lodge a complaint: Lodge a complaint with the South African Information Regulator if you believe your rights have been infringed.

8. Direct marketing & app permissions

Marketing: We will send direct marketing messages only if you have opted in (e.g. ticking an un-pre-ticked opt-in box during registration). You may opt out at any time via the unsubscribe link in messages or in App settings.
Device permissions: The App may request access to push notifications, camera (for document scan/ID upload), or location services. You can modify these permissions at any time via your device settings.

9. International data transfers

Where personal data is stored or processed outside of South Africa (e.g. via international cloud host servers such as AWS, Google Cloud, or Microsoft Azure), Qwik5 ensures that the recipient country provides an adequate level of data protection comparable to POPIA, or that binding corporate rules / data transfer agreements are in place.

10. Contact details & Information Officer

If you have questions, feedback, or wish to exercise any of your POPIA rights, please contact our designated Information Officer:

Entity name: Qwik5 (Pty) Ltd
Information Officer: Information Officer / Compliance Department
Email address: support@qwik5.co.za
Postal/physical address: 1397 Anaboom Street, Noordwyk, Midrand, South Africa

South African Information Regulator

If you are dissatisfied with our handling of your query or personal data, you may contact the Information Regulator:

Website: inforegulator.org.za
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za

Your information, handled with care