Privacy Notice

Effective date: 7 October 2026

1. Scope
This Notice explains how 1Dentity processes personal information through its public Website, Website forms and related public enquiries. Separate notices or agreements may apply to customers, suppliers, employees or contracted services.

This Notice applies to the public corporate Website. It does not govern personal information processed through the 1Dentity Gateway, APIs, customer onboarding, identity-verification services, KYC services, AML screening, sanctions or PEP screening, criminal or vetting checks, credit-related verification, biometric processing or other separately contracted verification services. Those activities are governed by applicable customer agreements and appropriate processing notices.
 
2. Responsible party
‍1Dentity South Africa (Pty) Ltd
Registration number: 2015/249910/07
Mercedes-Benz Place
210 Aramist Avenue
Waterkloof Glen
Pretoria
0181
South Africa
Telephone: +27 12 368 4900
Privacy email: compliance@1d.co.za
‍Information Officer: Elmar Grobbelaar
Deputy Information Officer: Nicola Rossouw  

‍3. Information we may process
Depending on how the Website is configured and used, 1Dentity may process:
    • identity and contact information;
    • organisation and business information;
    • enquiry information;
    • correspondence;
    • recruitment information where applicable;
    • IP address;
    • browser and device information;
    • timestamps;
    • security logs;
    • and cookie or similar-technology information.
    
Ordinary browsing of the public Website does not, by itself, require a visitor to provide an identity number, identity document, biometric information, criminal information, credit information, sanctions information, PEP information or other vetting information.
‍
‍4. Sources and purposes
Information may be obtained from:
    • you;
    • the organisation you represent;
    • Website technologies;
    • service providers; or
    • lawful public sources.

Information may be processed to:
    • respond to enquiries;
    • administer business relationships;
    • administer recruitment where applicable;
    • operate and protect the Website;
    • prevent or investigate misuse;
    • comply with legal obligations;
    • maintain appropriate records;
    • manage disputes; and
    • exercise or defend legal rights.

‍5. Lawful processing
Processing takes place only where permitted by POPIA.
Depending on the circumstances, this may include:
      • consent;
      • contractual necessity;
      • legal obligation; protection of a legitimate interest; or
      • pursuit of a lawful legitimate interest.
‍
Website use is not blanket consent.
Where an organisation instructs 1Dentity to perform a verification, the respective POPIA roles depend on the particular processing activity and contractual arrangement. Use of 1Dentity's services does not, by itself, transfer a customer's legal, FICA, POPIA or customer-due-diligence responsibilities to 1Dentity.

‍6. Recipients
Where necessary and lawful, information may be made available to:
      • authorised personnel;
      • relevant service providers;
      • professional advisers;
      • auditors;
      • insurers;
      • regulators;
      • courts;
      • government authorities; and
      • law-enforcement bodies.  

‍7. Cross-border processing
If a Website or support provider processes personal information outside South Africa, the transfer must satisfy section 72 of POPIA.
No particular foreign location or transfer mechanism is represented unless confirmed for the relevant service.  

‍8. Retention and security
Records are retained only while authorised under POPIA, including where required by law, contract or another lawful purpose.
POPIA requires appropriate and reasonable technical and organisational safeguards.
No Internet service can be represented as completely secure.  

‍9. Your rights
Subject to POPIA and PAIA, you may:
    • request confirmation;
    • request access;
    • request correction;
    • request deletion or destruction where legally justified;
    • object to qualifying processing;
    • object to direct marketing;
    • withdraw consent where consent is relied upon; and
    • lodge a complaint.
‍
Requests may be sent to: compliance@1d.co.za

‍10. Complaints
Privacy complaints may be submitted to the Information Officer.
You may also complain to the Information Regulator (South Africa).
Official information is available at: https://inforegulator.org.za