POPIA notice

Responsible party

The responsible party for the personal information processed through moolaservices.co.za is Moola Services. We do not currently publish a separate postal address or telephone number; the way to reach us about a POPIA matter is our Contact page.

What we process, and our lawful basis

We process your full name, South African ID number, mobile number, optional e-mail address, uploaded documents, employment-related information you share with us, and your order and case history. In summary, our lawful basis is: performance of the contract you enter into when you order a service; your consent for the optional e-mail address; our legitimate interest in keeping the site secure and preventing fraud; and legal obligations to keep certain financial and case records. The full detail for each category is in our Privacy Policy.

Data minimisation and purpose

We collect only what we reasonably need to provide our services. Your ID number is processed because it identifies you uniquely for document certification and job applications, and prevents the same person opening duplicate accounts. We do not use your personal information for any purpose beyond what you would reasonably expect from ordering a Moola Services product.

Keeping your information safe

• Your ID number is stored encrypted and shown in full only to you. Staff see just the last four digits, as ******1234.
• Passwords are stored as a one-way hash that nobody can read back.
• Uploaded documents are kept outside our public web folder, and released only through an authenticated, ownership-checked link.

Full detail is in our Privacy Policy.

How long we keep it

Retention periods vary by record type: for example, account and case records for 5 years after your last case closes, uploaded documents for 12 months after a case is completed, and session data for 72 hours. The complete table is in our Privacy Policy.

Your rights as a data subject

Under POPIA, you may:

• request confirmation of, and access to, the personal information we hold about you,
• request that we correct information that is inaccurate, out of date or incomplete,
• request that we delete or destroy information we are no longer entitled to keep,
• object to the processing of your personal information on reasonable grounds,
• withdraw any consent you have given us, at any time, without it affecting processing already carried out, and
• lodge a complaint with the Information Regulator.

To use any of these rights, the quickest route for most requests is your own account: once logged in, you can already correct your e-mail address and change your password yourself, without waiting for us. For everything else — access to your full record, correction of your name, mobile number or ID number, deletion, or an objection to processing — tell us through our Contact page, describing what you would like us to do. We aim to respond promptly and, where the law allows, within the time POPIA sets for that kind of request.

No selling, no marketing sharing

Children

Moola Services is for people aged 16 and older. We do not knowingly collect personal information from children, and registration requires the customer's own South African ID number, which confirms an age of 16 or older.

Automated decision-making

We do not use your personal information to make any automated decision that would have a legal or similarly significant effect on you. Every order, case status and staff response is reviewed and actioned by a person.

Updates to this notice

We may update this notice from time to time, for example if we start offering a new service that processes personal information differently. The version on this page, with its "last updated" date, is always the current one.

Changing your own information

You can update your e-mail address and change your password at any time from your account area once logged in. For anything else, including a request under this notice, use our Contact page.

Protect yourself, Know your rights

See also our Privacy Policy and Cookie Policy.