Privacy Policy

1. Introduction

Impact Corporate Risk Managers ("we", "us", "our") is an Authorised Financial Services Provider (FSP 44624), regulated by the Financial Sector Conduct Authority (FSCA). We are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA").

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or engage with our services.

2. Information We Collect

We may collect the following categories of personal information:

• Identity information: your full name, ID number, date of birth
• Contact information: email address, phone number, physical address
• Financial information: income, assets, liabilities, existing policies (where relevant to providing advice)
• Communication records: emails, WhatsApp messages, or other correspondence with our advisors
• Website usage data: pages visited, time on site, browser type (collected via analytics tools)

3. How We Use Your Information

We use your personal information to:

• Provide financial advice, insurance brokerage, and related services
• Process quote requests and communicate with you about your enquiry
• Comply with our legal and regulatory obligations as an FSCA-authorised FSP
• Send you service-related updates (not marketing without your consent)
• Improve our website and service delivery

We will never sell your personal information to third parties.

4. Sharing of Information

We may share your information with:

• Product providers (insurers, medical aid schemes, investment houses) where necessary to obtain quotes or process applications on your behalf
• Our strategic partners — Capital Legacy and JD ELS Accounting — only where you have engaged those services through us
• Regulatory authorities (FSCA, SARS) where legally required
• Service providers who assist us in operating our business (e.g. email hosting), bound by confidentiality obligations

5. Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and FSCA regulations. Financial services records are typically retained for a minimum of five years.

6. Your Rights Under POPIA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or outdated information
• Request deletion of your information (subject to legal retention requirements)
• Object to the processing of your information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at info@impactbrokers.co.za.

7. Cookies & Website Analytics

Our website may use cookies and similar technologies to improve your browsing experience and analyse site traffic. You can disable cookies through your browser settings, though some features of the site may not function correctly as a result.

8. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Information Officer: