Privacy Policy

1. Introduction

This Privacy Policy applies to personal information processed by Vows Assurance in the course of providing policies, celebration-related services, website functionality, customer support and related business operations.

Where we process personal information on behalf of another party or service provider, that processing will be governed by the applicable contractual arrangements and relevant law.

2. Information We Collect

Depending on your engagement with Vows Assurance, we may collect and process the following categories of personal information:

identity and profile information, including your name, surname, date of birth and identity or passport details where required;
contact information, including your email address, telephone number and physical address;
policy, payment and transaction information needed to administer products or services;
communications you send to us, including support requests, enquiries and feedback;
technical and usage information generated when you use our website or digital services.

3. How We Use Personal Information

We process personal information only where we have a lawful basis to do so and for purposes that are specific, explicit and legitimate.

to provide, maintain and administer our products and services;
to verify identity, assess applications and manage customer accounts;
to communicate with you about policies, services, support matters and operational updates;
to process payments, prevent fraud, manage risk and protect our business and customers;
to comply with legal, regulatory and contractual obligations.

4. POPIA Compliance

Vows Assurance aims to process personal information in accordance with the eight conditions for lawful processing under POPIA, including accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards and data subject participation.

We take reasonable steps to ensure that personal information is relevant, accurate, complete where necessary, and not excessive in relation to the purpose for which it is processed.

5. Disclosure of Personal Information

We may disclose personal information where this is necessary for legitimate business purposes, legal compliance, or the delivery of services.

to service providers who support our technology, communications, administration or payment processes;
to professional advisers, insurers, auditors or regulators where disclosure is reasonably required;
where required by law, court order, subpoena or lawful request from a competent authority;
where disclosure is necessary to protect our rights, safety, property or the rights of our customers and third parties.

6. Your Rights

Subject to POPIA and other applicable law, you may have the right to:

request confirmation of whether we hold personal information about you;
request access to personal information we hold about you;
request correction, updating or deletion of inaccurate, irrelevant or excessive information;
object, on reasonable grounds, to certain processing activities;
withdraw consent where processing is based on consent;
lodge a complaint with the Information Regulator.

7. Security and Retention

We maintain reasonable technical and organisational safeguards to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction.

Personal information is retained only for as long as reasonably necessary to fulfil the purpose for which it was collected, to meet contractual obligations, or to comply with legal and regulatory requirements.