Legal
Privacy notice
Verity Financial Advisory and Intermediary Services (Pty) Ltd · Registration 2026/590656/07 · Last reviewed 25 August 2026
This notice is issued in draft and has not yet been reviewed by our appointed Information Officer. It describes our intended practice. If you need our confirmed position on a specific point before acting on it, please write to compliance@verityfin.co.za.
1. Who is responsible for your information
Verity Financial Advisory and Intermediary Services (Pty) Ltd, registration number 2026/590656/07, trading as VerityFin, is the responsible party for the personal information described in this notice, as that term is used in the Protection of Personal Information Act 4 of 2013 (POPIA).
2. What we collect
We collect personal information in three circumstances, and no others.
- When you contact us. Your name, your email address, and whatever you choose to put in your message.
- When you become a client. The identifying and verification information required of us by law, which for a regulated business includes identity documents, proof of address, and information about the source of funds and beneficial ownership.
- When you use the client portal. Your sign-in identity, and a record of the actions you take, so that every change to a record can be attributed to a person.
This website itself sets no advertising or tracking cookies and does not profile visitors.
3. Why we process it, and on what lawful basis
- To respond to you — because you asked us to, or because it is necessary to take steps towards a contract with you.
- To provide services under a mandate — performance of a contract.
- To meet obligations imposed on us — compliance with a legal obligation. This includes client verification and record-keeping duties, which we may not waive even at your request.
- To keep our records reliable — our legitimate interest in an accurate and attributable record of our own business.
4. Who we share it with
We do not sell personal information and we do not share it for anyone else's marketing. We disclose it only to service providers who process it on our behalf under a written obligation of confidentiality, to professional advisers where necessary for your matter, and to a regulator, court or law enforcement body where we are compelled or legally permitted.
5. Where it is held
Client information is held in a database dedicated to this business rather than pooled with unrelated parties. Some of our service providers process information outside South Africa; where that happens we satisfy ourselves that section 72 of POPIA is met before the transfer.
6. How long we keep it
For as long as the law requires, and no longer than we can justify. Records that regulated businesses must retain are typically kept for five years from the end of the relationship or the conclusion of the transaction. Where we are not compelled to keep something, we delete or de-identify it once its purpose is spent.
7. Your rights
Under POPIA you may:
- ask what personal information we hold about you, and be given a copy;
- ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
- object to processing based on legitimate interest;
- withdraw a consent you previously gave, without affecting what was lawful before you withdrew it; and
- complain to the Information Regulator.
Write to compliance@verityfin.co.za to exercise any of these. We may ask you to prove who you are first — otherwise the right to access becomes a route for someone else to obtain your information.
Two honest limits. Where the law requires us to retain a record, we cannot delete it on request. And where information forms part of a legally privileged file or an investigation, access may lawfully be refused; if we refuse, we will tell you on what ground.
8. Security
Access to client information is by individual named sign-in, and every change is recorded against the person who made it. No system is perfectly secure. If a breach occurs that creates a real risk to you, we will notify you and the Information Regulator as section 22 of POPIA requires.
9. Complaining to the Regulator
You may complain to the Information Regulator of South Africa at any time, and you do not have to come to us first. Their current contact details are published at inforegulator.org.za. We would nonetheless prefer the chance to put something right.
10. Changes
If we change this notice we will change the review date above. Material changes affecting existing clients will be communicated directly rather than left to be discovered here.