TransUnion General Privacy Notice
Date adopted: 16 June 2021
This privacy notice provides a high-level overview of how we use and share personal information across TransUnion. You can find more detailed information at the TransUnion Privacy Center or in other privacy information you may have received.
In this Privacy Notice, any reference to TransUnion includes any of the entities listed below:
TransUnion strives to protect privacy as we collect, use, process, disclose, transfer and retain personal information.
You have the right to decide who uses your personal information and how.
If your personal information is used unlawfully or infringes on your privacy, you have the right to object.
This notice covers the following topics:
We're in an era of rapid digital transformation where consumers demand more access to seamless, personalised products and services online. But the currency of personal data that fuels this platform economic boom poses threats to individuals and endangers corporate security.
Now more than ever — and likely more so in the future — consumers and corporates need new levels of trust and transparency.
As a global information and insights company, TransUnion seeks to make trust possible. We do this by curating an accurate and comprehensive picture of each consumer so they're safely and reliably represented in the marketplace. This enables businesses and consumers to transact with confidence and achieve great things. We call this Information for Good.
We're a group of companies with registered offices at TransUnion, 10th Floor, 11 Alice Lane, Sandton, Johannesburg 2196. Although we're part of a larger group, this notice covers only the activities of TransUnion companies within the Republic of South Africa.
TransUnion companies sometimes cooperate with other TransUnion companies when sharing and making decisions about your personal information. When this happens, all employees across the group ensure each company involved complies with data protection rules.
Contact our Consumer Services Team to enquire about any of our companies or exercise your rights regarding your personal information.
Contact us about personal information issues, including the contents of this notice via:
TransUnion limits the use and disclosure of personal information to the terms of the National Credit Act 34 of 2005 (NCA), Protection of Personal Information Act 4 of 2013 (PoPIA) or any other applicable laws.
Unless we have your consent or the law permits us, we will not sell, rent or lease your personal information to others. We will not use or share your personal information in ways unrelated to the circumstances described below.
Unless permitted by the laws or with your consent, we do not use any personal information concerning religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health, sex life or biometric data.
Many of our products and services rely on personal information. For example:
Credit reporting: TransUnion compiles consumer credit information in credit reports from applications to (for example) credit providers or services providers for credit or services.
Direct marketing: When you visit a TransUnion Site, we may invite you to sign up for information, promotional offers and marketing.
You can sign up for our news during the online ordering process by ticking the opt-in box, "I want to receive news and information on products to help me manage my debt better."
If you consent, TransUnion will access, use, process and analyse your personal information, your consumer credit information, Internet activity and marketing data to provide personalised offers from TransUnion and our trusted partners.
Digital marketing: To provide relevant products and services to consumers, we enable business partners to use our data and technology to create, deploy and measure targeted digital advertising programs.
Advertising: We may use domestic or overseas third-party advertising companies to serve ads on TransUnion Site or on other sites which we use for advertising. We may also use third-party analytical tools to personalise advertisements and enhance the visitor experience.
Market research: Participation in market research activities is optional. When you opt-in, we use your information to improve the experience of our products and services. Third parties assisting with market research can keep non-personal aggregated data for our research purposes.
Business products: We may use personal information to promote and market relevant products, services and special offers from us and our affiliates.
Customer service: We may use personal information to identify customers, process transactions and provide quality service.
Recruitment: We use personal information when we receive an employment application.
We may use personal information for our internal operations, such as:
Names, contact details and other information from consumers who contact us to deal with their enquiries. See our Customer Service Privacy Notice for more.
Employee information (including employment and educational history, background checks and performance appraisals) to manage our relationship.
CCTV cameras in public areas of our business premises for the safety of staff and visitors, and the security of our information and assets.
Legal and regulatory purposes, such as responding to complaints or enquiries about how we have used personal information.
In addition, we may aggregate anonymised data to provide advertising performance analytics to business partners.
For more details on the kinds of data used for each purpose described, visit the TransUnion Privacy Center
We get personal information directly from our business partners, suppliers, clients, site visitors, and product and services customers signing up for any of our products or services.
When visitors use any products or functions in a TransUnion Site, we collect general internet data (including internet protocol ("IP") address, metadata, location data, date and time of the visit) and behavioural data, such as searches transactions and purchases.
We also receive anonymous information from websites where we display advertisements to enhance or modify our campaigns.
We collect user information anonymously without linking data to personal information other than authenticating and protecting private data.
Simply put, we keep personal information for as long as necessary. More technically, we retain it to fulfil the purpose(s) of its provision, to comply with applicable laws, and for as long as your consent to such purpose(s) remains valid after termination of our relationship.
The Protection of Personal Information Act (POPIA) allows personal information usage where necessary for legitimate purposes without undue adverse impact. We base most of our processing activities on the 'legitimate interests' condition. For more details, refer to the relevant privacy notices in the links above.
We sometimes rely on consent to process personal information, but this is relatively rare. Refer to the relevant privacy notices at www.transunion.co.za/privacy for more details.
If you sign up for one of our online services, we need to use personal information to provide the services as set out in the Terms & Conditions. We also use this basis for processing some of our staff data. Refer to the privacy notice on the relevant website for details.
We only access, use and disclose personal information without consent in exceptional circumstances where necessary to:
We apply the above in terms of the NCA, PoPIA and other relevant national legislation.
As stated, we share personal information among TransUnion RSA companies where appropriate. We have set out a list of current such companies below.
TransUnion Africa Holdings (Pty) Ltd
TransUnion Credit Bureau (Pty) Ltd
TransUnion Africa (Pty) Ltd
TransUnion Analytic and Decision Services (Pty) Ltd
TransUnion Auto Information Solutions (Pty) Ltd
Our clients have privacy notices that provide more information about how they use the data we supply. These clients typically operate in the following sectors:
If our clients appoint an intermediary to act on their behalf, they too will receive the data. We also appoint data resale partners who distribute our data to third parties.
Our clients and we might provide information to third parties that help us achieve the purposes described in section 2. For example:
These service providers can't use your information for their purposes or on behalf of other organisations unless you agree otherwise.
We access and use your information from our base in South Africa. We will not transfer personal information to a country lacking laws that provide an adequate level of information protection - unless we have an agreement with the recipient requiring measures that offer a similar level of protection as POPIA in South Africa.
We outline your rights regarding the personal information we hold about you below.
Access: Refer to the PAIA Manual on how to access what personal information we hold about you.
Correction/Destruction/Deletion: If the information we hold about you is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained lawfully, you have a right to ask us to correct it or delete it.
Objection to processing: You may object (on reasonable grounds) to processing your personal information unless legislation provides for such processing.
Objection to direct marketing: You may object to us using your personal information for direct marketing, and if you do, we will stop.
To find out about exercising these rights, please contact us on TransUnion Contact Centre: 0861 482 482.
We strive to deliver the highest levels of customer service. However, if you’re ever unhappy with us, please contact us so we can investigate.
You can also contact our Information Officer or Deputy Information Officer at [email protected]
You may complain to the Information Regulator:
PAIA ManualClick Here to download
Data Processing Policy
TransUnion is a credit bureau registered in accordance with the provisions of the National Credit Act 34 of 2005 (Registration Number NCRCB4). Its operations are regulated by the NCA and by other applicable Laws, including the Protection of Personal Information Act 4 of 2013. TransUnion protects the integrity of all information housed by it, keeping such information secure. TransUnion is sensitive to the issues regarding privacy of information.
Furthermore, TransUnion is a member of the following industry associations –
TransUnion is committed to conducting its operations in an ethical manner and in compliance with all applicable Laws and association/industry policy directives and guidelines. To successfully ensure this, it is vital that all entities doing business with TransUnion ascribe to the same standards. Accordingly, TransUnion has set out, in this policy, obligations that need to be adhered to when an entity processes (including but not limited to the receipt and usage of), Personal Information from or supplies Personal Information to TransUnion.
NOTE: This policy may be updated from time to time to reflect any amendments made to applicable Laws or association/industry policy directives and guidelines.
To outline obligations for protecting the integrity and confidentiality of information that is transmitted to and from TransUnion’s systems, as required by applicable Laws and associations relevant to the information services and risk services industry.
For purposes of this policy, capitalised terms shall have the meanings ascribed to them below –
In its dealings with TransUnion and usage of TransUnion’s service offerings, the Applicable Party shall at all times comply with the requirements for the receipt, compilation and reporting of information as prescribed by the NCA and other applicable Laws and associated bodies.
The Applicable Party -