We are in an era of rapid digital transformation where consumers demand more access to seamless, personalised products and services online. But the currency of personal information that fuels this platform economic boom poses threats to individuals and endangers corporate security.

Now more than ever — and likely more so in the future — consumers and corporates need new levels of trust and transparency.

As a global information and insights company, TransUnion seeks to make trust possible. We do this by curating an accurate and comprehensive picture of each consumer so they are safely and reliably represented in the marketplace. This enables businesses and consumers to transact with confidence and achieve great things. We call this Information for Good.

We are a group of companies with registered offices at TransUnion, 10th Floor, 11 Alice Lane, Sandton, Johannesburg, 2196. Although we are part of a larger group, this notice covers only the activities of TransUnion companies within the Republic of South Africa.

Contact details

Contact us about personal information issues, including the contents of this notice via:

Post: PO Box 4522 Johannesburg 2000
Telephone: Contact Centre: 0861 482 482
Email: TUAPrivacy@transunion.com

2. How we use personal information

Managing end-to-end recruitment

TransUnion personnel involved in the recruitment process and relevant third parties may communicate with you on a strict need-to-know basis. We do this to show how we conducted the application and recruitment process and arrived at our decision.

Screening checks

TransUnion holds highly confidential data that is subject to stringent legal and regulatory responsibilities. Therefore, we undertake identity verification checks and employment screening to protect the interests of TransUnion, its parent company, clients, partners, and other stakeholders, including consumers and third parties.

Additional information

These checks are mandatory for your application and need to be complete before employment begins. To complete these checks, you may need to present specific documentation, provide additional details, and sign authorisations or acknowledgements. (Further details will be provided with any offer of employment).

We are mindful of your privacy and will only perform these checks at the appropriate application stage.

3. The kinds of personal information we use and where we get personal information

We obtain and use information from various sources summarised in the following table:

Type of Information	Description	Source
Basic contact information.	Name, email address and job title	You provide this information when you make an enquiry or when we subsequently request it.
Your enquiry.	Any enquiry you make
Proof of identity or authority and other supporting documentation.	To prove your identity. If you enquire on someone else’s behalf, we may ask for proof of authority, such as a power of attorney. Sometimes we may require additional supporting documentation.
Information gathered in dealing with your enquiry.	Dealing with an enquiry involves investigating the circumstances. This type of information depends on the enquiry.	Internal records and external organisations, such as references and and suppliers.
Our response and other correspondence.	Our response to and other correspondence relating to your enquiry.	We produce this ourselves.
Website usage.	If you access or submit information through our website, we record information such as IP address, operating system and browser type.	We gather this through the website.

4. How long we keep personal information

We will keep your personal information for as long as we handle your application and for an additional period after completion. That period depends on the following purposes:

Showing we have processes to deal with enquiries, requests and complaints fairly and under our regulatory requirements
Responding to you or a regulator about how we dealt with your request and to show we dealt with it appropriately
Defending any potential legal claims or regulatory action that might arise because of the request

5. Our legal basis for handling personal information

Legitimate interests

The Protection of Personal Information Act (POPIA) allows personal information usage where necessary for legitimate purposes without undue adverse impact. We base most of our processing activities on the following legitimate interests:

Administering and managing the recruitment process
Assessing and confirming an applicant’s suitability for employment
Deciding whom to offer a job
Keeping records of this process to explain or justify our decision

Consent

We sometimes rely on consent to process personal information, but this is relatively rare.

6. Who we share personal information with

Our group of companies

As stated, we share personal information among TransUnion RSA companies where appropriate. We have set out a list of current such companies below.

Group Company	Physical Address
TransUnion Africa Holdings (Pty) Ltd	TransUnion 10th Floor, 11 Alice Lane Sandton Johannesburg 2196
TransUnion Credit Bureau (Pty) Ltd
TransUnion Africa (Pty) Ltd
TransUnion Analytic and Decision Services (Pty) Ltd
TransUnion Auto Information Solutions (Pty) Ltd

Service providers

We may provide information to third parties who help us use it for purposes described above.

We may host our information database with third parties and use a third-party broadcasting service to send you emails or SMS messages.

These service providers may not use your information for their purposes or on behalf of other organisations unless you agree.

7. Where we store and send personal information

We sometimes make use of Service Providers that are situated outside of South Africa, e.g. India, UK and US. We will not transfer personal information to a country lacking laws that provide an adequate level of information protection — unless we have an agreement with the recipient requiring measures that offer a similar level of protection as POPIA in South Africa.

8. Your rights concerning personal information

We outline your rights regarding the personal information we hold about you below.

Access: You can access all information that we hold about you by contacting us through TUAPrivacy@transunion.com

Correction/Destruction/Deletion: If the information we hold about you is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully, you have a right to ask us to correct it or delete it.

Objection to processing: You may object (on reasonable grounds) to processing your personal information unless legislation provides for such processing.

Objection to direct marketing: You may object to us using your personal information for direct marketing, and if you do, we will stop.

9. Where to lodge a complaint

We strive to deliver the highest levels of customer service. However, if you are ever unhappy with us, please contact us so we can investigate.

Location: 10^th Floor, 11 Alice Lane, Sandton, 2196
Postal Address: PO Box 4522, Johannesburg, 2000
Telephone: 0861 482 482

You can also contact our Information Officer or Deputy Information Officer at TUAPrivacy@transunion.com

You may complain to the Information Regulator:

Physical Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg
Postal Address: P.O. Box 31533, Braamfontein, Johannesburg, 2017
Email: POPIAComplaints@inforegulator.org.za.
Site: www.inforegulator.org.za