We are in an era of rapid digital transformation where consumers demand more access to seamless, personalised products and services online. But the currency of personal information that fuels this platform economic boom poses threats to individuals and endangers corporate security.

Now more than ever — and likely more so in the future — consumers and corporates need new levels of trust and transparency.

As a global information and insights company, TransUnion seeks to make trust possible. We do this by curating an accurate and comprehensive picture of each consumer so they are safely and reliably represented in the marketplace. This enables businesses and consumers to transact with confidence and achieve great things. We call this Information for Good.

We are a group of companies with registered offices at TransUnion, 10th Floor, 11 Alice Lane, Sandton, Johannesburg, 2196. Although we are part of a larger group, this notice covers only the activities of TransUnion companies within the Republic of South Africa.

Contact details

Contact us about personal information issues, including the contents of this notice via:

Post: PO Box 4522 Johannesburg 2000
Telephone: Contact Centre: 0861 482 482
Email: TUAPrivacy@transunion.com

2. How we use personal information

Managing end-to-end recruitment

TransUnion personnel involved in the recruitment process and relevant third parties may communicate with you on a strict need-to-know basis. We do this to show how we conducted the application and recruitment process and arrived at our decision.

Screening checks

TransUnion holds highly confidential data that is subject to stringent legal and regulatory responsibilities. Therefore, we undertake identity verification checks and employment screening to protect the interests of TransUnion, its parent company, clients, partners, and other stakeholders, including consumers and third parties.

Additional information

These checks are mandatory for your application and need to be complete before employment begins. To complete these checks, you may need to present specific documentation, provide additional details, and sign authorisations or acknowledgements. (Further details will be provided with any offer of employment).

We are mindful of your privacy and will only perform these checks at the appropriate application stage.

3. The kinds of personal information we use and where we get personal information

We obtain and use information from various sources summarised in the following table:

Type of Information	Description	Source
Basic contact information.	Name, email address and job title	You provide this information when you make an enquiry or when we subsequently request it.
Your enquiry.	Any enquiry you make
Proof of identity or authority and other supporting documentation.	To prove your identity. If you enquire on someone else’s behalf, we may ask for proof of authority, such as a power of attorney. Sometimes we may require additional supporting documentation.
Information gathered in dealing with your enquiry.	Dealing with an enquiry involves investigating the circumstances. This type of information depends on the enquiry.	Internal records and external organisations, such as references and and suppliers.
Our response and other correspondence.	Our response to and other correspondence relating to your enquiry.	We produce this ourselves.
Website usage.	If you access or submit information through our website, we record information such as IP address, operating system and browser type.	We gather this through the website.

4. How long we keep personal information

We will keep your personal information for as long as we handle your application and for an additional period after completion. That period depends on the following purposes:

Showing we have processes to deal with enquiries, requests and complaints fairly and under our regulatory requirements
Responding to you or a regulator about how we dealt with your request and to show we dealt with it appropriately
Defending any potential legal claims or regulatory action that might arise because of the request

5. Our legal basis for handling personal information

Legitimate interests

The Protection of Personal Information Act (POPIA) allows personal information usage where necessary for legitimate purposes without undue adverse impact. We base most of our processing activities on the following legitimate interests:

Administering and managing the recruitment process
Assessing and confirming an applicant’s suitability for employment
Deciding whom to offer a job
Keeping records of this process to explain or justify our decision

Consent

We sometimes rely on consent to process personal information, but this is relatively rare.

6. Who we share personal information with

Our group of companies

Where appropriate, we share personal information obtained during the job application process within the TransUnion group of companies in South Africa for legitimate recruitment, human resources, and related business purposes. The current TransUnion RSA companies include:

Group Company	Physical Address
TransUnion Africa Holdings (Pty) Ltd	TransUnion 10th Floor, 11 Alice Lane Sandton Johannesburg 2196
TransUnion Credit Bureau (Pty) Ltd
TransUnion Africa (Pty) Ltd
TransUnion Analytic and Decision Services (Pty) Ltd
TransUnion Auto Information Solutions (Pty) Ltd

Access to personal information within the group is restricted to authorised personnel who require it for recruitment or employment‑related purposes.

Service providers

We may share personal information with trusted third‑party service providers who assist us with recruitment‑related activities, such as hosting applicant information systems or sending communications by email or SMS. These service providers process personal information solely on our instructions and are required to implement appropriate safeguards to protect it.

Service providers may not use personal information for their own purposes or on behalf of other organisations unless you have agreed to this or it is permitted by law.

7. How we protect personal information

We take appropriate and reasonable technical and organisational measures to protect personal information obtained during the job application process against loss, unauthorised access, misuse, disclosure, or alteration. Personal information is accessed only by authorised personnel involved in recruitment and employment‑related decision‑making and is handled securely in accordance with POPIA and other applicable data protection laws.

8. Where we store and send personal information

We may, from time to time, make use of service providers located outside South Africa, including in countries such as India, the United Kingdom, and the United States, to support recruitment and job application processes. Where personal information is transferred outside South Africa, we ensure that such transfers comply with POPIA. We will not transfer personal information to a country that does not have laws providing an adequate level of protection unless appropriate safeguards are in place, including contractual agreements that require the recipient to protect personal information to a standard substantially similar to that required under POPIA in South Africa.

9. Your rights concerning personal information

We outline your rights regarding the personal information we hold about you below.

Access: You can access all information that we hold about you by contacting us through TUAPrivacy@transunion.com

Correction/Destruction/Deletion: If the information we hold about you is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully, you have a right to ask us to correct it or delete it.

Objection to processing: You may object (on reasonable grounds) to processing your personal information unless legislation provides for such processing.

Objection to direct marketing: You may object to us using your personal information for direct marketing, and if you do, we will stop.

10. Where to lodge a complaint

We strive to deliver the highest levels of customer service. However, if you are ever unhappy with us, please contact us so we can investigate.

Location: 10^th Floor, 11 Alice Lane, Sandton, 2196

Postal Address: PO Box 4522, Johannesburg, 2000

Telephone: 0861 482 482

You can also contact our Information Officer or Deputy Information Officer at TUAPrivacy@transunion.com

You may complain to the Information Regulator:

Physical Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg

Postal Address: P.O. Box 31533, Braamfontein, Johannesburg, 2017

Email: POPIAComplaints@inforegulator.org.za.

Site: www.inforegulator.org.za

11. Changes to this privacy notice

We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or operational needs. Where material changes are made, we will take reasonable steps to inform individuals, which may include updating this notice on our website or communicating changes through appropriate channels.

The most current version of this Privacy Notice will always be available, and the effective date at the bottom of the notice indicates when the latest version came into effect.

Effective date: May 2026