Data Safety

EquiTech Global Solutions (Pty) Ltd (Registration No. 2026/049784/07), trading as HermSwift, is the responsible party for the personal information described in this policy, in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

Information We Collect

We collect information necessary to provide our services and comply with regulations. This includes identity details and biometric facial verification data (via our KYC process), contact information, and South African bank account details for purchase price payment.

How We Use Your Data

Your data is used exclusively for transaction processing, identity verification, fraud prevention, and communicating service updates. We never sell your personal information to third parties.

How Long We Keep Your Data

We retain your identity verification records and transaction history for seven years, consistent with South African financial record-keeping requirements under FICA. After this period, records are automatically and permanently deleted. You may request earlier deletion of your data, subject to this statutory retention requirement.

Data Security

We employ industry-leading technical and organisational measures to protect your data. All data is encrypted both in transit and at rest using AES-256 and TLS 1.3 standards. All processing and storage of your information takes place exclusively within South Africa.

Third Parties We Share Information With

To provide our services, we share limited information with carefully selected third-party service providers who assist us in delivering identity verification, payment processing, and secure data hosting. All third parties are contractually required to handle your information securely, to use it only for the specific purpose for which it was shared, and in accordance with POPIA. We do not sell your personal information to any third party, and we do not share it with any party for marketing purposes.

PayPal Data Handling

When you link your PayPal account, HermSwift receives your name, email address, and PayPal account identifier. This information is used exclusively to confirm that your linked PayPal account belongs to the same individual who has completed our identity verification process. We do not access, store, or transmit your PayPal password. We do not access your PayPal transaction history beyond what is required to complete the specific receivable purchase you initiate. PayPal account access is managed through PayPal's official authorisation framework.

Cross-Border Data Transfers

We do not transfer your personal information outside the Republic of South Africa. All identity verification, biometric processing, and data storage occurs on infrastructure located within South Africa.

Your Rights

Under POPIA, you have the right to access, correct, or request deletion of your personal data, and the right to object to our processing of your information in certain circumstances. You can contact our Information Officer at any time regarding your information.

Complaints

If you have concerns about how we handle your data, please contact our Information Officer at support@hermswift.com. You also have the right to lodge a complaint directly with the Information Regulator of South Africa if you believe your information has been handled unlawfully.

Contact Us

For any questions about this Privacy Policy or our handling of your personal information, please contact our Information Officer at support@hermswift.com.