Discovery Green | Privacy Statement

DEFINITIONS

"We", "us" and "our" refers to Discovery Green (Pty) Ltd, registration number 2023/647514/07, a private company with limited liability registered under the company laws of the Republic of South Africa. The principal place of business is 1 Discovery Place, Sandton, Johannesburg, 2196.

"You" and "your" refers to you as a potential client, client or authorised representative of such client or potential client (as relevant) of Discovery Green.

"Your personal information" refers to all personal information the Discovery Group has on you or data subjects that are related to you or under your authority (other data subjects), as relevant. It includes:

• Your name
• Identity or registration number
• Unique identifiers such as your identity number, registration number, VAT number or contact numbers;
• Addresses.

"Process information" means the automated or manual activity of collecting, recording, organising, storing, updating, distributing, and removing or deleting personal information.

TERMS AND CONDITIONS

1. When you engage with us, you trust us with personal information about yourself or other data subjects, as relevant. We will process your and their information for the purposes set out in this Privacy Statement. We are committed to protecting your right to privacy. The purpose of this Privacy Statement is to set out how we collect, use, share and otherwise process your personal information, in line with the Protection of Personal Information Act (POPIA).
2. It is voluntary to accept these terms and conditions, and in so doing, you agree to be bound by the terms of our Privacy Statement. We do, however, require your acceptance to provide services within the Discovery Group. This means that if you do not accept the terms of this Privacy Statement, we cannot engage with you. The acceptance of these terms and conditions and the permission given to process your personal information will continue after your death or after the liquidation of a legal entity.
3. You agree that any personal information you provide to us is information that you voluntarily provide. You also agree that if you don't provide the necessary personal information, we may not be able to comply with our obligations.
4. We will keep your personal information confidential. You may have given us this information yourself when you complete an application or enquire about a product, or we may have collected it from other sources, such as verification bureaus. If you share your personal information with any third parties, we will not be responsible for any loss or harm suffered by you, your spouse, your dependents, your beneficiaries, your directors, your shareholders, or your employees, as applicable.
5. 5You warrant that when you give us personal information about other data subjects, you have received their permission to share their personal information with us for the purposes set out in this Privacy Statement or any other related purposes.
6. You understand that when you include other data subjects on your application to or contract with any product provider within the Discovery Group, we will process their personal information for the purposes set out in this Privacy Statement.
7. You agree that we may process your personal information for the following purposes, as relevant to our relationship with you:

   7.1 Complying with compulsory requirements under relevant laws;

   7.2. Administering and managing systems, websites and mobile applications;

   7.3. For purposes of fraud prevention;

   7.4. Assisting in law enforcement, anti-money-laundering and counter-terrorist financing initiatives;

   7.5. Complying with information requests by regulators;

   7.6. To contract with you;

   7.7. To manage our relationship with you;

   7.8. To verify or supplement information provided by you;

   7.9. Enabling any entity within the Discovery Group and any third-party provider or any financial services provider or its representative approved by the Discovery Group to advise you of, or offer to you, any enhanced benefits or new products that become available from time to time which you may become entitled to or qualify for;

   7.10. Providing other product providers in the Discovery Group that you currently subscribe to with information necessary for the operation of their products; and

   7.11. Providing relevant information, including your personal information, to a contracted third party who requires such information to render a service to you in relation to your Discovery Green product or your policies with the Discovery Group, provided that such contracted third party agrees to keep the information confidential.

8. Additionally, if a third party asks us for any of your personal information, we will share it with them only if:

   8.1 You have already given your consent for the disclosure of this information to that third party;

   8.2. We have a legal or contractual duty to give the information to that third party; or

   8.3. For any of the purposes set out in this Privacy Statement.

9. You confirm that we may share your personal information within the Discovery Group of companies for:

   9.1 Administration;

   9.2 Fraud prevention; and

   9.3. Where necessary to provide Group-wide services, benefits and infrastructure to help you in your personal or professional capacity.

10. You consent to us sharing your personal information relating with Eskom Holdings SOC Ltd (Eskom) or your electricity distribution company for the purpose of obtaining billing, consumption and other related information from Eskom or the electricity distribution company for the purpose of contracting with you and managing your products with us.
11. You consent and agree that we may process your information, including personal information, to conduct sanction screening against all mandatory and non-mandatory sanctions lists;

    11.1. You also consent to us communicating such personal information to local and international Regulatory Bodies as well as to other entities in the Discovery Group if you are matched to one of these sanctions lists;

    11.2. You understand that we may terminate this agreement with immediate effect if you are found to be on a sanctions list.

12. You also confirm that we may share, both within the Discovery Group and with our service providers, and combine all your personal information, including your unique identifiers, for any one or more of the following purposes directly, or through a third party:

    12.1. Market, statistical, and academic research, including cross-company analytics;

    12.2. To customise and enhance our benefits and services to meet your needs; and

    12.3. To market our services to you.

13. You agree that your personal information may be shared with third parties such as academics and researchers, including those outside South Africa. We ensure that academics and researchers will keep your personal information confidential, and all data will be made anonymous to the extent possible and where appropriate. If we publish the results of this research, you will not be identified by name. No personal information will be made available to a third party unless that third party has agreed to abide by the strict confidentiality protocols that we require.
14. If we want to share your personal information for any other reason, we will do so only with your permission.
15. We have a duty to take all reasonably practicable steps to ensure your personal information is complete, accurate, not misleading and updated on a regular basis. To enable this, we will always try to obtain personal information from you directly. Where we are unable to do so, or where we need to verify your personal information, we will make use of verifiable independent third-party data sources.
16. You authorise us to obtain and share information about your creditworthiness or the creditworthiness of any payer on your policy with any credit bureau or credit provider's industry association or industry body. This includes information about credit history, financial history, judgments, default history, and sharing of information for purposes of risk analysis, tracing, and any related purposes.
17. We will keep you updated about any offers and new products that we make available from time to time. Any entity within the Discovery Group and contracted third-party service providers may communicate with you about these offers.
18. Please let us know if you do not wish to receive any direct telephone marketing from the Discovery Group.
19. You may opt out of Electronic Marketing by:

    19.1 Logging into your profile on www.discovery.co.za or the Discovery App; or

    19.2. Following the unsubscribe prompts on the electronic marketing communication received. We will store your personal information for the purpose of actioning this request and action it as soon as reasonably possible.

20. You have the right to know what personal information we hold about you. If you wish to access this information, please complete the Access Request form. This form is available on the Discovery website at https://www.discovery.co.za/corporate/privacy/. We will take all reasonable steps to confirm your identity before providing details of your personal information. We are entitled to charge a fee for this service and will let you know what it is at the time of your request.
21. We may keep your personal information until you ask us to delete or destroy it. This is unless the law allows us to keep it or where we deem it necessary to keep for the pursuit of our legitimate business purposes.
22. You have the right to ask us to update, correct or delete your personal information by completing the Request for Deletion or Correction of Information Form available on the Discovery Website at https://www.discovery.co.za/corporate/privacy/.
23. You have the right to object to the processing of your personal information by completing the Objection to Processing form available on the Discovery website at https://www.discovery.co.za/corporate/privacy/.
24. Where we cannot delete your personal information, we will take all steps to make it anonymous.
25. We are required to collect and keep personal information in terms of the following laws, among others:

    25.1 The Companies Act 71 of 2008

    25.2 The Electronic Communications and Transactions Act (ECT)

    25.3 The Financial Intelligence Centre Act (FICA)

    25.4 The Financial Advisory and Intermediary Services Act (FAIS)

    25.5 The National Credit Act (NCA)

    25.6 The Consumer Protection Act (CPA)

26. You agree that we may transfer your personal information outside South Africa:

    26.1 If you give us an email address that is hosted outside South Africa; or

    26.2 To manage certain services, for example, cloud services, we will ensure that any country, company or person to whom we pass your personal information to agrees to treat your information with the same level of protection that we provide.

27. If we become involved in a proposed or actual merger, acquisition or any form of sale of any assets, we have the right to share your personal information with third parties in connection with the transaction. In the case of a merger, acquisition or sale, the new entity will have access to your personal information. The terms of this Privacy Statement will continue to apply.
28. We may change this Privacy Statement at any time.
29. 29. If you believe that we have used your personal information contrary to this Privacy Statement, you have the right to lodge a complaint with the Information Regulator. However, we encourage you to first follow our internal complaints process to resolve the complaint or contact our Information Officer at privacy@discovery.co.za.If, thereafter, you feel that we have not adequately resolved your complaint, please contact the contact the Information Regulator.

The contact details are:

The Information Regulator (South Africa)

JD House
27 Stiemens Street
Braamfontein
Johannesburg

P.O. Box 31533
Braamfontein
Johannesburg
2001
POPIAComplaints@inforegulator.org.za or PAIAComplaints@inforegulator.org.za