Zest Life Investments (Pty) Ltd (‘Zestlife’) respects the rights to privacy and confidentiality of our potential and existing client’s personal information. We are committed to protecting your privacy and to ensure that your personal information is collected and used properly, lawfully and transparently.

This privacy notice is meant to help you understand how we collect, use, share and protect your personal information. Zestlife subscribes to the conditions of the Protection of Personal Information Act (POPIA) to make sure that you are always protected when supplying us with personal information.

The Protection of Personal Information Act 9 (POPIA) describes personal information as information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person.

What type of personal information do we collect?

The type of information we collect will depend on the purpose for which it is collected and used. We will only collect information that we need for that purpose. When personal information is collected, the company will indicate the purpose for the collection and whether the information required is compulsory or voluntary.

Examples of personal information include, but are not limited to, contact information, financial information, health related information, information relating to race, gender, age, identity number, name, language and nationality.

How we collect personal information?

The company collects information either directly from you (“the data subject”), the employer or through intermediaries. The source from which personal information was obtained, if not directly from the data subject, will be disclosed.

Use of personal information

After obtaining consent, the personal information collected or held by Zestlife may be used, stored, transferred or disclosed or shared only for the purposes for which it was collected or agreed with you. This may include:

  • For underwriting purposes;
  • To assess and process claims;
  • Providing on-going administration services for the duration of the contract;
  • Fulfilling a transaction on request of a data subject;
  • To respond to your inquiries and/or complaints;
  • To confirm and verify your identity or to verify that you are an authorised person for security purposes;
  • For the detection and prevention of fraud, crime, money laundering or other malpractice.
  • For any other purpose associated with your policy/contract or applicable legislation.
  • To identify product needs in the broader healthcare market.
  • To provide you with the products and services applicable to your relationship with Zestlife

Records of personal information will be retained for the period necessary for achieving the purpose for which the information was collected. Please note that you have a right to object to the processing of your personal information for example for purposes of direct marketing, unless consent was obtained from you.

Methods of processing

Data processing is carried out using computers and/or IT-enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In some cases, the data may be accessible to certain types of persons in charge, involved with the operations inside Zestlife (underwriting, claims, administration, marketing, etc.) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as data processors by Zestlife.

Processing information of a child

Zestlife takes the privacy of children very seriously. We will not require children under 18 to provide any personal information other than that which is reasonably necessary. If we determine that a data subject is under the age of 18, we will not use or retain his/her personal information without the parent or guardian’s consent.

We process personal information of children if the law permits this. We will only process the personal information of children if any one of more of the following applies:

  • A person with the ability to sign legal agreements has consented to the processing, being the parent or guardian of the child.
  • The processing is needed to create, use or protect a right or obligation in law, such as where the child is an heir in a will, a beneficiary of a trust, a beneficiary of an insurance policy or an insured person in terms of an insurance policy.
  • The child’s personal information was made public by the child, with the consent of a person who can sign legal agreements.
  • The processing is for statistical or research purposes and all legal conditions are met.

Analytics

  • Services contained in this section enable Zestlife to monitor and analyse web traffic and can be used to keep track of user behaviour.
  • Google Analytics may be used. This is a web analysis service provider that utilize the data collected to track and examine the use of the Zestlife website, to prepare reports on its activities to improve the site’s user experience and performance. Each web service provider is responsible for adherence to relevant data protection rules which can be obtained via their own Privacy
    Notice.

Cookies and usage data

  • A cookie is a small text file stored on your device by the website you are visiting.
  • There are two main types of cookies, i.e.
    • When you close your browser, some cookies are deleted. These are called session cookies.
    • Persistent cookies
    • Other cookies are stored on your device until they expire, or you choose to delete them. They are called persistent cookies. These cookies are sent back to use each time you visit our site.
  • The Zestlife website may make use of cookie and tracking technology, where information that you send while on the website, is saved on your hard drive. This allows the Zestlife website to recognise you on your next visit. This technology is useful for gathering information, such as the type of browser and operating system you use. The information will enable us to track the number of visitors to our website and understand how visitors use it. Personal information cannot be collected via cookie technology.
  • You can limit the collection of your information by disabling cookies on your browser. You may also be able to modify your browser settings to require your permission each time a site attempts to set a cookie. However, Zestlife relies on cookies to enable certain functionality. If you choose to disable cookies, you will still have access to the website and its functions, but some of the services available on our website may not work properly.

Disclaimer

The disclaimer set out below applies to this web site

  • Apart from the provisions of sections 43(5) and 43(6) of the Electronic Communications and Transactions Act, as amended, Zestlife nor any of its agents or representatives shall be liable for any damage, loss or liability of whatsoever nature arising from the use or inability to use this web site or the services or content provided from and through this web site. Furthermore,
    Zestlife makes no representations or warranties, implied or otherwise, that, amongst others, the content and technology available from this website are free from errors or omissions or that the service will be 100% uninterrupted and error free. Users are encouraged to report any possible malfunctions and errors to the webmaster.
  • Information, ideas and opinions expressed on this site should not be regarded as professional advice of Zestlife, but users are encouraged to consult professional advice before taking any course of action related to information, ideas or opinions expressed on this site.
  • Neither Zestlife nor any of its agents or representatives shall be liable for any damage, loss or liability of whatsoever nature arising from the use or inability to use this web site or the information on this web site.
  • We take reasonable and necessary precautions to secure your transactions on our website – however, we cannot guarantee the confidentiality of your transactions. Using this website is entirely at your own risk. Zestlife will not be held legally responsible for any personal information that you reveal to a third party, which has a link on the www.zestlife.co.za website. It is important that you refer to that third party’s privacy notice before you reveal any of your personal information.

Sharing of personal information

Zestlife will only share your personal information with third parties if you have consented to such disclosure or if this is permitted in terms of legislation. If consent has been obtained, the company may share your personal information with third parties who are involved in the delivery of services to you. We have agreements in place to ensure that they comply with the Protection of Personal Information Act, No 4 of 2013.

Where Zestlife discloses personal information to any third parties, the third party will be obliged to use that personal information only for the reasons and purposes it was disclosed for. We may be obliged to disclose your personal information to the extent that it is required to do so by law, in connection with any legal proceedings or prospective legal proceedings, or for the purposes of protecting the interest of clients, for example fraud prevention or to give effect to an agreement.

Securing personal information

Zestlife processes the data of data subjects in a proper manner and shall take appropriate security measures to prevent loss of, damage of personal information, unauthorised access, disclosure, modification, or unauthorised destruction of the data. The company will store all the personal information in secured environments, for example on secured servers in a protected data centre.

Employee Training on Cyber Security and Data Privacy

Employee Training on Cyber Security and Data Privacy forms part of ongoing compliance training. Cyber Security training is currently further required as a basic compliance training that all employees must complete. As part of the POPIA management programme, there is a specific focus on training, awareness as well as communication that will cover data privacy, data security and more detailed cyber security training as mandatory compliance training to all staff.

Centralised Cyber Security and Data Security Functions and Coordination

To deal with Cyber Security and Data Privacy, two separate centralised functions exist. The IT Security environment includes managing cyber security as a capability and the Data Management environment deals with the aspects of data privacy and extended data security and privacy which is enabled through IT security.

Updating this Notice

Please note that we may amend this Notice from time to time. Please check this website periodically to inform yourself of any changes.

Zestlife’s Privacy Policy

Our Privacy Policy governs the manner in which Zestlife treats your personal information, collected electronically when you use our website, to apply online for certain products and services, contact us electronically or register for one of the services we offer on the website.

How to Contact Us

This Privacy Policy applies to Zest Life Investments (Pty) Ltd, incorporating all its operating entities.

Please direct any questions, complaints or concerns regarding this privacy policy, data privacy and our treatment of your Personal Information to the following:

Tel: 021 180 4220
Email: info@zestlife.co.za

Upon receiving your request, we will contact you directly, investigate your request, and work to address your concerns. We reserve the right to take reasonable steps to verify your identity prior to granting access or processing changes or corrections.

Right to access and rectify and delete personal information collected

You have the right to request to review your personal information contained by Zestlife at any time to correct or update the information. If the purpose for which your personal information was requested initially does not exist anymore, for example you no longer have an active contract, you may request information held by the company to be removed. However, Zestlife can decline your request to delete the information from its records if other legislation requires the continued retention thereof or if it has been de-identified.

If you would like to obtain a copy of your personal information held by Zestlife, please complete our Information Request Form located at https://zestlife.co.za/legal-and-accounting/ and return it to info@zestlife.co.za.

If you would like to request a correction of your personal information held by Zestlife or the deletion thereof, please complete Form 2 Request for Correction or Deletion of Personal Information located at https://zestlife.co.za/legal-and-accounting/ and return it to info@zestlife.co.za.

POPI complaints procedure

You have the right to complain in instances where any of your rights under POPIA have been infringed upon. The organisation takes all complaints very seriously. POPI complaints must be submitted to Zestlife in writing. An example of a POPI Complaint Form can be found on https://zestlife.co.za/legal-and-accounting/. Please complete this form and return it to info@zestlife.co.za.

Objection to processing of personal information

If you wish to object to the processing of your personal information, please complete Form 1 Objection to Processing of Personal Information located at https://zestlife.co.za/legal-and-accounting/ and return it to info@zestlife.co.za.

Right to lodge a Complaint to the Information Regulator

Any person may submit a complaint to the Regulator alleging interference with the protection of the personal information of a data subject.

The Information Regulator contact details are:
Tel: 012 406 4818
Fax: 086 500 3351
Email: inforeg@justice.gov.za